Protecting the privacy of our users is very important to us. Therefore, the users of the ddoctor.eu website (hereinafter referred to as the Online Shop) are guaranteed the highest standards of privacy protection. Doctors Home Poland Sp. z o.o., as the data controller, ensures the security of personal data provided by Users.
In view of the above and the requirements introduced by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) (OJ EU L 2016, 119, p. 1) (hereinafter referred to as GDPR), Doctors Home Poland Sp. z o.o. has adopted this Privacy Policy to ensure the security of personal data.
This Privacy Policy defines the principles of processing and protection of personal data provided by Users in connection with their use of the Online Store and other related websites, communications and services.
A User is any person whose data is processed while using the Online Store and other related websites, communications and services (hereinafter referred to as the User).
The controller of personal data collected in the Online Store is Doctors Home Poland Sp. z o.o., Rondo Organizacji Narodów Zjednoczonych 1, 00-124 Warsaw, NIP: 7011178656, REGON: 527145733 (hereinafter referred to as the Controller).
To the extent necessary to fulfil the contract between the User and the Administrator, as well as to carry out the actions requested by the User and to fulfil the Administrator's legal obligations, the processing of the User's personal data is carried out on the basis of legal provisions, i.e. Article 6(1)(b) and (c) of the GDPR, without the need for the User's consent to the processing of their personal data. In other cases, the provision of personal data is voluntary. However, in cases where the User consents to the processing of personal data solely for marketing purposes, the provision of personal data is voluntary, but refusal to consent or withdrawal of consent will prevent the Administrator from informing the User about new offers and discounts.
I. USER CONSENT
By using the Online Store, the User consents to the Administrator's collection, use and disclosure of personal and non-personal information in accordance with this Privacy Policy. However, the User has control over how his or her data is used and shared, as detailed in Section V of this Privacy Policy entitled "User Rights".
In the case of processing of personal data based on the User's consent, the User has the right to withdraw his or her consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal. The Administrator shall inform the User of the possibility of withdrawing consent before the User gives his or her consent.
If there is a change to this Privacy Policy and the User continues to use the Online Store, this action will be considered as the User's acceptance of the updated Privacy Policy terms.
II. PERSONAL DATA PROCESSED BY THE ADMINISTRATOR
Personal data collection methods
Personal data collected directly from the User
The Administrator collects personal data in two ways. The first method is to collect personal data directly from the User by
Sending a message via the contact form provided in the Online Store,
Creating a customer account in the Online Store
Placing an order for goods or services in the Online Store,
contacting the Administrator for technical assistance, filing a complaint or for other purposes.
b. Personal data collected from other sources The Administrator also collects personal data from sources other than directly from the User, including
by registering the User's use of the Online Store through cookies and other technologies, and by receiving error reports or usage data from software running on the User's device,
from partners with whom the Administrator offers goods and services or conducts joint marketing activities.
The scope of personal data collected by the Administrator
may vary depending on the purpose of the data processing. The personal and non-personal data collected by the
Administrator may include the following
Login name,
First name and surname / company name / first name and surname of the Contractor or names of Contractors operating as a civil law partnership,
Correspondence address,
Telephone number,
e-mail address,
NIP (Tax Identification Number),
REGON (National Register of Companies number),
IP address of the computer,
Payment information if the User makes a purchase in the Online Shop,
Information contained in cookies and similar technologies regarding the User's interaction with the Administrator's online store.
In addition, the Administrator collects data concerning the content of files and messages from the User when necessary to fulfil an order, provide customer account service, including the collection of: the subject and content of email messages, text or other content of instant messages, audio and video message recordings, audio recordings and transcriptions of voice messages received or dictated by the User.
The Administrator also collects information provided by the User, including opinions and ratings of goods and services, and information provided to obtain technical support. In the event of contact, the Administrator also collects the content of the message.
III. METHOD OF DATA PROCESSING - PURPOSES OF PERSONAL DATA PROCESSING BY THE ADMINISTRATOR
The manner in which the Administrator processes the User's personal data depends on the extent to which the User uses the Online Store.
Orders, Customer Account (Contract Performance)
If the User decides to place an order for goods or services offered in the Online Shop, the Administrator will process the User's personal data to the extent necessary to conclude the contract of sale or provision of services and to ensure the proper performance of the contract concluded with the User. If the User creates a customer account in the Online Shop, the Administrator uses the User's personal data for the proper performance of the electronic service contract, including authentication and authorisation of access to the customer account.
Communication (performance of the contract, legitimate interest of the Administrator)
The Administrator uses the User's personal data to communicate with the User in a personalised manner. Such communication includes sending e-mail messages, placing notices on websites and other means within the framework of the online shop and customer account service, including text messages and push notifications. The content communicated relates to the goods and services offered, such as the availability of the service, its use, the security of personal data, network updates, reminders and also suggested offers from the Administrator.
Communication with the User also relates to customer service. Personal information is used to assist the User, resolve problems and respond to complaints.
The Administrator also uses the User's personal data to enable the User to comment on the activities of the Online Shop, its services and the Administrator's goods.
Advertising (consent, legitimate interest of the Administrator)
The Administrator uses the User's personal data to provide the User with personalised advertising, if the User has given his/her consent to such activities or if a business relationship has been established between the Administrator and the User. These advertisements concern both the Administrator's offers and those of companies cooperating with the Administrator.
The advertisements presented to the User are individually tailored (so-called "profiling") using
Data provided directly by the User,
data collected from the User's use of the online store,
information provided by third parties,
data obtained from advertising technologies such as cookies
navigational signals, pixels, advertising tags and mobile identifiers.
The Administrator will not share the User's personal information with third party advertisers or ad networks without the User's consent. However, if the User clicks on the advertisement displayed, the advertiser will be informed of this action.
Improvement of the online shop (legitimate interest of the Administrator)
The Administrator uses the User's personal data for analytical and statistical activities aimed at the continuous improvement of the Online Shop, the goods and services offered by the Administrator, providing better solutions, adding new features and expanding possibilities.
The personal data of the User is also used by the Administrator for market research, public opinion polls and economic analysis in order to continuously improve the Online Shop.
Security (legitimate interest of the Administrator)
The Administrator uses the User's personal data to monitor, prevent, detect and combat fraud and abuse, to protect other users from such abuse and to ensure the security of the network and information. If there is reasonable suspicion of a crime, the User's personal information will be used to investigate the possible commission of a crime or other violations of this Privacy Policy by unauthorised persons.
Pursuit of claims (legitimate interest of the Administrator)
If the User chooses to use the Online Shop, in particular by creating a customer account or placing an order for goods or services, the Administrator may process the User's personal data in order to pursue any claims arising from the business activity, as well as to analyse possible violations of the conditions of use of the Online Shop.
Tax documentation (fulfilment of legal obligations)
If the User places an order for goods or services through the On-Line Shop, the Administrator will process the User's personal data in order to maintain tax documentation and to settle accounts related to the executed orders.
IV. DISCLOSURE OF PERSONAL DATA BY THE ADMINISTRATOR
The User's personal data is or may be communicated to the following categories of recipients
Entities that provide certain services in the sales process, such as courier/postal service providers, payment institutions that facilitate payments made by Users for orders placed for goods or services.
Providers of advertising or marketing services, in the case of direct marketing of the Administrator's own services.
Providers of legal and consulting services, as well as entities assisting the Administrator in the pursuit of due claims (in particular law firms, debt collection companies).
Entities that process personal data on behalf of the Administrator, such as technical service providers that manage the technical infrastructure necessary to operate the online store.
Entities that are entitled to receive data under applicable law, such as courts or law enforcement authorities, when they request it based on the relevant legal basis.
V. USER RIGHTS
The User has the right to control his/her personal data by making choices regarding the disclosure of certain personal data, including the selection of privacy settings. However, the User must be aware that in such cases he/she may not be able to fully use certain features of the Online Shop or services offered by the Administrator.
If the User wishes to exercise his/her rights as a data subject, he/she may contact the Administrator by sending an e-mail to info@ddoctor.eu. Some rights can be exercised through the User's account in the Online Store.
Right of access to data
The User has the right to obtain confirmation from the Administrator as to whether or not his/her personal data are being processed and, if so, the right to access the details of the processing, including, in particular, the purposes of the processing and the categories of data processed.
The User also has the right to obtain a copy of the personal data that is being processed.
Right to rectify data
The user has the right to rectify any personal data that is inaccurate. They have the right to request the replacement, completion or removal of errors, defects and inaccuracies in any data relating to them.
The data to be rectified may not be inaccurate. In other words, the user may not request the replacement or completion of existing data containing inaccurate information.
In cases where the personal data processed are incomplete, the User may submit a supplementary declaration to complete them. Such a statement may be submitted in any form, including electronically.
Right to erasure (right to be forgotten)
The User has the right to request the deletion of his/her personal data if one of the following circumstances applies
The User's personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
The User has withdrawn the consent on which the processing is based and there is no other legal basis for the processing.
The User objects to the processing of his/her personal data.
The personal data have been processed unlawfully.
The personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which the controller is subject.
The personal data has been collected in connection with the provision of information society services.
The right to be forgotten applies to the User only if he/she exercises his/her right to erasure and only in cases where his/her personal data has been made public by the Administrator.
Right to restrict processing
The User has the right to request the restriction of the processing of his/her personal data in the following cases
The User disputes the accuracy of the personal data, for a period that allows the Administrator to verify the accuracy of the data.
The processing is unlawful and the User objects to the erasure of his/her personal data, requesting instead the restriction of their use.
The Administrator no longer needs the personal data for the purposes of processing, but the data is required by the User for the establishment, exercise or defence of legal claims.
The User has objected to the processing - until it is determined whether the legitimate grounds for processing by the Administrator override the User's objection.
In the case of restriction of processing, the Administrator may process the personal data, except for storage, only in the following cases
with the consent of the User,
for the establishment, exercise or defence of legal claims,
to protect the rights of another natural or legal person;
for important reasons of public interest of the Union or the Member State.
Right to data portability
The User has the right to obtain the personal data provided to the Administrator in a structured, commonly used and machine-readable format. The User also has the right to transfer this data to another Administrator.
The User may also request that his/her personal data be transferred directly from the Administrator to another Administrator, if technically feasible.
Right to object
The user has the right to object at any time to the processing of his personal data for reasons relating to his particular situation:
In the public interest, in the exercise of official authority vested in the data controller.
To the processing for the purposes of direct marketing, including profiling, if it is related to direct marketing.
For legitimate purposes of the Administrator.
The procedure for considering the objection and all communications are free of charge and the User may submit an objection electronically.
Right to lodge a complaint
The User has the right to lodge a complaint with the European Data Protection Authority (UODO), in particular in the Member State where the User has his or her habitual residence, place of work or where the alleged infringement took place.
VI. Cookies and other technologies used by the Administrator
The Administrator uses cookies and other similar technologies to provide an optimal service during the User's visit to the Online Shop, to enable faster and easier access to information, to offer improved functionalities, and for marketing and remarketing purposes (including necessary analytical actions and the creation of marketing profiles based on the User's activity on specific pages of the Online Shop).
Cookies are text file fragments corresponding to HTTP requests sent to the Administrator's server. The On-Line Shop also uses other available technologies that allow information to be stored in the browser's cache (session storage, local storage), as well as the inclusion of code fragments from analytical tools provided by third parties that allow cookies to be stored in the domains of these services.
The information stored or accessed in cookies does not lead to changes in the configuration of the user's device or the software installed on it. Information contained in cookies and similar technologies is considered personal data only in conjunction with other personal data available about a particular User.
If the User does not agree to the storage and receipt of information in cookies or similar technologies, he/she can change the rules regarding cookies via his/her browser settings or use the opt-out option on the Provider's site. Detailed information on the technologies used by the Administrator is available in the Cookie Policy.
VII. Other important information
Data Security Protection
The Administrator takes various measures to ensure the security of users' personal data. The secure use of the services provided is guaranteed by the systems and procedures in place to protect data from unauthorised access and disclosure. In addition, the systems and procedures used by the Administrator are regularly monitored to detect any potential threats. The personal data collected by the Administrator is stored on computer systems that are strictly limited to authorised personnel.
Storage of Personal Data
Retention of Personal Data The retention period of personal data may vary for different users depending on the purpose for which the data is processed. The Administrator stores personal data for the time necessary to achieve the specific purposes, i.e:
For analytical and statistical purposes: For the time necessary to achieve the objectives related to the effective operation and development of the On-Line Shop.
For the fulfilment of orders and the provision of services to the User: for the duration of the contract and the limitation period for claims.
As required by law: For the maintenance of fiscal documentation and for the execution of contracts.
For marketing purposes: For the duration of the business relationship with the User, unless the User has previously objected to the processing for these purposes.
After the expiration of the period necessary for the processing, the data may be processed only to ensure the security of claims or the defence against them, and thereafter only to the extent required by applicable law.
Users' personal data will be stored in the Administrator's database, where technical and organisational measures will be taken to ensure the protection of the data processed, in accordance with legal requirements. Only the Administrator has access to the database.
3. Changes to the Privacy Policy
In order to update the information contained in this Privacy Policy and to ensure its compliance with applicable laws, this Privacy Policy may be amended. Whenever the document is amended, the date of the update will be revised and placed at the beginning of the Privacy Policy. Users will be notified of any material changes through a notice on the Online Store's website or directly. In order to remain informed about the methods of protection of personal data, the Administrator recommends that the Users regularly consult the Privacy Policy.
4. Contact information
In case of any doubts regarding the protection of personal data or in case of any questions related to this Privacy Policy, the User may contact the Administrator by e-mail at info@ddoctor.eu or by post at the following address
Doctors Home Poland Sp. z o.o., Rondo Organizacji Narodów Zjednoczonych 1, 00-124 Warsaw, Poland.