Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (EU OJ L 2016.119.1 of 4 May 2016), hereinafter referred to as the GDPR, this is to inform you that:
OncoArendi Therapeutics Spółka Akcyjna, ul. Żwirki i Wigury 101, 02-089 Warszawa, e mail: firstname.lastname@example.org, telephone: 22 55 26 724, is the personal data controller (“Controller”).
Your personal data may be disclosed to the Controller’s employees or associates authorised to process them at the Controller’s request, and to entities to which the Controller subcontracts the processing of personal data, including providers of technical, IT, marketing and organisational services enabling the Controller to prepare and conduct the issue of shares at the Controller’s company, and to competent authorities (the Police, the Public Prosecutor’s Office, Courts, etc.) in the field of their statutory tasks, at their request, in compliance with all guarantees ensuring the security of the data being transferred.
Your personal data obtained by the Controller will be processed in order to reply to the e-mail sent via the contact form, i.e. in order to take action at the request of the data subject before concluding the agreement (Article 6(1)(a) and (b) of the GDPR).
The Controller informs that you have the right to access, rectify and delete your personal data or limit their processing, and the right to transfer data.
The recipients of the personal data provided by you in the content of the inquiry sent via the contact form will be employees of the Controller’s Office, authorised by the Controller to perform activities related to the processing of personal data.
Your personal data may be transferred outside the European Economic Area. However, if it turns out to be necessary in the course of business activities and your data are transferred outside the European Economic Area in connection with your obligations, we will make every effort and ensure that these entities comply with the principles set out in the GDPR, and that they meet the terms of the Privacy Shield programme.
Personal data processed to reply to the inquiry will be retained for the duration of the correspondence and for the duration of the Controller’s business activities, or until the withdrawal of consent to the processing, whichever is earlier. Depending on the results of the correspondence, the data will either be further processed in order to perform the agreement, of which the data subject will be notified separately, or will be deleted if the cooperation is not established.
The data subject has the right to access their personal data and the right to rectify, delete, limit their processing, the right to transfer data, the right to object to data processing, and if the processing is based on consent: the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
If the data subject believes that the processing of their personal data violates the personal data protection law, they have the right to lodge a complaint with the supervisory body dealing with the protection of personal data, i.e. the President of the Office for Personal Data Protection.
The provision of personal data is voluntary.