PROCESSING OF PERSONAL DATA

With respect to the application of Regulation of the European Parliament and of the Council (EU) 2016/679 from April 27, 2016 with the effect from May 25, 2018 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and in view of the repeal of Directive 95/46/WE (General Data Protection Regulation) (“GDPR”) THE POLISH SOCIETY OF PHARMACOVIGILANCE with its registered office at Jagiellońska 78/1.80 street, 03-301 Warsaw, Poland hereby brings to the attention the following information on the processing of personal data.

1. THE PERSONAL DATA CONTROLLER
The Administrator of your personal data is THE POLISH SOCIETY OF FOR PHARMACOVIGILANCE (hereinafter referred to as the “Administrator”).
You may contact the Administrator as follows:
a) email address: biuro@ptbfarm.pl;
b) corresponding address: Jagiellońska 78/1.80 street, 03-301 Warsaw, Poland
The Administrator has not established the Data Protection Officer. In all matters related to the processing of your personal data within the activity of the Administrator, you may contact us by:
a) email address: biuro@ptbfarm.pl;
b) corresponding address: Jagiellońska 78/1.80 street, 03-301 Warsaw, Poland.

2. THE PURPOSE AND THE BASIS FOR PROCESSING PERSONAL DATA
The extent of your personal data processed by the Administrator covers data such as the first and last name, email address, phone number, corresponding address, profession, and bank account number.
Providing personal data is voluntary; however, in the case of not providing mandatory personal data, it will not be possible to become a member of the Administrator.
The Administrator collects personal data directly from you, not from external sources.
The Administrator processes your personal data for the following purposes:
a) acceptance of the new member of the Administrator;
b) registration for an event organized by the Administrator;
c) accepting membership fee.

3. RECIPIENTS OF THE PERSONAL DATA
In regard to the processing of personal data in line with the above-stated objectives, your personal data may be made accessible to:
a) entities and state authorities authorized to receive your personal data in accordance with the relevant provisions of law;
b) entities processing your personal data on behalf of the Administrator on the basis of an agreement/clause on outsourcing of personal data processing (so-called data processors) concluded with the Administrator, i.e., ZAGCOM.PL with its registered office at Anny Boskiej 20 street, 24-100 Puławy. The Administrator does not transfer your personal data outside the European Economic Area and to international organizations.

4. THE DATA RETENTION PERIOD
Your personal data will be processed for as long as is necessary for the realization of the objectives indicated in point 2, i.e., for the duration of membership, the duration that is necessary to adopt a resolution on the admission of new Administrator’s members, the duration that is necessary to organize such an event.

5. RIGHTS LINKED WITH THE PROCESSING OF PERSONAL DATA
In regard to the processing your personal data by the Administrator you are entitled to:
a) access the data (Article 15 of the GDPR)
It is the right to obtain from the Administrator confirmation whether your personal data are processed and the right to access such data (including copy thereof) and particularly to the following information: (i) what are the objectives to process your personal data, (ii) what are the categories of the personal data being processed, (iii) about the recipients or categories of recipients to whom the Administrator disclosed your personal data or to whom or intends to disclose such data, (iv) about the possibility of exercising the rights regarding personal data protection and how these right will be implemented in practice, (v) about the right to lodge a complaint to the supervisory authority, (vi) about profiling as well as the consequences of such processing.

b) the right of rectification (Article 16 of the GDPR)
It is the right to request from the Administrator to rectify without delay inaccurate or incomplete personal data.

c) the right to erase personal data (Article 17 of the GDPR)
It is the right to request from the Administrator to erase without delay personal data (so-called “the right to be forgotten”).
In such a situation the Administrator is obliged to erase your personal data on the condition that one of the following prerequisites is met: (i) the personal data is not needed anymore to the purposes for which they have been collected, (ii) the permit for processing personal data has been withdrawn, and there is no further legal basis for processing such data by the Administrator, (iii) the personal data has been processed unlawfully, (iv) the personal data must be erased to meet the legal obligation.
The implementation of the right to erase the personal data is not possible if the Administrator is required under provisions of law to further processing of personal data to the extent determined by the relevant provision of law or for purposes necessary for the establishment of legal claims or defenses.

d) the right to restrict the processing of personal data (Article 18 of the GDPR)
It is the right to request from the Administrator to restrict the processing of your personal data in the following cases: (i) if you question the accuracy of the personal data that is being processed by the Administrator, (ii) your personal data is being processed unlawfully, (iii) your personal data is no longer needed by the Administrator but you need it for purposes necessary for the establishment of legal claims or defenses.
In the case of exercising the right to restrict the processing of personal data, the Administrator may process your personal data, with the exception of storage, solely with your consent or for purposes necessary for the establishment of legal claims or defenses or to protect the right any other natural or legal person or on grounds of major needs of public interest.

e) right to object the processing (Article 21 of the GDPR)
You have the right at any time to raise objections to the processing of data which is based on the legitimate interest of the Administrator (i.e., under Article 6(1)f of the GDPR). In such a situation, the Administrator will not be able to process data for these purposes, unless there are compelling, legally justified reasons or the Administrator needs such data for raising claims.
The right to raise objections to the processing of data shall not apply in the case of: (i) the processing of personal data is based on the consent – in this case the consent may be withdrawn, (ii) the processing of data is necessary for the implementation of the agreement of which you are a party, (iii) the data processing is necessary for compliance with a legal obligation.

f) right of data portability
It is the right to obtain in a structured, commonly used format personal data provided to the Administrator and to request to move such data to another Administrator, as far as it is technically feasible. This right shall be granted if the data is being processed on the basis of consent or with reference to the agreement.

g) the right of withdrawal (Article 7 of the GDPR)
In cases when the processing of your data is based on the Article 6(1)a of the GDPR, i.e., consent to the processing of personal data, you have the right to withdraw such consent at any time. The withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

6. IMPLEMENTATION OF THE RIGHTS
You are entitled to report the implementation of your rights as referred to point 5 in the following way:
a) email address: biuro@ptbfarm.pl;
b) corresponding address: Jagiellońska 78/1.80 street, 03-301 Warsaw, Poland.

7. COMPLAINT TO A SUPERVISORY AUTHORITY
In case of recognizing that the processing of your personal data by the Administrator infringes the rules of the GDPR, you are entitled to lodge a complaint to a supervisory authority, i.e., to the President of the Personal Data Protection Office.

8. AUTOMATED PROCESSING OF DATA
The Administrator shall not take decisions with respect to you only in an automated manner, particularly on the basis of profiling.