Information on the processing and protection of personal data (in accordance with the GDPR)

The data controller for the personal data of subscribers and persons cooperating with the journal „Medycyna Funkcjonalna i Estetyka Lekarska” is:

Off Label Barbara Walkiewicz-Cyrańska
ul. Puławska 403, 02-801 Warszawa
phone no. 726 448 999.

Personal data is processed in accordance with the GDPR. The data controller processes the personal data in order to perform the contract resulting from the orders placed for delivery of the journal „Medycyna Funkcjonalna i Estetyka Lekarska” to the address indicated.

The legal basis for the processing of personal data by the data controller is article 6 section 1 letter b of GDPR. Such processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract.

The first name, last name, indicated delivery address, telephone number, e-mail address, and bank account number (for payments made by bank transfer) are processed. NIP, registered office address, website address are additionally processed for entrepreneurs (CEIDG, companies, etc.). The data shall be processed for the duration of the contract and for the purpose of contract performance (article 6 section 1 letter b of GDPR). After the contract has been performed/dissolved, the data shall be processed further for the period of limitation of claims under the contract, and for archiving purposes, pursuant to article 74 of the Accounting Act of 29 September 1994 (article 6 section 1 letter c of GDPR).

Personal data may be transferred to other entities in order to perform the contract (article 6 section 1 letter b of GDPR), as well as for the purposes specified in article 6 section 1 letter f of GDPR.

NOTE: The data controller declares that the above-mentioned personal data shall not be transferred outside the European Economic Area to third countries or to international organizations. The data controller also declares not to use the services of subcontractors who transfer personal data to countries outside of the EEA. Should this change, i.e. if subcontractors from outside the EEA are contracted, the data controller declares to ensure by way of contractual terms that the third parties meet the requirements for the protection of personal data at least equivalent to the protection level provided for in the GDPR.

The data controller may disclose personal data only to entities authorized to obtain such personal data on the basis of legal regulations or personal data outsourcing agreements. Personal data shall be transferred, in particular, to the company to which the data controller’s bookkeeping services are outsourced.

Everyone has the right to request the removal or limitation of the processing of their data. This right does not apply where a given subscriber enters into a contract, in which case the data controller has the right to process their personal data. However, if the data is processed unlawfully or without a legal basis, the data shall be deleted. A subscriber has the right to access, rectify, delete, and transfer their personal data, and in some cases to limit the processing of their personal data. A subscriber also has the right to object to the processing of their personal data if the personal data is processed for the legitimate interest of the data controller.

Whenever a subscriber believes that their rights to personal data protection are violated, they may file a complaint to the President of the Office for Personal Data Protection (UODO).

A subscriber has the right to withdraw their consent provided that it serves as a legal basis for the processing of their personal data. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
To the extent that the this data is processed in order to conclude and perform the contract or if the data is processed on the basis of a consent, a subscriber can exercise the right to data portability, i.e. to receive the data from the data controller in a structured, commonly used, machine-readable format.

In order to exercise these rights, please contact the data controller via email sent to office@ offlabel.expert.