Documents
Privacy policy
The content will be prepared by the client's lawyer. Below is the structure of the document.
1. Data controller
- Name, address and registration details of the controller
- Contact details for data protection matters
- Data protection officer, if appointed
[TO BE CONFIRMED - text from the lawyer]
2. Purposes of processing
- Replying to enquiries sent through the contact form
- Fulfilling shop orders and managing customer accounts
- Issuing invoices and accounting obligations
- Handling complaints and withdrawals from contracts
- Verifying professional status for medical devices with restricted sale
[TO BE CONFIRMED - text from the lawyer]
3. Legal bases
- Performance of a contract or steps prior to entering into it (Art. 6(1)(b) GDPR)
- Legal obligation (Art. 6(1)(c) GDPR)
- Legitimate interests of the controller (Art. 6(1)(f) GDPR)
- Consent, where required (Art. 6(1)(a) GDPR)
[TO BE CONFIRMED - text from the lawyer]
4. Recipients
- Hosting and IT service providers
- Payment operator
- Courier companies and parcel locker operator
- Accounting office
- Transfers outside the EEA, if any
[TO BE CONFIRMED - text from the lawyer]
5. Retention period
- Retention period for each purpose of processing
[TO BE CONFIRMED - text from the lawyer]
6. Your rights
- Access, rectification, erasure, restriction of processing
- Data portability and objection
- Withdrawal of consent
- Complaint to the Polish data protection authority (UODO)
[TO BE CONFIRMED - text from the lawyer]
8. Changes to this policy
- Effective date and how changes are announced
[TO BE CONFIRMED - text from the lawyer]