Privacy Policy

Website Information

This is an educational and information website for medical practitioners, pharmacists and patients; it also provides information about EGIS Polska Sp. z o.o.

Egis Polska sp. z o.o. having its registered office in Warsaw, ul. Komitetu Obrony Robotników 45D, 02-146, to comply with the obligation arising from the applicable regulations on personal data protection, including the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, “GDPR”), would like to inform you how it processes and protects your personal data.

The information provided in the Privacy Policy will help you understand what personal data are collected and processed by Egis Polska sp. z o.o. and for what purpose, and explains your rights related to personal data protection.

The controller of your personal data is Egis Polska sp. z o.o. with its registered office in Warsaw, ul. Komitetu Obrony Robotników 45D, 02-146 Warszawa (hereinafter: “Egis”).

You can contact us with any questions regarding personal data protection at the details below:

By email: gdpr@egis.pl
By phone: (+48) 22 417 92 00
By post: ul. Komitetu Obrony Robotników 45D, 02-146 Warszawa
By contact form available at: https://pl.egis.health/kontakt.


Information for healthcare professionals whose personal data have been obtained and are processed by Egis Polska sp. z o.o.

Scope of the data.

Egis collects the personal data directly communicated by you and obtained from other sources such as publicly available databases on healthcare professionals, e.g. http://rejestr.nil.org.pl. Depending on the nature of your interactions with Egis, Egis may collect the following types of information:

- Your name;
- Contact details: mailing address, workplace address, telephone number, email address;
- Identification details: medical licence number, PESEL number;
- Professional details: name and address of workplace, education, specialization, position or function;
- Details of marketing activities initiated by Egis, including a record of meetings with Egis representatives;
- Details of participation in events organized or supported by Egis, including conferences or training programmes;
- Transaction details of activities performed by you for Egis, such as bank account number, name of the tax office;
- Details of the nature and value of transfers made to you by Egis;
- Details of your activities related to the use of programs and applications supported by Egis.

Depending on the nature of your interactions with Egis, Egis may process your personal data in order to:

1. Answer your queries regarding Egis products (legal basis: Art. 6(1)(f) GDPR),

2. Provide educational and information materials about medicinal products (legal basis: Art. 6(1)(f) GDPR)
Hold meetings with specialists in Egis products (legal basis: Art. 6(1)(f) GDPR),

3. Report adverse events reactions, make complaints and implement other pharmacovigilance activities (legal basis: Art. 6(1)(c) GDPR in connection with the provisions of the Act of 6 September 2001 - Pharmaceutical Law),

4. Perform contracts and agreements (legal basis: Art. 6(1)(b) GDPR),

5. Keep a record of samples of medicinal products provided to you (legal basis: Art. 6(1)(c) GDPR in connection with the provisions of the Act of 6 September 2001 - Pharmaceutical Law),

6. Organize, award and financially settle competitions and quizzes organized by Egis, and present prizes to their winners (legal basis: Art. 6(1)(f) GDPR or: Art. 6(1)(c) GDPR in connection with the provisions of the Act on Accounting of 29 September 1994),

7. Arrange your participation in conferences and training programmes (legal basis: Art. 6 (1) (b) GDPR or legal basis: Art. 6(1)(f) GDPR).

8. Manage the financial formalities connected with your activities financed by Egis (legal basis: Art. 6 (1)(c) GDPR),

9. Disclose information on the transfers of funds made to you by Egis (legal basis: Art. 6(1)(a) GDPR),

10. Allow the use of Egis programs and applications (legal basis: Art. 6(1)(f) GDPR),

11. Analyse your use of Egis programs and applications, browsing the websites and accounts managed by Egis (legal basis: Art. 6(1)(f) GDPR),

12. Pursue legitimate interests of the Egis: to ensure the security of services provided by Egis, to carry on communication with you and provide information to you, to analyse your activities related to Egis products and services, to pursue potential legal claims (legal basis: Art. 6(1)(f) GDPR).

Your personal data may be processed by Egis on the basis of:

1. Your consent (Art. 6(1)(a) GDPR): Egis may process your personal data on the basis of your consent to data processing. For the data collected based on your consent, you may withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing done on the basis of your consent before its withdrawal. Depending on the communication channel, Egis will specify how the given consent may be withdrawn; however, you may withdraw your consent at any time using the contact details provided above.


2. Compliance with the legal obligations that apply to Egis (Art. 6(1)(c) GDPR): In some situations Egis is obliged by law to collect certain personal data, in particular where it is necessary to comply with the obligations related to financial and tax reporting, pharmacovigilance activities and keeping a register of samples of medicinal products provided by Egis. In such situations you have no right to object to data processing nor request that your data be deleted. However, you still have the right to access and correct such data; you also enjoy other rights as outlined below.

3. Performance of a contract with you (Art. 6(1)(b) GDPR): Egis may process your personal data where it is needed to perform a contract between you and Egis[U1] . If the data are processed for that reason, you may not have the right to object or, should you object, it will not be possible to perform the contract. However, you still have the right to access and correct such data; you also enjoy other rights as outlined below.

4. Legitimate interests of Egis (Art. 6(1)(f) GDPR): Egis may process your personal data to pursue its legitimate interests as long as your fundamental rights and freedoms do not override such interests. Egis may process your personal data to carry on communication with you, provide information to you and analyse your activities related to Egis products and services.

Disclosure of the data.

To pursue these activities, Egis may use the services of other entities acting in Egis’ name and at Egis’ request (hereinafter: “Egis Suppliers”). To the extent necessary to deal with your request, perform a contract, provide a service or pursue a legal claim, Egis may disclose your personal data to other entities such as hotels, carriers, organizers of the events you participate in, consulting firms and Egis Group subsidiaries [https://hu.egis.health/contact]. If you give consent to the disclosure of information about the value of transfers made to you by Egis, your personal data: [name, address of your principal workplace, costs incurred in connection with the events, fee for services] may be disclosed by Egis to the general public by uploading them to a publicly available Egis website.

Transfer of data to third countries.

Your personal data will not be transferred to recipients in countries outside the European Economic Area.

Data storage period.  

Egis will store your personal data for a period based on your interactions with Egis, for a period required by law, as well as for the period specified in the regulations and necessary to establish, pursue or defend claims. Egis may store your personal data for the following periods:

- Until your consent to the processing of your personal data is withdrawn,

- 10 years after expiry of the marketing authorization for the data obtained during pharmacovigilance activities; thereafter these data will be erased or anonymized ,
- 5 years counting from the beginning of the year following the financial year when the document with your personal data has been approved, for the purposes of financial and tax reporting if the data are related to such activities by Egis,
- 6 years from your last interaction with Egis, for statistical and analytical purposes and for the establishment, exercise or defence of legal claims.

Information on the voluntary provision of your personal data. Your personal data are in principle given freely (for example if the personal data are processed in connection with queries or contracts), but their provision is necessary to deal with your request, provide a service or perform a contract with Egis. However, your personal data must be provided if so required by law (e.g. by the provisions of the Act of 6 September 2001 - Pharmaceutical Law or the provisions of the Act of 29 September 1994 on Accounting), for example when Egis gives you free samples of medicinal products.

Automated decision making. Your personal data will not be used for decisions based solely on automated processing, including profiling, which produces legal effects concerning you or affects you in a similarly significant way.

You may at any time exercise the following rights:

a)      right to access your personal data

b)      right to correct your personal data

c)      right to restrict the processing of your personal data

d)      right to withdraw your earlier consent to the processing of your personal data

e)      right to delete your personal data

f)       right to transfer your personal data

g)      right to object at any time to the processing of your personal data

h)      right to object[U1] 

To exercise any of these rights you need to contact the controller either by sending a relevant request to our address (ul. Komitetu Obrony Robotników 45D, 02-146 Warszawa) or by sending an email to: gdpr@egis.pl.

If you submit a request concerning the processing of your personal data, you may be asked by the controller to answer several questions related to your data for identification purposes.

You also have the right to lodge a complaint concerning the processing of your personal data by the controller to the President of the Personal Data Protection Office (address: ul Stawki 2, 00-193 Warszawa).

The controller of the personal data of those who use the contact form available at:  https://pl.egis.health/kontakt is Egis Polska sp. z o.o. with its registered office in Warsaw, ul. Komitetu Obrony Robotników 45D, 02-146 Warsaw (“Egis”).
Email: gdpr@egis.pl
 
Your personal data provided in the contact form will be processed pursuant to the provisions of the General Data Protection Regulation (“GDPR”) in order to contact you and deal with your query under Art. 6 (1(f) GDPR, i.e. for the purpose of legitimate interests pursued by Egis as the controller.

1. Your personal data will be processed until your query sent via the contact form is dealt with, and thereafter until the period of limitation for lodging potential legal claims expires.

2. You have the right to access, correct, delete your personal data and to restrict their processing.

3. You also have the right to object to the processing of your personal data.

4. The data provided by you will be made available only to our subcontractors and competent authorities under the applicable regulations.

5. Decisions relating to your query will not be automated.

6. Provision of the data required in the contact form is voluntary, but necessary for dealing with your query.

7. You also have the right to file a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data is unlawful.

 

 

Egis Polska sp. z o.o. uses appropriate technical and organizational measures to keep your personal data secure and protects the data against unauthorized access, loss or destruction. To ensure the security of your personal data Egis Polska sp. z o.o. has implemented appropriate personal, organizational, technical (IT) and physical measures.

Scope of the data:

Egis collects personal data communicated by you to fulfil its legal obligations and to allow for further contacts related to the reporting of adverse events reactions, queries and complaints.  The Pharmaceutical Law does not require providing a patient’s personal data to effectively report an adverse event reaction, but the report may include such data. If a report is made by a person who is not a healthcare professional, it may include his or her data such as: name or contact details (for example of the patient, a relative or carer). Reports made by a healthcare professional will include the personal data of the reporting person.

Purposes and legal basis of data processing.

All your personal data communicated in your query will be processed to fulfil the pharmacovigilance obligations of the controller or respond to a complaint or a query regarding a product.

All your personal data communicated in your query except the telephone number will be processed under Art. 6 (1)(c) GDPR in connection with the provisions of the Act of 6 September 2001 – Pharmaceutical Law.

The legal basis for the processing of your telephone number is a legitimate interest of the controller who needs to be able to contact the reporting person (Art. 6 (1)(f) GDPR).

Disclosure of the data.

Your data may be disclosed to entities from the controller’s capital group Egis Group subsidiaries [https://hu.egis.health/contact] and to entities processing the data at the controller’s request, such as IT and archiving service providers.

Transfer of data to third countries.

Your personal data will not be transferred to recipients in countries outside the European Economic Area.

Your personal data may be forwarded to the European Medicines Agency (EMA) to fulfil the legal obligations arising under the Act of 6 September 2001 – Pharmaceutical Law.

Data storage period.

Your personal data provided in your query will be processed for the entire period when the reported medicinal product is manufactured, and thereafter for 10 years from the expiry date of the last manufactured batch.  

Automated decision making.

Your personal data will not be used for decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Your rights.

The rights you can exercise are outlined further below.

1. Your personal data will be processed in accordance with the provisions laid down in the General Data Protection Regulation (hereinafter: “GDPR”) to conduct the recruitment process pursuant to:


- Art. 6(1)(c) GDPR, i.e. fulfilment of the obligations arising from the provisions of labour law - Art. 221 § 1 of the Labour Code (name, date of birth, contact details, education, professional qualifications, employment record)  
- Art. 6(1)(a) GDPR, i.e. based on your consent – regarding the data outside the scope defined in Art. 221 § 1 of the Labour Code; and if you have given your consent to the processing of your personal data for future recruitment purposes[U1] )
2.Your personal data will be processed during the recruitment process and for 6 months after it ends. If you have given a separate consent for the processing of your personal data for future recruitment purposes, your data will be retained until your consent is withdrawn, however not longer than for 2 years.


3. Your data will be made available solely to Egis’ subcontractors. Your data may be made available to Egis Group subsidiaries [https://hu.egis.health/contact] to the extent necessary to conduct the recruitment process.


4. Decisions concerning the recruitment process and its result will not be automated.


5. Provision of your personal data as defined in the Labour Code is necessary for the recruitment process. Provision of additional personal data is voluntary and requires your consent.

Scope of the data.

Egis collects your personal data directly communicated by you and those obtained from the entity you represent. Your personal data collected by Egis include your name and other business contact data: mailing address, workplace name and address, business phone number, email address, position.

Purposes and legal basis of data processing.

Your personal data communicated to Egis will be processed where it is necessary for Egis’ legitimate interests (Art. 6(1) (f) GDPR), which includes day-to-day business contacts, offering and ordering products or services and confirming completion of business activities between Egis Group subsidiaries, such as contracts.

 

Disclosure of the data.

To pursue these activities, Egis may use the services of other entities acting in Egis’ name and at Egis’ request (hereinafter: “Egis Suppliers”). In some situations, to the extent necessary to deal with your request, perform a contract or provide a service, Egis may disclose your personal data to other entities such as hotels, carriers, organizers of events and Egis Group subsidiaries [https://hu.egis.health/contact].

Transfer of data to third countries.

Your personal data will not be transferred to recipients in countries outside the European Economic Area.

Data storage period.  

Egis will store your personal data for a period based on your interactions with Egis, for a period required by law and which is necessary for the establishment, exercise or defence of legal claims, i.e. no longer than for 5 years after the end of your cooperation with Egis.

Automated decision making.

Your personal data will not be used for decisions based solely on automated processing, including profiling, which produces legal effects concerning you or affects you in a similarly significant way.

Your rights. The rights you can exercise are outlined further below.



WarningYour browser is out of date. Please, use an updated version! Chrome || Firefox