Privacy Policy

Poznanskie Zakłady Zielarskie ,,Herbapol” S.A. based in Poznan at Towarowa Street No. 47/51 (hereinafter referred to as the “Owner”), is aware of the importance of the information entrusted by you, wishing to exercise due diligence on your rights, in particular the right to privacy, takes reasonable steps to create and adapt this Privacy Policy.

Due to the change in data protection regulations and the start of application of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation hereinafter referred to as “RODO”) as of May 25, 2018, we would like to inform you about the purposes and principles under which we process your personal data.

DATA SECURITY

Poznanskie Zaklady Zielarskie “HERBAPOL” SA secures your data from unauthorized access, use or disclosure. We ensure that the personal data provided to us are processed on computer servers in an environment that is secured against unauthorized access, use or disclosure.

Who collects and processes your personal data, that is, who is the controller of your personal data?

The administrator of your personal data is Poznańskie Zakłady Zielarskie “HERBAPOL” S.A. with its registered office in Poznań (hereinafter also referred to as the Company).

We can be contacted through:

  • contact form at https://www.herbapol.poznan.pl/pl/kontakt
  • email: sekretariat@herbapol.poznan.pl
  • contact phone: +48 61 886 18 00
  • In writing to the aforementioned address of the Company’s registered office.

The Company has appointed a Data Protection Officer, who can be contacted at the following email address: daneosobowe@herbapol.poznan.pl

When and what personal data do we collect and process?

We collect and process personal data for purposes:

  • to fulfill the Company’s legal obligations under applicable laws, in particular the provisions of the Commercial Companies Code Act of September 15, 2000 and the provisions of the Company’s Articles of Association,
  • to ensure the Company’s implementation of the rights/obligations of shareholders and their proxies,
  • marketing of the Company’s own products – the legal basis for data processing is the Company’s legitimate interest – marketing of its own products and services (Article 6(1)(f) RODO),
  • Sending commercial information by electronic means – only in case of your consent – the legal basis for data processing is consent (Article 6(1)(b) RODO),
  • to provide the service of keeping the User’s account on the website of PZZ “HERBAPOL” S.A. and providing the Internet Medicine Ordering System in order to provide the service of booking selected products at the pharmacy, via the website www.herbapol.poznan.pl. – The legal basis for the processing of the data is the performance of the contract (Article 6(1)(b) RODO),
  • sale of products offered by the Company – the legal basis for data processing is the performance of the contract (Article 6(1)(b) RODO),
  • to consider complaints, to investigate and defend in the event of counterclaims – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),
  • to provide transaction processing and technical troubleshooting – the legal basis for data processing is the performance of a contract (Article 6(1)(b) of the DPA),
  • to contact the User for purposes related to the provision of the service of maintaining the User’s account on the PZZ “HERBAPOL” S.A. website and/or performance of the sales contract – the legal basis for data processing is the performance of the contract (Article 6.1.b RODO),
  • for the purpose of protecting property and ensuring the safety of persons in the Company’s buildings as part of internal and external video surveillance, as well as keeping records of persons entering and leaving the Company’s buildings – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),
  • for tax and accounting purposes – the legal basis for data processing is the fulfillment of a legal obligation incumbent on the controller – the Company (Article 6(1)(c) of the DPA).

What you can do with your personal data

You have the right, to the extent provided by law, to access your data and to rectify, erase, anonymize or restrict processing, the right to object to processing, the right to data portability, as well as the right to withdraw the consent you have given at any time. Withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
In case of doubts related to the processing of personal data, any person may request information from the Company. Notwithstanding the above, you have the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection.

Will your data be transferred to countries outside the European Economic Area

Poznanskie Zakłady Zielarskie “Herbapol” SA does not transfer your personal data to entities operating in countries of the European Union.

Data profiling

Your personal data will not be processed by automated means (including profiling) in such a way that any decisions could be made as a result of such automated processing.

Please select the tab that is appropriate for you from the list and review the information contained therein.

  1. Contractors of PZZ “HERBAPOL” S.A.
  2. A representative of the contractor PZZ “HERBAPOL S.A., including, as a contact person, a person authorized to perform certain actions on behalf of the contractor.
  3. Potential contractors of PZZ “HERBAPOL” S.A.
  4. Individuals using contact forms available on websites operated by ADO.
  5. Addresses marketing activities.
  6. Individuals involved in recruitment.
  7. Shareholders.
  8. Former employees.
  9. Cookie Policy.

If you are a contractor of PZZ “HERBAPOL” SA:

Where do we get your data from?

Data is obtained directly from you before or during the execution of the contract.

Is it necessary for you to provide your data?

The provision of your data necessary for the submission of an offer and the subsequent signing and execution of the contract is a condition for the conclusion of the contract. Refusal to provide them will result in the inability to make an offer and conclude a contract.

For what purpose we process your data

The Company processes personal data for purposes:

  • necessary for the performance of the contract entered into with the Company – the legal basis for data processing is the performance of the contract (Article 6(1)(b) of the DPA),
  • maintenance of accounting and tax records, if your data were provided in a contract or other documents related to ADO’s performance of its obligations under the law, in particular tax and accounting regulations (Article 6(1)(c) of the DPA in connection with Article 74(2) of the Accounting Act and other specific provisions),
  • marketing of the Company’s own products – the legal basis for data processing is the Company’s legitimate interest – marketing of its own products and services (Article 6(1)(f) RODO),
  • to consider complaints, to investigate and defend in the event of counterclaims – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),
  • Sending commercial information by electronic means – only in case of your consent – the legal basis for data processing is consent (Article 6(1)(b) RODO),
  • for tax and accounting purposes – the legal basis for data processing is the fulfillment of a legal obligation incumbent on the controller – the Company (Article 6(1)(c) of the DPA),
  • Protecting property and ensuring the safety of people in the Company’s buildings as part of internal and external video surveillance and keeping records of people entering and leaving the Company’s buildings – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO).

The provision of personal data is voluntary, but necessary for the purpose of entering into a contract with the Company and the performance of this contract.

Retention period of your personal data

The provision of personal data is voluntary, but necessary for the purpose of entering into a contract with the Company and the performance of that contract. Your personal data shall be processed for no longer than necessary to fulfill the purposes for which they were collected and the purposes of the law. In addition, for the purpose of accountability, the Company will keep the data for the period in which it is required to retain the data or the documents containing them for the purpose of documenting compliance with legal requirements, including allowing public authorities to audit their compliance.

Recipients of your personal data

  • authorized employees and associates of PZZ “HERBAPOL” SA,
  • entities conducting postal or courier services,
  • to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us (Tax Office, PIP, Social Security),
  • entities that enable us to perform remote payment operations,
  • entities that support us in our operations on our behalf, in particular third-party system providers that support our operations.

If you act as a representative of the counterparty of PZZ “HERBAPOL” S.A., including, as a contact person, a person authorized to perform certain actions on behalf of the counterparty:

Where do we get your data from?

Data is obtained from the entity on whose behalf you are acting or directly from you. When personal data is provided by the entity on whose behalf you are acting, ADO collects your data: name, surname, telephone number, e-mail address, official position.

Is it necessary for you to provide your data?

If you provide personal data directly to ADO, the provision of such data is voluntary, but necessary for ADO to perform a contract on behalf of the entity on whose behalf you are acting. If you do not provide the data, the execution of the contract may be hindered.

For what purpose we process your data

The Company processes personal data for purposes:

  • performance of the contract concluded by PZZ “HERBAPOL” SA with the entity on whose behalf you are acting, which constitutes a legitimate legal interest of ADO (Article 6(1)(b, f) RODO),
  • maintenance of accounting and tax records, if your data were provided in a contract or other documents related to ADO’s performance of its obligations under the law, in particular tax and accounting regulations (Article 6(1)(c) of the DPA in connection with Article 74(2) of the Accounting Act and other specific provisions),
  • marketing of the Company’s own products – the legal basis for data processing is the Company’s legitimate interest – marketing of its own products and services (Article 6(1)(f) RODO),
  • to consider complaints, to investigate and defend in the event of counterclaims – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),
  • Sending commercial information by electronic means – only in case of your consent – the legal basis for data processing is consent (Article 6(1)(b) RODO),
  • for tax and accounting purposes – the legal basis for data processing is the fulfillment of a legal obligation incumbent on the controller – the Company (Article 6(1)(c) of the DPA),
  • Protecting property and ensuring the safety of people in the Company’s buildings as part of internal and external video surveillance and keeping records of people entering and leaving the Company’s buildings – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO).

The provision of personal data is voluntary, but necessary for the purpose of entering into a contract with the Company and the performance of this contract.

Retention period of your personal data

Your personal data shall be processed for no longer than necessary to fulfill the purposes for which they were collected and the purposes of the law. In addition, for the purpose of accountability, the Company will keep the data for the period during which it is required to retain the data or the documents containing it for the purpose of documenting compliance with legal requirements, including allowing public authorities to audit their compliance.

Recipients of your personal data

  • authorized employees and associates of PZZ “HERBAPOL” SA,
  • entities conducting postal or courier services,
  • to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us (Tax Office, PIP, Social Security),
  • entities that enable us to perform remote payment operations,
  • entities that support us in our operations on our behalf, in particular third-party system providers that support our operations.

Persons reporting adverse reactions

Where do we get your data from?

We obtain the data directly from you; or doctors

Is it necessary for you to provide your data?

Provision of your data necessary to answer and respond to your application/questions is a condition for obtaining a response. Failure to provide data will result in the inability to respond to your application/question.

For what purpose we process your data

You provide us with your data for the purpose of surveillance of adverse reactions to our products.
Your data are processed in accordance with pharmaceutical legislation and for statistical as well as evidentiary purposes.
The provision of personal data is voluntary, but necessary in order to carry out surveillance of adverse reactions to our products.

Retention period of your personal data

Personal data will be retained for the period necessary until the expiration of the manufacturing permit for our products and thereafter until the statute of limitations for all claims under the law. In addition, data may be retained by the Company for the purposes of preventing fraud and abuse, for statistical and archiving purposes or a data processing event. In addition, for accountability purposes, the Company will keep the data for the period of time it is required to retain the data or documents containing the data for the purpose of documenting compliance with legal requirements, including to allow inspection of compliance by public authorities.

Recipients of your personal data

  • authorized employees and associates of PZZ “HERBAPOL” SA,
  • entities conducting postal or courier services,
  • to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us,
  • entities that support us in our operations on our behalf, in particular third-party system providers that support our operations.

If marketing activities are undertaken towards you by PZZ “HERBAPOL” SA:

Where do we get your data from?

Data may be obtained:
1. directly from you;
2. from the entity on whose behalf you are acting (name, surname, telephone number, e-mail address, official position);
3. from publicly available sources (name, surname, company name, telephone number, e-mail address, official position)

Is it necessary for you to provide your data?

Your provision of data is voluntary.

For what purpose we process your data

The Company processes personal data for purposes:

  • marketing of the Company’s own products – the legal basis for data processing is the Company’s legitimate interest – marketing of its own products and services (Article 6(1)(f) RODO),
  • Sending commercial information by electronic means – only in case of your consent – the legal basis for data processing is consent (Article 6(1)(b) RODO),

Providing personal data is voluntary, but necessary in order to send you marketing and commercial information.

Retention period of your personal data

Personal data will be kept until any revocation of the consent you have given. In addition, for the purpose of accountability, the Company will keep the data for the period during which it is required to retain the data or documents containing it for the purpose of documenting compliance with legal requirements, including to allow inspection of compliance by public authorities.

Recipients of your personal data

Recipients of personal data will be:

  • authorized employees and associates of PZZ “HERBAPOL” SA,
  • entities conducting postal or courier services,
  • to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us,
  • entities that enable us to perform remote payment operations,
  • entities that support us in our operations on our behalf, in particular third-party system providers that support our operations.

People involved in recruitment

Where do we get your data from?

We obtain data directly from you, from the companies conducting the recruitment process on our behalf.

Is it necessary for you to provide your data?

Your provision of data is necessary to conclude a contract for participation in the recruitment process.

For what purpose we process your data

The Company processes personal data for purposes:

  • to carry out the recruitment, and after its successful conclusion, to conclude a contract of employment, and, if you agree, also for the purpose of future recruitment – the legal basis for data processing is to take action at your request before concluding a contract of employment and, in the case of successful recruitment, to execute a contract of employment (Article 6(1)(b) RODO);
  • Fulfillment of legal obligations incumbent on the Company as an employer in connection with recruitment, arising, inter alia, from the provisions of the Labor Code, including in order to prevent discrimination in employment – the legal basis for data processing is the fulfillment of a legal obligation incumbent on the Company (Article 6(1)(c) of the RODO);
  • Protecting property and ensuring the safety of people in the Company’s buildings as part of internal and external video surveillance and keeping records of people entering and leaving the Company’s buildings – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO).
  • possible conduct of litigation, as well as proceedings before public authorities and other proceedings, including for the purpose of defense against claims – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),

Provision of personal data is voluntary, but necessary in order to take part in the recruitment process and possible subsequent conclusion of an employment contract with the Company and execution of this contract.

The obligation for you to provide personal data in order to participate in the recruitment process arises in particular from Article 221 of the Labor Code and concerns such personal data as name(s) and surname, parents’ names, date of birth, place of residence (mailing address), education, course of previous employment.
However, if you send additional personal data in your application to the recruitment process over and above those indicated by law (e.g., email address, phone number, interests, image), then the Company will process the above additional personal data based on your consent (Article 6(1)(a) of the RODO).

Your submission of application documents for the recruitment process containing additional personal data is an explicit action confirming your consent to the Company’s processing of such data.

Retention period of your personal data

Personal data will be kept for the period necessary for the recruitment process, and thereafter for the period until the statute of limitations for all claims arising from the recruitment process. In addition, for the purpose of accountability, the Company will keep the data for the period in which it is required to retain the data or documents containing it for the purpose of documenting compliance with legal requirements, including allowing public authorities to audit their compliance.

Recipients of your personal data

Recipients of personal data will be:

  • Employees and associates of PZZ “HERBAPOL” SA

Shareholders

Where do we get your data from?

We obtain the data directly from you.

Is it necessary for you to provide your data?

Providing your personal data is necessary to establish and exercise your rights as a shareholder of the Company.

For what purpose we process your data

The Company processes personal data for purposes:

  • to fulfill the Company’s legal obligations under applicable laws, in particular the provisions of the Commercial Companies Code Act of September 15, 2000 and the provisions of the Company’s Articles of Association,
  • to ensure the Company’s implementation of the rights/obligations of shareholders and their proxies,
  • dividend payments,
  • Protecting property and ensuring the safety of people in the Company’s buildings as part of internal and external video surveillance and keeping records of people entering and leaving the Company’s buildings – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO).
  • in order to maintain accounting and tax records required by law,
  • possible conduct of litigation, as well as proceedings before public authorities and other proceedings, including for the purpose of defense against claims – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),
  • arising from the legitimate interests of the Administrator,
  • and for the following collateral purposes: archiving data, conducting internal audits at the Company, statistical research or business, economic or legal advice that is provided to the Company.

Scope of personal data processed

Provision of your personal data is necessary to establish and exercise your rights as shareholders of the Company. The consequence of failing to provide such data is that no action can be taken to enable you to establish and exercise your rights/duties as shareholders of the Company.

Provision of the following data is mandatory:

  • name and surname,
  • residential address or address for service,
  • PESEL no,
  • nominal value, series and number, type of Company shares held and other information regarding Company shares or the establishment of rights on Company shares;
  • e-mail address, in case you agree to communicate by e-mail.

Retention period of your personal data

Your personal data shall be processed for no longer than necessary to fulfill the purposes for which they were collected and the purposes of the law. In addition, for the purpose of accountability, the Company will keep the data for the period during which it is required to retain the data or the documents containing it for the purpose of documenting compliance with legal requirements, including allowing public authorities to audit their compliance.

Recipients of your personal data

Your personal data may be accessed by:

  • ADO’s employees and associates authorized to process your personal data at ADO’s direction;
  • entities conducting postal or courier services,
  • to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us (Tax Office, PIP, Social Security),
  • entities that enable us to perform remote payment operations,
  • entities that support us in our operations on our behalf, in particular third-party system providers that support our operations

Former employees

Where do we get your data from?

We obtain the data directly from you.

Is it necessary for you to provide your data?

Your provision of data was necessary for employment purposes

For what purpose we process your data

The Company processes personal data for purposes:

  • Fulfillment of the Company’s legal obligations under, among others, the Labor Code,
  • Protecting property and ensuring the safety of people in the Company’s buildings as part of internal and external video surveillance and keeping records of people entering and leaving the Company’s buildings – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),
  • possible conduct of litigation, as well as proceedings before public authorities and other proceedings, including for the purpose of defense against claims – the legal basis for data processing is the Company’s legitimate interest (Article 6(1)(f) RODO),

Retention period of your personal data

Personal data will be retained until the statute of limitations for all claims under the law. In addition, for the purpose of accountability, the Company will keep the data for the period during which it is required to retain the data or documents containing it for the purpose of documenting compliance with legal requirements, including allowing public authorities to audit their compliance.

Recipients of your personal data

Your personal data may be accessed by:

  • ADO’s employees and associates authorized to process your personal data at ADO’s direction;
  • authorized employees and associates of PZZ “HERBAPOL” SA,
  • entities conducting postal or courier services,
  • to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us (Tax Office, PIP, Social Security),
  • entities that enable us to perform remote payment operations,
  • entities that support us in our operations on our behalf, in particular third-party system providers that support our operations

To whom may PZZ “HERBAPOL” SA transfer your personal data?

Your personal data may be accessed by:

  • ADO’s employees and associates authorized to process your personal data at ADO’s direction;
  • authorized employees and associates of PZZ “HERBAPOL” SA,
  • entities conducting postal or courier services,
  • to state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us (Tax Office, PIP, Social Security),
  • entities that enable us to perform remote payment operations,
  • entities that support us in our operations on our behalf, in particular third-party system providers that support our operations.

Cookie policy

In order to facilitate your use of our site, cookies are used on the site. If you do not block these files, it means that you agree to their use and storage in the memory of your device. We would like to remind you that you can manage cookies yourself by changing your browser settings. For more information, see our privacy policy. Cookies policy

Important: our website uses cookies.

By using the Site, you consent to the use of cookies, some of which may already be stored in your browser folder.

What are cookies?

Cookies should be understood as IT data, in particular text files, stored in the users’ terminal devices intended for the use of websites. These files allow to recognize the user’s device and appropriately display the website tailored to his individual preferences. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.

What do we use cookies for?

Cookies are used to adapt the content of websites to the user’s preferences and to optimize the use of websites. They are also used to create anonymous, aggregated statistics, which help to understand how the user uses the websites, which allows to improve their structure and content, excluding personal identification of the user.

Do cookies contain personal information

Personal data collected using cookies may be collected only for the purpose of performing certain functions for you. Such data are encrypted in a way that prevents unauthorized access.

Deleting cookies

By default, web browsing software allows cookies to be placed on your terminal device. These settings can be changed in such a way as to block the automatic handling of cookies in the settings of your web browser or inform you each time they are sent to your device. Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser) most often it is possible from the “Settings” menu.
Restricting the use of cookies, may affect some of the functionality available on the website.

What kind of cookies do we use?

Permanent – they remain on the user’s device for the time specified in the parameters of cookies or until they are manually deleted by the user.

Session cookies – remain on the user’s device until the user logs off from the website or shuts down the software (web browser). We do not use this type of cookies as part of our standard cookie setting.

Analytics – used by integrated services, most often, for example, Google Analytics, including in particular users of the website, are subject to their own privacy policies.

Is it possible to use the sites with cookies turned off?

Disabling cookies in your browser mostly does not prevent you from using our services, but may cause difficulties. In particular, access to certain content may be hindered, and lack of cookies will prevent you from logging in.