Privacy Policy of the Online Store

§ 1 GENERAL PROVISIONS

The administrator of personal data collected through the website www.vorwartspharma.pl is Vorwarts Pharma Sp. z o.o., registered in the Register of Entrepreneurs of the District Court of Warsaw, XII Commercial Division of the National Court Register under number KRS: 0000720039, NIP: 9662119058, REGON: 369547379, office and mailing address: ul. Żurawia 43/304, 00-680 Warsaw, email: [email protected], phone number: +48 796 982 930, hereinafter referred to as the “Administrator”, who is also the “Service Provider”.

Personal data collected by the Administrator is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All terms capitalized in this Privacy Policy should be understood as defined in the Regulations of the www.vorwartspharma.pl store.

§ 2 TYPES OF PERSONAL DATA, PURPOSE AND SCOPE OF COLLECTION

PURPOSE AND LEGAL BASIS OF PROCESSING:

The Administrator processes Users’ personal data in the following cases:

• account registration to create and manage an account — based on Art. 6(1)(b) GDPR;
• placing an order — to execute the sales contract — based on Art. 6(1)(b) GDPR;
• subscribing to the newsletter — based on separate consent (Art. 6(1)(a) GDPR);
• using the contact form — based on the legitimate interest of the enterprise (Art. 6(1)(f) GDPR).

TYPES OF PERSONAL DATA:

• Account: full name, email address.
• Order: full name, company, address, tax ID (NIP), email, phone number.
• Newsletter: email address.
• Contact form: full name, email address.

STORAGE PERIOD:

• If the basis is a contract — data is stored until its execution, then for the statute of limitations period.
• If the basis is consent — until it is withdrawn, then for the statute of limitations period.

While using the website, additional technical data may be collected: IP address, domain, browser type, operating system, access time, etc.

With consent, data may be processed for marketing purposes (emails, calls), including profiling, in accordance with GDPR, the Electronic Services Act, and Telecommunications Law.

Navigation data may also be collected — clicks, link navigation, user activity — based on the legitimate interest of the Administrator (Art. 6(1)(f) GDPR).

Providing personal data is voluntary.

The Administrator ensures that data is:

• processed lawfully;
• collected for specific, lawful purposes;
• accurate, adequate, and not stored longer than necessary.

§ 3 DISCLOSURE OF PERSONAL DATA

Users’ personal data may be shared with service providers used by the Administrator for store operations, in particular:

• product delivery companies;
• payment service providers;
• accounting office;
• hosting provider;
• business software providers;
• email system providers;
• online store platform developers.

These service providers may act as data processors (under Administrator instructions) or as independent controllers (determining purposes and methods themselves).

Data is stored only within the European Economic Area (EEA), except as otherwise described in § 5 point 5 and § 6 of this Policy.

§ 4 USER RIGHTS

Individuals whose data is processed have the right to access, rectify, delete, restrict processing, data portability, object to processing, and withdraw consent at any time.

Legal basis for exercising rights:

• Access — Art. 15 GDPR
• Rectification — Art. 16 GDPR
• Deletion — Art. 17 GDPR
• Restriction — Art. 18 GDPR
• Portability — Art. 20 GDPR
• Objection — Art. 21 GDPR
• Withdrawal of consent — Art. 7(3) GDPR

To exercise these rights, send a request to [email protected]

Requests are processed no later than within one month. If the request is complex or numerous — within two months with prior notice.

Complaints about GDPR violations may be filed with the President of the Personal Data Protection Office in Poland.

§ 5 COOKIES

The website uses cookies necessary for store operation and statistics.

Types of cookies:

• Session (temporary)
• Persistent

Own cookies are used for analyzing user interaction. Third-party cookies (e.g., Google Analytics) are also used.

Cookies may be used by ad networks (e.g., Google) to display personalized ads.

Users may manage cookie preferences via their browser settings or the website banner.

§ 6 SOCIAL PLUGINS & REMARKETING

The site uses plugins from Facebook, Instagram, YouTube. These may collect IP addresses and other data even if the user is not logged in.

If logged in, activity may be linked to the user’s profile.

Privacy policies of the providers are available at:

• https://www.facebook.com/policy.php
• https://help.instagram.com/519522125107875?helpref=page_content
• https://policies.google.com/privacy?hl=pl&gl=ZZ.

Users can avoid data collection by logging out before visiting the site or using plugin blockers.

The site uses Google Ads for remarketing (based on Google cookies).

§ 7 FINAL PROVISIONS

The Administrator applies technical and organizational measures to protect data against unauthorized access, loss, or alteration.

Matters not covered by this Policy are governed by GDPR and Polish law.