This document regulates the Privacy Policy of the website maintained in the domain kongres.ptgp.eu (hereinafter referred to as the Service). Polskie Towarzystwo Ginekologii Plastycznej Sp. z o.o. (hereinafter referred to as the Administrator) maintains all due diligence in order to respect the privacy of the Website Users.
Administrator of personal data contained in the website kongres.ptgp.eu is Polskie Towarzystwo Ginekologii Plastycznej Sp. z o.o. with its registered office in Szczecin at Mazurska Street 7/4, postal code 70-424. The correctness of the processing of personal data is supervised by the appointed Data Protection Officer (DPO). Contact to IOD:...
We process Users' personal data in systematized collections, which we define by the purpose of their processing. We process this data to the extent necessary for the achievement of the established purpose. The purpose and scope of the processed specific data varies from service to service — detailed information is presented for each service in the registration process for a given service or in the terms and conditions of the service.
We process your data that you provide or make available to us in the history of browsing websites and web applications as part of the use of services — PTGP services or applications. We also process data collected during your activity on the services — websites and applications, including pages and places visited, time of visit to a given place, your clicks, how you use the services, information about the terminal device or browser, including its location.
We create and process the data contained in the event logs. These are the internal event logs of the Website server, automatically recording the page requests sent when Users visit its websites. The system logs contain the page request sent by the User, the IP address, the browser type, the browser language, the date and time of the request and at least one “cookie” file that can uniquely identify the User's browser.
In addition, the possible purposes of processing personal data are:
assessment and analysis of activities, including profiling (automated processing of personal data for the presentation of tailored advertising or market and statistical analyses)
fulfilling legal obligations arising from the provisions of generally applicable law, e.g. accounting or tax law
Investigating and responding to claims
We always inform you about the purposes of processing personal data before collecting this data or at the time of its collection.
The administrator of personal data takes special and due care to protect the rights of Users whose data are subject to processing, and in particular ensures that these data are:
processed lawfully, honestly and transparently
collected for lawful purposes, which we inform you about when collecting this data
not subjected to further processing incompatible with the purposes stated in the information obligation
correct and updated if necessary
substantively correct and adequate in relation to the purposes for which they are processed
adequately protected against unauthorized access, destruction, disclosure and unlawful use
stored in a form that allows the identification of data subjects for no longer than is necessary to achieve the purpose of the processing of which we inform you before collecting the personal data or during this process
The personal data administrator reserves that he may entrust the processing of personal data of Users whose data he administers to other companies in order to properly perform by these companies activities related to the administration, maintenance and management of the Website, as well as with the assertion of claims and clarification of the circumstances of unauthorized use of services provided electronically. Your data will not be transferred outside the European Economic Area.
When collecting personal data, we always inform you about the legal basis for their processing. When we inform about:
Article 6 (1) (a) GDPR — we process personal data on the basis of the consent received
Article 6 (1) (b) GDPR — we process personal data because they are necessary for the performance of the contract or to take action before its conclusion, upon request received
Article 6 (1) (c) GDPR — we process personal data in order to fulfill a legal obligation
Article 6 (1) (f) GDPR — we process personal data in order to fulfill legitimate interests, of which we always inform
We may also process personal data on the basis of other specific regulations, such as the Electronic Services Act.
The duration of the processing of personal data depends on the basis and purpose of their processing of this data. We always inform you about it before collecting personal data or during this process. Examples of retention periods for personal data:
Personal data processed in connection with marketing activities will be processed until we receive an objection to the processing of this data.
Personal data processed on the basis of consent to the processing of these data will be processed until its withdrawal.
Personal data processed using cookies and similar technologies will be processed until these files are deleted using the browser or device settings and you object to their processing.
Personal data processed in connection with the implementation of applicable legal provisions (e.g. for the purpose of issuing an invoice) will be processed within the period required by generally applicable accounting and tax legislation.
Personal data related to the provision of services, including sales, will be kept until claims are possible from or by us, i.e. in accordance with generally applicable limitation periods for claims.
In connection with the processing of personal data, the persons whose personal data we process have rights related to this processing. The possibility of exercising the following rights depends on the legal basis for the processing of personal data.
Right of access to data
The data subject has the right to obtain confirmation from us whether personal data concerning him or her are being processed. If this is the case, it is entitled to access them and additional information (including objectives, categories, recipients, retention, permissions, source). Upon receipt of such a request, we are obliged to provide you with a copy of the personal data subject to processing. If such a request is made electronically and if we do not receive any other objection, we will also provide the information electronically.
The duration of the processing of personal data depends on the basis and purpose of their processing of this data. We always inform you about it before collecting personal data or during this process. Examples of retention periods for personal data:
Right to rectification
The data subject has the right to request from us the rectification of personal data concerning him or her that is incorrect without delay. Taking into account the purposes of the processing, it has the right to request the completion of incomplete personal data, including by submitting an additional statement.
The right to be forgotten
The data subject has the right to request that we delete the personal data concerning him or her without delay. We are obliged to delete personal data without undue delay if one of the following circumstances occurs:
the consent to the processing of personal data has been withdrawn and there is no other basis for processing
filed an effective objection to the processing
personal data were processed unlawfully
personal data must be deleted in order to comply with a legal obligation
the data were collected in connection with the provision of information society services
Right to restriction of processing
The data subject has the right to request us to restrict processing in the following cases:
the data subject questions the accuracy of the personal data — for a period allowing us to verify the accuracy of the data;
the processing is unlawful and the data subject objects to the erasure of the personal data, requesting instead the restriction of their use;
we no longer need the personal data for the purposes of processing, but it is necessary for the data subject to establish, assert or defend claims;
the data subject has lodged an objection pursuant to Article 21 (1) of the GDPR to the processing — until it is established whether the legitimate grounds on our part of the controller override the grounds for the objection of the data subject.
Right to object
The data subject has the right at any time to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her based on Article 6 (1) (f) of the GDPR (legitimate interest of the controller), including profiling. We are then no longer allowed to process this personal data unless we demonstrate compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject or grounds for establishing, asserting or defending claims. Also, if the data subject objects to processing for direct marketing purposes (including profiling for marketing purposes), personal data may no longer be processed for such purposes.
Automated decisions, including profiling
The data subject shall have the right not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects or similarly significantly affects the data subject. The law shall not apply if this decision:
is necessary for the conclusion or performance of a contract between the data subject and us;
is permitted by Union law or the law of the Republic of Poland and which provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or
is based on the explicit consent of the data subject.
The desire to exercise any of the rights should be reported in writing to the Controller's contact address or by e-mail to the address of the DPO, which were indicated in the first point of this Policy. If there are reasonable doubts about your identity when submitting the aforementioned requests, the Administrator reserves the right to request additional information necessary to confirm it. If you consider that the processing of your data is carried out in violation of the regulations, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.
Finally, it is worth emphasizing that the privacy policy document should be regularly updated to comply with current regulations and data processing practices in the organization.