Privacy Policy

1. The Data Controller of personal data processing on site (https://kmptm.pl) is  Silesian Park of Medical Technology Kardio-Med Silesia Sp. z o.o., M. Curie-Skłodowskiej 10C, 41-800 Zabrze.
2. For the purpose of contacting the administrator of personal data in the scope of personal data processing, please send messages to the following e-mail address: iod@kmptm.pl
3. The legal basis for the processing of personal data is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.
4. Providing by the User his/her personal data such as: surname, first names, e-mail address, name of the company, type of entity, NIP number, company address, correspondence address of the company in the public procurement process is voluntary.
5. The Controller processes the User’s personal data in order to:
   • carrying out tender procedures on the basis of public procurement regulations, in accordance with Article 6(1)(c) of the GDPR;
   • carrying out recruitment procedures in accordance with the provisions of the Labour Code or the Civil Code in accordance with Article 6(1)(b) or (c) of the GDPR;
   • issuing and providing the User with accounting documents in accordance with the tax obligations imposed on the Controller in accordance with Article 6(1)(c) of the GDPR;
   • pursuing claims and defending against claims related to the sale and servicing of the user’s account, pursuing the legitimate interest of the controller in accordance with Article 6(1)(f) of the GDPR;
   • make contact using the contact form on the website, on the basis of your consent, in accordance with Article 6(1)(a) of the GDPR;
   • conducting online analytical or marketing activities, based on the consent of the data subject, expressed by means of an action confirming consent in the form of ticking a checkbox or in the form of consent to the installation of cookies, marketing or analytical solutions used in accordance with Article 6(1)(a).
6. Subject to cases where the obligation to provide further access to personal data results from the provisions of generally applicable law or the provision of a service, the Administrator may transfer the User’s personal data to entities, i.e. e-mail and website host, software providers, companies providing IT services, law firms, companies, consulting companies, Poczta Polska, S.A., tax office and other entities authorized by law.
7. The User has the right to access his/her personal data (including the right to obtain information about the purpose, scope and manner of data processing), to request supplementation, update, rectification of personal data, temporary or permanent suspension of their processing or their deletion if they are incomplete, outdated, untrue or have been collected in violation of the GDPR or the Personal Data Protection Act. In activities where the basis for the processing of personal data is consent, the User also has the right to withdraw it.
8. The Data Controller processes and stores the personal data specified in point 3 for the period necessary to perform and settle the services to which the User is a party, unless the generally applicable provisions of law specify the period of their storage – including defense against claims under the provisions of the Civil Code, as well as the Accounting Act requiring the storage of data for a period of 6 years from the date of the last operation.
9. The Controller mainly uses the services of suppliers who are located mainly in Poland and other countries belonging to the European Economic Area (EEA). Some providers may be based outside the EEA. The Data Controller assured that the suppliers ensure a high level of personal data protection. This assurance results, inter alia, from the use of standard contractual clauses adopted by the Commission (EU) or the entity’s participation in the Data Privacy Framework.
10. The portal automatically collects the following data:
    • IP address,
    • Session ID
    • the type of web browser used.

Cookies Policy

1. The Controller uses cookies to collect data on the user’s interactions and device configuration when using our websites. Cookies are small text files that are stored on the devices of users who visit our website.
2. Cookies, often referred to as “cookies”, are special IT data that are stored on the website user’s end device. They usually contain the name of the website from which they originate, the retention period, and a unique identification number.
3. Cookies can be divided into different categories depending on their function:
   • Cookies necessary for the operation of the website: These cookies are essential for the website to function properly. Without them, we would not be able to provide basic services, such as maintaining your account or shopping cart.
   • Analytical cookies: These are used to collect information about how our website is used. They help us better understand how our users browse the web, what content is most popular and where we can make improvements.
   • Advertising cookies: These are used to deliver personalized advertising content to users. They may be used by us or by our advertising partners to show you advertisements tailored to your interests.
4. Cookies are used for various purposes, such as:
   • Authenticating the user on the website and maintaining the account session on online stores, which allows us to ensure security and personalized service;
   • Audience analysis and research, in particular the creation of anonymous statistics that help to understand how visitors use the website, using third-party solutions, i.e. Google Analytics;
   • Collecting and storing data about the personalization of websites, which enables us to provide you with a more personalized experience on the website.
5. It is worth noting that many web browsers accept cookies by default and save them on users’ devices. However, users of the website have the ability to change their cookie settings at any time. This can be done by blocking the automatic handling of cookies in the settings of your web browser or by deciding to inform you each time cookies are stored on your device. Detailed information on this subject is available in the settings of the web browser software.
6. The website administrator uses cookies in accordance with the applicable law, and their use is carried out with respect for the privacy of users. We respect your right to choose whether or not to accept cookies, so we give you the opportunity to adjust your settings according to your preferences.
7. If you decide to change your cookie settings and block their use, we warn you that this may affect the full functionality of our website and some services may not work properly. However, your choices regarding cookies will not affect your rights or access to basic features.

Disclosure obligations:

1. Clause for job applicants

   Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.4.2016 (hereinafter: GDPR), we would like to inform you that:

   1. The Data Controller is the Silesian Park of Medical Technology Kardio-Med Silesia Sp. z o.o., M. Curie-Skłodowskiej 10C, 41-800 Zabrze, KRS:0000396540, NIP:6482761515, REGON:242742607.
   2. We have appointed a Data Protection Officer in the person of Mr. Gabriel Kolas. If you would like to provide information regarding your personal data, please contact the e-mail address of the Data Protection Officer: iod@kmptm.pl
   3. Your personal data will be processed in order to carry out the recruitment process
   1. on the basis of the provisions of the Labour Code and the consent given – Article 6(1)(c) and (a) of the GDPR – for employment contracts
   2. on the basis of the provisions of the Civil Code and the consent given – Article 6(1)(b) and (a) for civil law contracts.

   Your personal data may be processed for the purpose of future recruitment if you give your separate consent to such processing in accordance with the basis of Article 6(1)(a) of the GDPR.
   Your data may be processed for the purpose of pursuing claims and defending against claims based on the premise of the legitimate interest of the controller – Article 6(1)(f) of the GDPR.

   4. Your personal data will be transferred to consulting companies, e-mail hosts, recruitment portals, website hosts, Labour Offices, Poczta Polska S.A., companies providing IT services and other entities, when it results from the law.
   5. Your personal data will not be transferred to third countries.
   6. Your personal data will be processed until the end of the recruitment process or the expiry of claims. If you give your consent to future recruitments, the data will be processed until the consent is withdrawn, but no longer than 6 months.
   7. You have the right to access your data and the right to rectify, delete, limit processing, the right to transfer data, withdraw consent at any time, without affecting the lawfulness of processing that was carried out on the basis of consent before its withdrawal and to object.
   8. Providing your personal data is voluntary, but failure to provide it will make it impossible to participate in the recruitment process.
   9. You have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw) if you believe that the processing of your personal data violates the law.
   10. Your data will not be subject to profiling and automated decisions will not be made on their basis.

2. Clause for contractor, customer

   In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.4.2016 (hereinafter: GDPR), we would like to inform you that:

   1. The Data Controller is the Silesian Park of Medical Technology Kardio-Med Silesia Sp. z o.o., M. Curie-Skłodowskiej 10C, 41-800 Zabrze (KRS:0000396540, NIP:6482761515, REGON:242742607).
   2. We have appointed a Data Protection Officer in the person of Mr. Gabriel Kolas In order to provide information regarding your personal data, please contact the e-mail address of the Data Protection Officer: iod@kmptm.pl.
   3. Your personal data will be processed for the following purposes:
      1. performance of the contract and taking steps at the request of the data subject prior to entering into a contract in accordance with the premise of Article 6(1)(b) of the GDPR;
      2. performance of legal obligations incumbent on the controller related to, for example, financial and accounting settlements pursuant to Article 6(1)(c) of the GDPR;
      3. pursuing claims on the basis of the Company’s legitimate interest – Article 6(1)(f) of the GDPR;
      4. maintaining business relations on the basis of the legitimate interest of the controller – Article 6(1)(f) of the GDPR;
   4. Your personal data may be transferred to law firms, software providers, e-mail box hosts, IT and software service companies, consulting companies, Poczta Polska S.A., statutory auditors, document archiving companies, courier companies, banks, the Tax Office and other entities, when it results from the provisions of law.
   5. Your personal data will not be transferred to third countries.
   6. Your personal data will be processed for the duration of the contract and then until the statute of limitations for claims arising therefrom. Data from financial documents will be processed for the time resulting from the provisions of the accounting law.
   7. You have the right to access your data and the right to rectify, limit processing, delete data and object.
   8. Providing your personal data is necessary to conclude and perform the contract.
   9. You have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw) if you believe that the processing of your personal data violates the law.
   10. Your data will not be subject to profiling and automated decisions will not be made on their basis.

3. Clause for registration and patient service of the Cardio-Med Silesia Outpatient Clinic Team

   In accordance with Article 13 (1) and (2) of the General Data Protection Regulation of 27 April 2016 (GDPR), we would like to inform you that:

   1. The Data Controller is the Silesian Park of Medical Technology Kardio-Med Silesia Sp. z o.o., M. Curie-Skłodowskiej 10C, 41-800 Zabrze, KRS:0000396540, NIP:6482761515, REGON:242742607.
   2. We have appointed a Data Protection Officer in the person of Mr. Gabriel Kolas If you would like to provide information regarding your personal data, please contact us at the following e-mail address: iod@kmptm.pl
   3. Your personal data will be processed for the following purposes: registration for an appointment with the Cardio-Med Silesia Clinic Team pursuant to Article 6(1)(b) of the GDPR (i.e. performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to concluding a contract) and for the purpose of patient service in the Kadrio-Med Silesia Clinic Complex pursuant to Article 6(1)(c), Article 9(2)(h) of the GDPR, i.e. on the basis of applicable law and for the purposes of preventive health care or occupational medicine, to assess the employee’s fitness for work, medical diagnosis, provision of health care or social security, treatment or management of health care systems and services.
   4. Your personal data will be transferred to consulting companies, document archiving companies, software providers, e-mail box hosts, website hosts, the Ministry of Health, the Health Centre, healthcare providers, healthcare providers, IT service providers and other entities, when it results from the provisions of law.
   5. Your personal data will be transferred to third countries on the basis of standard contractual clauses.
   6. Your personal data will be processed for the period specified by the provisions of law, m.in. regarding the keeping and storage of medical records.
   7. You have the right to access your data and the right to rectify, delete and limit processing.
   8. Providing your personal data is voluntary, but necessary for registration and provision of the Clinic’s services.
   9. You have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw) if you believe that the processing of your personal data violates the law.
   10. Your data will not be subject to profiling and automated decisions will not be made on their basis.

4. Clause for the person using the contact form

   In accordance with Article 13(1) and (2) of the General Data Protection Regulation of 27 April 2016 (GDPR). We would like to inform you that:

   1. The Data Controller is the Silesian Park of Medical Technology Kardio-Med Silesia Sp. z o.o., M. Curie-Skłodowskiej 10C, 41-800 Zabrze, KRS:0000396540, NIP:6482761515, REGON:242742607.
   2. We have appointed a Data Protection Officer in the person of Mr. Gabriel Kolas If you would like to provide information regarding your personal data, please contact us at the following e-mail address: iod@kmptm.pl
   3. Your personal data will be processed in order to respond to your inquiry, based on your consent (Article 6(1)(a) of the GDPR).
   4. Your personal data will be transferred to consulting companies, software providers, e-mail box hosts, website hosters and companies providing IT services.
   5. Your personal data will not be transferred to third countries.
   6. Your personal data will be processed until you withdraw your consent or effectively respond to your inquiry.
   7. You have the right to access your data and the right to rectify, delete, limit processing and withdraw your consent at any time without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.
   8. Providing your personal data is voluntary.
   9. You have the right to lodge a complaint with the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw) if you believe that the processing of your personal data violates the law.
   10. Your data will not be subject to profiling and automated decisions will not be made on their basis.