Privacy and Data Protection Policy
The controller of personal data provided by website users via adverse drug reactions reporting form is Biofarm Sp. z o.o. of Poznań, with address at ul. Wałbrzyska 13, 60-198 Poznań (NIP: 7780021575, REGON: 008029300, KRS: 0000120050) (“we”, “us” or the “Controller”).
Your personal data will be processed in accordance with data protection laws, including, without limitation, the General Data Protection Regulation (“GDPR”).
The Controller has designated a Data Protection Officer to ensure the correctness of personal data processing. You can contact the DPO by sending an e-mail to firstname.lastname@example.org or writing at the Controller’s postal address.
Why we process your data
Your personal data will be processed exclusively to purposes related to perform Controller`s obligations as regards supervision and pharmacovigilance of medicinal products.
Our legal basis to process data
Your personal data will be processed to pursue the Controller’s legal obligation to provide the information reported by you regarding adverse drug reactions to the competent authorities. (Article 6(1)(c)GDPR).
How long we may retain your data for
Your personal data will be processed for as long as it results from legal regulations in relation to pharmacovigilance, that is for a period of 10 years after the expiration or cancellation of the last marketing authorization for the particular medicinal product.
Who will receive your data
Your data may be transferred to national competent authorities or to the Eudravigilance database. In that case, the recipient of your data is obliged to protect the data according to legal regulations in force.
Your data may be also transferred to trusted entities where we have retained them for data processing. These entities are our partners for technical services (developing and maintaining IT systems and websites) and provide us with necessary tools to communicate with you.
Your personal data will not be transferred to any third countries and international organisations.
You have the right at any time to access your personal data, to request their rectification or erasure or that their processing is restricted. You also have the right to lodge a complaint about data processing, the right to data portability, and the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
Providing personal data is voluntary, but necessary to consider reports of adverse drug reactions, expect of health care professionals for whom the relevant legal provisions regulating the rules of practicing the profession require the reporting of adverse drugs reactions.
Due to legal requirements, the Controller may not be able to delete personal data collected in connection with reporting adverse drug reactions, unless they are false.
There is no automated decision-making (including profiling) involved in our data processing operations.