Privacy policy

The document sets forth conditions related to data processing (hereinafter referred to as the "data") and cookie files within the e-shop fillerpharma.com, run though the website, made available under the following URL: fillerpharma.com, hereinafter referred to as the „Shop”.

TABLE OF CONTENTS

1. HOW TO CONTACT THE DATA ADMINISTRATOR
2. WHAT IS THE BASIS FOR YOUR DATA PROCESSING
3. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF CONTRACT CONCLUSION AND ITS PERFORMANCE, POSSIBLE VINDICATION OF CLAIMS AND PROTECTION AGAINST THEM
4. DATA PROCESSING FOR NEWSLETTER DELIVERY
5. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF DIRECT MARKETING AND PROFILING
6. DATA PROCESSING FOR SECURITY REASONS
7. DATA PROCESSING FOR PRODUCT INFORMATION PURPOSE
8. INFORMATION ON DATA RECIPIENTS
9. INFORMATION ON DATA TRANSFER TO THIRD COUNTRIES
10. ABSOLUTE POWERS OF THE PERSONS WHOSE DATA IS PROCESSED
11. RELATIVE POWERS OF THE PERSONS WHOSE DATA IS PROCESSED
12. COOKIE FILES - INTRODUCTION
13. DATA ADMINISTRATOR COOKIE FILES
14. THIRD PARTIES' COOKIE FILES
15. CONSENT TO USE COOKIE FILES AND TO MANAGE THEM
16. CACHE
17. PIXEL TAGS
18. REFERENCE TO OTHER WEBSITES OR SOFTWARE
19. CHANGES TO THE PRIVACY AND COOKIE FILES POLICY

 §1.     HOW TO CONTACT THE DATA ADMINISTRATOR

Administrator of the personal data processed within the Shop is Filler Pharma Sp. z o.o. with its registered office in Warsaw (00-029) at the following address Nowy Świat 33/14 Street, entered into the Register of Entrepreneurs of the National Court Register under KRS number: 0000772373, NIP (tax identification no): 5252780678 and REGON (statistical identification no.): 382594503.

The Data Administrator can be contacted under the phone number: +48 886 022 031 and under the e-mail address: office@fillerpharma.com

§2.     WHAT IS THE BASIS FOR YOUR DATA PROCESSING

The legal basis for data processing are always given while the data collection. It results from the Regulation (UE) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repeal of the Directive 95/46/WE (General Data Protection Regulation). The following are explanation of the legal terms used:

1. Art 6 point 1 letter a) of the Regulation - personal data is processed on the basis of the expressed consent,
2. Art 6 point 1 letter b) of the Regulation - the data is processed for the need to perform a contract or to take action before such a contract is concluded, resulting from a request for data processing.
3. Art 6 point 1 letter c) of the Regulation - personal data is processed in order to fulfil legal requirements,
4. Art 6 point 1 letter f) of the Regulation - personal data is processed for legitimate interests.

§3.     INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF CONTRACT CONCLUSION AND ITS PERFORMANCE,

POSSIBLE VINDICATION OF CLAIMS AND PROTECTION AGAINST THEM

1. Personal data may be processed in order to perform Contract concluded with you. However, before the contract is concluded we may also process the personal data which is necessary to reply to your request. The data is processed under Art 6 point 1 letter b) of the Regulation.
2. When rendering payable services, we may process your data in order to comply with the tax and accounting obligations. The data is processed under Art 6 point 1 letter c) of the Regulation.
3. The personal data is processed during and after the Contract termination in order to investigate and enforce possible claims. Our legitimate interests is, e.g. to answer a possible complaint. Obligation to do so results from separate provision of the civil law. In such a case, we process personal data under legitimate interest, which is to protect against possible claims and to enforce them. The data is processed under Art 6 point 1 letter f) of the Regulation.
4. We are to store such data for the period of time necessary to implement the objectives, not longer than prescription of a claim resulting from separate provisions.
5. You have the right to access your data, rectify it, remove it, restrict its processing, the right to transfer it and file a complaint to the supervisory body. In case of data processing set forth in point 3, you have the right to file an objection against processing your data.
6. It is voluntary to give your data, failing to do so may hinder contract conclusion and its performance.
7. The following are your data recipients: hosting provider, e-mail provider, IT provider, telecommunication services provider, provider of accountancy and software for invoice issuance, bank service provider and e-payments, banks, legal, counselling and vindication services provider, and other service providers that we use within the target.

§4. INFORMATION ON THE PROCESSING OF DATA FOR THE USE OF TWISTO SERVICES

1. Personal data may be processed in order to transfer this data to Twisto Polska sp.z o.o., in connection with the possibility of proposing payment for the purchased goods by Twisto Polska sp.z o.o. under the order agreement covering the "Buy with Twisto" purchasing formula and making this purchasing formula available through the Seller, and for verification by Twisto Polska Sp. z o.o. due performance of such mandate contracts (legal basis: Article 6 (1) (f) of the Regulation).
2. In the event that the provision of personal data takes place in order to conclude a contract with the Online Store, providing personal data is a condition of concluding this contract. Providing personal data in this situation is voluntary, however, the consequence of not providing this data will be the inability to conclude an agreement with the Seller.
3. In the event that personal data is provided for the purpose of transferring them to Twisto Polska sp.z o.o. prior to the conclusion of the contract for the sale of goods purchased in the Seller, the transfer of this data is a condition of the conclusion of the sales contract in connection with the business model of business adopted by the Seller.
4. In the event of transferring personal data to the Bank in connection with the handling and settlement of payments made to the Seller via the Internet using payment instruments, providing data is required in order to make the payment and provide confirmation of its making by the Bank to the Seller.
5. In the event of transferring personal data to the Bank for the purpose of verification by the Bank of the proper performance of contracts concluded with the Seller, in particular to ensure protection of payers' interests in connection with their complaints, providing this data is required in order to enable the implementation of the contract concluded between the Seller and the Bank.
6. In the event of transferring personal data to Twisto Polska sp.z o.o. in connection with the possibility of proposing payment of the price for the goods purchased by Twisto Polska sp.z o.o. under the order agreement covering the "Buy with Twisto" purchasing formula and making this formula available by the Seller, providing this data and processing it for this purpose is required in connection with the business model of conducting the business adopted by the Seller and in order to perform the contract concluded between the Seller and Twisto Polska Sp. z o.o.

§5.     DATA PROCESSING FOR NEWSLETTER DELIVERY

1. We enable newsletter prescription. Should you use the function, your data is processed for the purpose of sending you the newsletter. The newsletter may include advertising, commercial or marketing content.
2. The data is processed under your consent, therefore under Art 6 point 1 letter a) of the Regulation.
3. You have the right to withdraw the consent at any time. Withdrawing your consent does not however, influence the previous right to process your data.
4. Your data will be stored until the consent is withdrawn. Should the consent never be withdrawn, your data will be processed unless we stop sending the newsletter.
5. You have the right to access your data, rectify it, remove it, restrict its processing, the right to transfer it and file a complaint to the supervisory body.
6. It is voluntary to give your data however, failing to do so may hinder the newsletter delivery.
7. The following are the data recipients: our hosting provider, IT provider, e-mail provider and newsletter service provider.

§6.     INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF DIRECT MARKETING

1. We may process your data for the purpose of direct marketing. It takes place, for example when we answer your e-mail, providing details of our offer.
2. The data is processed under Art 6 point 1 letter f) of the Regulation.
3. Your data will be stored until the time for reaching our target is met.
4. You have the right to access your data, rectify it, remove it, restrict its processing, the right to transfer it, the right to file an objection against the data processing and the right to file a complaint to the supervisory body.
5. It is voluntary to give this data, however failing to do so may hinder contract implementation of the direct marketing operations.
6. The following are your data recipients: hosting provider, e-mail provider, IT provider, telecommunication services provider.

§7.     DATA PROCESSING FOR SECURITY REASONS

1. From the very moment you enter our website, the following data is processed in order to provide service security:
   1. public IP of the device that was used for the enquiry,
   2. web browser type and its language,
   3. enquiry data and time,
   4. number of byte sent by the server,
   5. the URL address of the most recently visited website, in case the visit was made with the same hyperlink,
   6. information on possible errors that appeared while the enquiry.
2. Our legitimate interests for such processing is to run server logs and to secure the Shop against possible hacker attacks or other kinds of abuse. This include the possibility to establish the IP address of the person performing unauthorised activity within the shop, such as an attempt to hack security, person publishing prohibited content or making an attempt to perform unauthorised activities using our servers.
3. The data is processed under Art 6 point 1 letter f) of the Regulation.
4. We are to store such data for the period of time necessary to implement the objectives, not longer than prescription of a claim resulting from separate provisions.
5. You have the right to access your data, rectify it, remove it, restrict its processing, the right to file a complaint against its processing, and the right to complain to the supervisory body.
6. The Shop can be used only when such data is provided. Failure to provide the data will make it impossible to use the Shop.
7. The following are the data recipients: hosting provider, IT provider, telecommunication services provider.

§8.     DATA PROCESSING FOR PRODUCT INFORMATION PURPOSE

1. The Shop's functionality includes sending information on a chosen product to the e-mail address provided by a user.
2. Our legitimate interests in that process is to respond to a user's request and furtherly, to secure the Shop against any potential malpractice.
3. The data is processed under Art 6 point 1 letter f) of the Regulation.
4. We are to store such data for the period of time necessary to implement the objectives, not longer than prescription of a claim resulting from separate provisions of law.
5. You have the right to access your data, rectify it, remove it, restrict its processing, the right to file a complaint against its processing, and the right to complain to the supervisory body.
6. The information can be sent only when such data is provided. Failure to provide the data will disable the activity.
7. The following are the data recipients: hosting provider, IT provider.

§9.     INFORMATION ON DATA RECIPIENTS

While processing personal data we use external services:

1. Couriers: DHL Parcel Polska Sp. z o.o., ul. Osmańska 2, 02-823 Warszawa, Poland; InPost S.A, ul. Wielicka 28, 30-552 Kraków, Poland.
2. IT provider: Selmax, ul. Witomińska 46, 81-311 Gdynia, Poland.
3. Hosting provider: H88 S.A., ul. Franklina Roosevelta 22, 60-829 Poznań, Poland.
4. E-mail provider: H88 S.A., ul. Franklina Roosevelta 22, 60-829 Poznań, Poland.
5. Provider of telecommunications services: T-Mobile Polska S.A, ul. Marynarska 12, 02-674 Warszawa, Poland.
6. Provider of accountancy: Kancelaria Biegłych Rewidentów i Księgowych – Kuraś, Michalkiewicz sp.p., ul. Księdza Leona Miszewskiego 3/lok 2, 80-239 Gdańsk, Poland.
7. Provider of accountancy and software for invoice issuance: InsERT S.A., ul. Jerzmanowska 2, 54-519 Wrocław, Poland.
8. Legal, counselling and vindication services providers.
9. Bank: ING Bank Śląski S.A., przy ul. Sokolska 34, 40-086 Katowice, Poland.

§10.  ABSOLUTE POWERS OF THE PERSONS WHOSE DATA IS PROCESSED

When writing about powers related to processing your personal data, the powers described below are applied. Possibility to exercise the powers and rights set hereinbelow does not depend on the legal basis for the personal data processing.

 Right to access data

You hold the right to obtain confirmation, whether or not we process your personal data. If yes, you have the right to access the data and to receive additional information on:

1. processing purposes,
2. data category,
3. recipients or categories of recipients that the data is or will be disclosed to, in particular recipients from third countries or international organisations,
4. when possible, on the planned period of data processing, and when impossible on criteria for establishing this period,
5. the right to demand to rectify your data, remove it or restrict processing of your data, the right to file an objection against your data being processed and on the right to file an objection to the supervisory body,
6. the source of data, if not gathered from you,
7. automated decision making on profiling and on rules thereof, as well as on the importance and anticipated consequences related to your data processing.

Upon receipt of such a request, we are obliged to provide the person with a copy of the personal data under process. In case the request is sent in an electronic way, and no other restriction is received, information is also provided in an electronic way.

Right to rectify data

You hold the right to demand the incorrect personal data to be immediately rectified. Reflecting the processing purpose, you hold the right to demand the incomplete information to be completed, also by presenting additional declarations.

Right for data removal (to be forgotten)

You hold the right to demand the incorrect personal data that apply to you be immediately removed. Should one of the below mentioned circumstances arise, we are obliged to remove the personal data without unnecessary delay:

1. consent for the personal data process was withdrawn and no other basis for its processing exist,
2. an effective objection against your data processing was filed,
3. your personal data was processed with infringement of a law,
4. your personal data must be removed in order to comply with the legal obligations,
5. your data was gathered in relation with the Information Society offer.

Right to restrict processing

In the following situations, you hold the right to demand restriction of the data processing:

1. when you challenge correctness of the data - for the period allowing us to check the correctness;
2. when the data processing is inconsistent with the law and you object to have the data removed, demanding in return restrictions of its usage;
3. when the personal data is no longer necessary for the processing activities, however you need it to determine, vindicate or secure your claims;
4. when you objected to have your personal data processed - for the period necessary to establish whether our legitimate interests are superior over the basis of your objection.

Automated decisions, including profiling

You hold the right not to be the subject of a decision which is solely based on automated processing, including profiling, and produces legal effects towards you or in a similar manner substantially influences you.

The law does not affect should the decision:

1. be necessary to conclude or exercise a contract between you and the data administrator;
2. be in line with the law of the European Union or a member state and with the law which provides appropriate legal protection measures of your rights, freedom and your legitimate interests; or
3. be based on your express consent.

Right to file a compliant

You hold the right to file a complaint to the supervisory body, regarding your data processing.

§11.  RELATIVE POWERS OF THE PERSONS WHOSE DATA IS PROCESSED

When writing about powers related to processing your personal data, the powers described below are applied. Possibility to exercise the powers and rights set hereinbelow depends on the legal basis for the personal data processing.

Right to withdraw consent on your data processing

In the case when your personal data is processed on the basis of a consent given by you, you hold the right to withdraw this consent at any time. Withdrawing your consent does not however influence the previous right to process your data.

 Right to transfer data

You hold the right to receive the personal data you delivered to us. The data will be transferred to you in a structured and commonly used format that is machine readable. You also hold the right to transfer the data to a different administrator without objections from our side, if the processing activities take place:

1. on the basis of a consent or a contract, and
2. in an automated manner.

Exercising the right to transfer the data, you hold the right to request the data to be sent immediately to another administrator, if technically possible. The right cannot adversely affect rights and freedom of others.

Right to object

In case we process your personal data under Art 6 point 1 letter f) of the Regulation, you have the right to file an objection against the data processing for the purpose connected with your particular situation.

In such a situation, we cannot process your data unless existence of the following is demonstrated:

1. there are important, legitimate interests for the process, whereby the basis must be superior to your interests, rights and freedom, or
2. there are basis to establish, vindicate or secure claims

Also, should you file an objection against your personal data being processed for direct marketing purposes, we cannot process your data for such a purposes.

§12.  COOKIE FILES - INTRODUCTION

The Shop website uses cookie files. Those are commonly used small files containing a string of characters. The files are sent by and saved on a terminal device (e.g. computer, laptop, tablet, smartphone) used by the User to visit the website. Such information is send to a memory of the used browser, which sends it back at the next visit at the website. Cookie files can be divided into three categories.

With respect to the purpose for collecting the cookie files three categories can be distinguished, i.a.:

1. Essential cookies - those enable correct work of the Shop and its functionalities, e.g. authentication cookies or security cookies. It is not possible to use the Shop, without storing them on your device.
2. Functional cookies - files that enable saving your chosen settings and adjust the Shop to your needs, e.g. language, font size, web page features. It allows us to improve the Shop's functionality and efficiency. Without storing them on your device, using the Shop's functions will be restricted.
3. Business cookies - for example advertising cookies. Without storing them on your device, using the Shop's functions may be restricted.

With respect to validity, two categories of cookie files can be distinguished:

1. Session Cookies - exist until the session is over.
2. Permanent Cookies - exist after the session expires.

With respect to the Cookie files' Administrator, the following can be distinguished:

1. our Cookie Files,
2. Third parties' Cookie files.

§13.  DATA ADMINISTRATOR COOKIE FILES

The cookie files we manage allow us to:

1. authorise access,
2. keep session after logging out,
3. secure the Shop against hacker attacks,
4. allow a web browser to "remember" content of fields in the filled in forms (optional),
5. allow a web browser to "remember" content of the basket.

Thanks to that using functionality of the Shop is easier and smoother.

§14.   THIRD PARTIES' COOKIE FILES.

GOOGLE

The cookie files used by Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, the United States, within the following services:

1. Google Ads - allow to run advertising campaigns and to assess them,
2. Google Analytics – allow to assess the quality of an advertising campaign, run with the usage of the Google Ads service, and to analyse behaviour and movement of users as well as to prepare the movement statistics.
3. Google Maps – allow to store information about a user which enable usage of map tools available within the Google Maps services. Google Inc. can track the user's position,

The information gathered by Google Inc is anonymous and collective. In particular, the information does not contain identification features (understood as personal data) of the Shop’s users. Using the services mentioned, we collect such data as source of users’ acquisition and the way they behave on the Shop's website, information on devices and web browsers they use, thir IP address, domain, demographic data (age, sex), interests and geographic data.

FACEBOOK

We use Cookie files employed by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. The files can be used to connect your account with Facebook's external social network account with the one in the Shop (if such function is enabled and you use this account). Such files can also be used to process activities you perform in the Facebook app using the "Share" and "Like it" buttons. Processing of such data can be public.

Using the cookie files by the third parties depends on provisions of the privacy and the cookie files policy, used by the entities. The up-to-date provisions of the third parties regarding the abovementioned, can be found at: https://www.e-regulaminy.pl/biuletyn/polityki-prywatnosci-i-plikow-cookies/.

§15.  CONSENT TO USE COOKIE FILES AND TO MANAGE THEM

The consent to process cookie files is voluntarily and may be withdrawn at any time. Failure to give the consent for the cookie files to be used can limit possibilities to use the Shop and its functions, or even prevent you from using the Shop.

You can give consent to process the cookie files in the following ways:

1. using settings of the software which is installed on the terminal device you use,
2. by clicking the button which consists declaration of consent for the cookie files to be processed or confirmation that you have read and understood the conditions.

Usually browsers' settings by default allow storage of cookie files and other information on the terminal device. Should you disagree to save the files, it is necessary to change adequate settings in the web browser. It is possible to enable saving cookie files for all connections. It can be done for a particular web browser or for a particular website. Removal of cookie files is also possible. The way the files are managed depends on the software.

The up-to-date Rules and Regulations for the files management can be found in your browser settings and here: https://www.e-regulaminy.pl/biuletyn/polityka-cookies-obsluga/.

§16.  CACHE

When using the Shop’s website you can automatically use the cache installed on your device. It is possible to store the inter-session data within the local memory, i.e. between subsequent visits at the Shop’s website. The cache is used to improve the speed of using the Shop. It is performed by eliminating situation when the same data was downloaded repeatedly from the Shop, overloading at the same time the user's Internet connection. The cache may also store such data as the login password.

§17.  PIXEL TAGS

We use the pixel tags employed by Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. Those are elements published in the digital content. They enable register of such information as, e.g. activity on the website and evaluation of the advertisements’ effectiveness. It is possible to manage the Facebook Inc. pixel tags though the Facebook service in the user's panel. More information can be found here: https://www.e-regulaminy.pl/biuletyn/polityki-prywatnosci-i-plikow-cookies/.

§18.  REFERENCE TO OTHER WEBSITES OR SOFTWARE

The Shop can include links to other websites or software. We do not bear any responsibility towards provisions concerning the privacy and cookie files policy applicable on the websites or in software. It is strongly advised to get acquainted with the provisions of privacy and the cookie files policy after entering a website or before installing software.

§19.  CHANGES TO PRIVACY AND COOKIE FILES POLICY

1. The Privacy Policy and the Cookie Files Policy come into force on the day they are published on the Shop's website.
2. Changes to the Privacy Policy and the Cookie Files Policy take place by posting new versions thereof on the Shop's website
3. Information about the changes to the Privacy Policy and the Cookie Files Policy is published within the Shop's website, not later than three (3) days before publishing their new wording.