Privacy Policy and Cookie Policy

  1. Privacy Policy defines the rules of personal data processing at the Administrator – MARGOMED S.A. with its registered office in Lublin at Erazma Plewińskiego 16, 20-270 Lublin, entered in the register of entrepreneurs of the National Court Register kept by the District Court of Lublin Wschód in Lublin with its registered office in Świdnik, VI Economic Department of the National Court Register under the KRS number 0001136294, NIP 9462719641, REGON 522774878,
  2. The Cookies Policy defines the principles of storing and accessing data on the Devices of Users using the Website for the purpose of providing services electronically by the Website Administrator. In addition, the Cookies Policy serves to indicate the period of functioning of these files and to determine whether third parties may access such files, as contained in § 7.

Privacy Policy

  • 1 Definitions
  • Service – website operating under www.margomed.com
  • External service – websites of the Administrator’s partners, service providers or customers
  • Administrator – MARGOMED S. A. with its registered office in Lublin, 16 Erazma Plewińskiego St., 20-270 Lublin, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court of Lublin Wschód in Lublin with its registered office in Świdnik, VI Economic Department of the National Court Register under the KRS number 0000985977, NIP 9462719641, REGON 522774878, as an entity operating the Website and storing and accessing information in User’s devices
  • User – a natural person or a representative of a legal entity for whom the Administrator provides services electronically through the Website
  • Device – an electronic device with software, through which the User gains access to the Website
  • Cookies – text data collected in the form of files placed on the User’s Device.
  • 2 Administrator, contact information
  • The Administrator of the User’s personal data is MARGOMED S. A. with its registered office in Lublin, 16 Erazma Plewińskiego Street, 20-270 Lublin, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court of Lublin Wschód in Lublin with its registered office in Świdnik, VI Economic Department of the National Court Register under the KRS number 0000985977, NIP 9462719641, REGON 522774878.
  • Any questions regarding the protection of personal data should be directed to the e-mail address: or the Administrator’s registered office address.

 

  • 3 Principles and purposes
  1. In order to ensure that the processing of personal data is in compliance with the law and to ensure the protection of the rights and freedoms of our customers, employees, contractors and partners, MARGOMED S. A., based in Lublin, has implemented a personal data protection policy and other procedures serving the principle of accountability, resulting from Article 5 RODO.

II The Administrator obtains and processes personal data on the following legal grounds and for the following purposes:

  • performance of a contract or taking actions necessary to conclude a contract (Article 6(1)(b) RODO) in connection with activities relating to, among other things, making an appointment
  • a legal obligation incumbent on the Administrator (Article 6(1)(c) RODO) in connection with the performance of tasks under the law;
  • fulfillment of purposes resulting from the legitimate interest of the Administrator or by a third party (Article 6(1)(f) RODO) in connection with analyzing and responding to an inquiry submitted via telephone contact or by email, and in connection with activities carried out on social media
  • direct marketing conducted on the basis of legal regulations or on the basis of your consent art. 6 par. 1 letter a, (Regulation). Your personal data will be stored until you revoke your consent;
  • and tailored to your interests, which we will determine based on the content you browse on websites belonging to the Administrator and perform statistical analysis to improve services processed on the basis of Article 6(1)(f), (Regulation). Your personal data will be stored until you revoke your consent;
  • If you have consented to the processing of personal data for the purpose of marketing our own products and services, the basis for processing will be Article 6, paragraph 1, letter f, (Regulation), and your personal data will be stored until you revoke your consent;
  • WILL NOT-REPEAL
  • If you have consented to the processing of personal data in the form of cookies ‘cookies’ in order to personalize, remember your preferences and settings by the website, i.e.: the basis for processing will be consent, and your personal data will be stored until your consent is revoked.

III. The Administrator shall protect personal data by using appropriate technical and organizational security measures to avoid accidental or intentional modification of such data, its loss, destruction or unauthorized access to it.

  1. Personal data collected in accordance with the purposes specified above shall be processed for the period necessary to fulfill the purposes indicated above, including the performance of the contract, fulfillment of a legal requirement.
  2. The Administrator shall ensure transparency in the processing of personal data:
  • informs about the processing of data at the time of collection, in particular about the purpose and legal basis for the processing of personal data, unless it is not obliged to do so under separate regulations,
  • ensures that data are collected only to the extent necessary for the stated purpose and are processed only for the period of time necessary.
  1. When processing data, the Administrator shall ensure its security and confidentiality and access to information about the processing to data subjects. Should, despite the security measures in place, there be a breach of personal data protection (e.g., data “leakage” or data loss) and such a breach could result in a high risk of violation of the rights or freedoms of data subjects, it shall inform data subjects of such an event in a manner consistent with applicable regulations.

VII. The Controller shall take all necessary measures to ensure that its subcontractors and other cooperating entities also provide guarantees to apply appropriate security measures whenever they process personal data on request.

VIII. The Administrator shall conduct a risk analysis on an ongoing basis and monitor the adequacy of the data security measures applied to the identified risks. If necessary, it implements additional measures to enhance data security.

 

4. Social media

  1. The Administrator has public profiles on social media . Accordingly, it processes data that visitors to these profiles leave (including comments, likes, online IDs). The personal data of such persons is processed in order to enable them to be active on the profiles, in order to run the profiles effectively by presenting information on initiatives and other activities to users of the portals, in connection with the promotion of various types of events, services and products, for statistical and analytical purposes, and for the purposes of claiming and defending against claims. The legal basis for the processing of personal data in social media is the legitimate interest of the Administrator (Article 6(1)(f) RODO) to promote its own brand and improve the quality of its services, to effectively inform and present results and direct communication in connection with our online offerings, and, if necessary, to assert and defend against claims.
  2. We process personal data if you provide it on social networks and platforms, such as by writing articles about our online presence or sending us messages. In addition, Facebook may, among other things, provide statistics and insights (e.g., total number of page views, “likes” information, activity on the page, interactions via posts, video views, post reach, comments, content shared, responses, etc.) that help us better understand interests and preferences so that we can enhance the appeal of articles or our presentation of performance or choose the appropriate time to publish.

III. We use links to social networks on our websites, which transfers our users’ personal information to social networks without their knowledge when they visit our websites. The links are designed to establish a connection to our online presence on a particular social network only upon request – and therefore only after the user clicks the link. When the link is clicked, the IP address general header information of the user’s browser is sent to the corresponding social network. The corresponding social network may collect further personal data as soon as you use its offers. For example, if you are logged into your account, Facebook may associate your visit with your account. Please note that we do not know the content of the personal data provided in the further process or its use by social networks

5 Recipients of data, rights of data subjects

  1. Recipients of Users’ personal data, depending on the purpose of processing, may be, for example, IT solution providers, telecommunication service providers, cooperating companies, persons using websites or social networks – to the extent of the data published there, authorized public authorities, as well as authorized persons and entities acting on behalf of and by order of the Administrator
  2. Provision of data to Trusted Partners

Data may be shared with the Administrator’s Trusted Partners based on the Administrator’s legitimate interests or on the basis of consent. This involves sharing your personal data, stored in cookies on your device and its cache (including data shared in your browsing history and data collected during your activity on the services) and location data generated by your device – for marketing purposes (involving automated analysis of your activity on websites (cookies, etc.) on your device and reading such tags.

The above paragraph applies to the processing of your personal data for marketing purposes of Trusted Partners, and Trusted Partners are e-commerce companies, advertisers and similar organizations with which the Administrator cooperates. You will find a list of Trusted Partners on the last page of this document.

III. Transfer of data outside the EEA

Our Partners are primarily based in countries in the European Economic Area (EEA) or in Switzerland, recognized as a country that meets an adequate level of data protection. Some of our Trusted Partners, e.g. Google or Facebook, are based outside the EEA, and we therefore transfer Personal Data outside the EEA only when necessary, with an adequate level of protection, primarily by:

  • cooperating with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued regarding the determination of an adequate level of protection for Personal Data;
  • applying standard contractual clauses issued by the European Commission;
  • applying binding corporate rules approved by the relevant supervisory authority.
  1. Users have the right to request access to their Personal Data, their rectification, deletion or restriction of processing, the right to data portability, and the right to lodge a complaint with the President of the Office for Personal Data Protection, in case deems that the personal data provided are processed in violation of the provisions of the aforementioned Regulation.
  1. Users have the right to object to the processing of personal data when it is carried out on the basis of a legitimate interest or consent to promotional activities. If the processing of personal data was carried out on the basis of a person’s consent to the processing of personal data, there is also the right to revoke such consent. This revocation does not affect the compliance of the processing with the applicable law, which was carried out on the basis of the consent before its revocation.

Expressing an objection or withdrawing consent is possible through statements submitted to daneosobowe@margomed.com or to the Administrator’s registered address.

 

………

Google

Facebook

………….

 

If you want information or wish to exercise your rights, please contact the relevant operator directly. This is because only the relevant operators have access to your personal data and can provide you with the relevant information and take further action if necessary. If you need assistance in exercising your rights, you can contact us at any time.

A description of the processing of your data by the relevant operator, as well as the requirements for objecting (opting out) can be found in the information provided by the relevant operator.

Below is information as to some of them:

Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

 

Privacy Policy: https://www.facebook.com/about/privacy/

Website details: https://www.facebook.com/legal/terms/information_about_page_insights_data

Cancellation: https://www.facebook.com/settings?tab=ads

Service Provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States.

Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Resignation: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

 

Cookie Policy

6 Types of Cookies used

  1. Cookies used by the Administrator arę safe for the User Device. In particular, by this means, it is not possible for viruses or other unwanted software or malware to enter the Users’ Devices. These cookies allow̨ identify the software used by the User and customize the Service individually for each User in accordance with the contract. Cookies usually contain̨ the namę of the domain from which they originatę, the time they are stored on the Device and the assigned value.

II.The Administrator uses the following types of cookies:

  • Session cookies: they arę stored on the User’s Device and remain̨ there until the session of the respective browser ends. The stored information is then permanently deleted from the Device’s memory. The mechanism of session cookies does not allow the collection of any personal data or any confidential information from the User’s Device;
  • Persistent cookies: they arę stored on the User’s Device and remain̨ there until they are deleted. Ending the session of a particular browser or switching off the Device does not cause them to be deleted from the User’s Device. The mechanism of permanent cookies does not allow any personal data or any confidential information to be collected from the User’s Device.
  • Essential cookies – cookies necessary for the proper operation of our website. They support basic technical functions. The use of these cookies does not require your consent and they are stored on your device by default. They are active for the duration of your visit to the site or slightly longer. You can block these cookies using your browser settings.
  • Analytical cookies

[YES ] [ NO ]

[consent may not be selected by default; consent is selected if “continue” is selected in the first layer – in the pop up].

We want to analyze how you as a User use our service. This allows us to create reports and statistics to help us improve our service. We use Google Analytics [https://analytics.google.com] for this purpose, and some of the information collected by cookies goes to Google. The period of activity of these cookies is up to 2 years.

_ga
_gid
_dc_gtm_<property-id>

Google Analytics is a tool provided by Google LLC of the USA. Google processes information for us, based on your consent. Analytics cookies do not collect information that can directly identify you. The information collected relates to, among other things, your device, browser, approximate location, and how you use our site (e.g., which page you visit the site from, which pages you view and for how long, whether you have visited our site before).

We also use , which groups Google Analytics and Facebook analytics tools.

III. You have the optioń to limit or disable access of cookies to your Device, as further described in § 8. If you use this option, you will be able to use the Site, except for functions that by their nature requirę cookies.

 

7 The purposes for which̨ cookies are used.

  1. The Administrator uses proprietary Cookies in order to correctly configure the Service, and in particular to:
  • adapting the content of the Website’s pages to the User’s preferences and optimizing the use of the Website’s pages;
  • to recognize the device of a User of the Website and its location and, accordingly, to display a website tailored to his/her individual needs;
  • remembering the settingś chosen by the User and personalizing the User’s interface, e.g. with regard to the chosen language or region from which the User comes;
  • remembering the history of visited pages on the website in order to recommend content;
  • font size, website design, etc.
  • to ensure the security and reliability of the site (technical cookies
  1. The Administrator uses its own cookies to authenticate the User on the site and ensure the User’s session on the site, and in particular to:
  • maintaining the session of the User of the Website (after logging in), thanks to which the User does not have to re-enter his/her login and password on each sub-page of the Website;
  • correct configuration of selected functions of the Website, enabling in particular verification of authenticity of a browser session;
  • optimization and increase of efficiency of services provided by the Administrator.

III. The Administrator uses proprietary Cookies to carry out the processes necessary for the full functionality of the websites, and in particular to:

  • adapting the content of the Website to the User’s preferences and optimizing the use of the Website. In particular, these files allow̨ to recognize the basic parameters of the User’s Device and appropriately display the website, tailored to his/her individual needs;
  1. The Administrator uses proprietary Cookies to remember the User’s location and, in particular, to correctly configure selected features of the Website, allowing the information provided to the User to be customized taking into account the User’s location.
  2. The Administrator uses Cookies for the purpose of analysis and research, as well as audience auditing, and in particular to create anonymous statistics that help̨ understand how the Website’s Users use the Website’s pages, which makes it possible to improve their structure and content.
  3. The Administrator of the Service uses external Cookies in order to log in to the Service with the help of the social̨ network Google (administrator of external cookies: Google Inc. based in the USA).

VII. The service administrator uses external Cookies in order to popularize the service with̨ Facebook social network (external cookie administrator: Meta Platforms Ireland Limited )

 

  • 8. Possibilities to determine the conditions for storing or accessing cookies
  1. The User may independently and at any time change the settings for Cookies, specifying the conditions for storing and accessing by Cookies to the User’s Device. The User may change the settings referred to in the preceding sentence by means̨ of the settings of the Internet browser or by means̨ of the configuration of the service. These settings may̨ be changed, in particular, in such a way as to block the automatic handling of̨ cookies in the settings of the web browser or inform on their placement of cookies on the User’s device each time. Detailed information on the possibility and methods of handling cookies are availablę in the settings of your software (web browser).
  2. The User may delete Cookies at any time using the available functions in the web browser he/she uses.

III. Restricting the use of cookies, may affect some functionalities available on the Website.

  1. Data is processed for the purpose of providing electronic services. The Administrator may process data that is necessary to provide the service. Data that are not necessary for the provision of the service Administrator may process only with consent.
  2. Each User has the right to inspect his/her data, as well as the right to correct them and request their deletion. In order to do so, one should apply by mail to the address of MARGOMED S. A. with its registered office in Lublin, 16 Erazma Plewińskiego Street, 20-270 Lublin, or by e-mail to the address
  3. The User may remove his/her Account from the Service at any time. With the deletion of the Account, all User data will be permanently and irretrievably deleted.

VII. Submission by the User of a request for deletion of personal data provided in the Account registration form, causes that further provision of the service is impossible for technical reasons and is therefore equivalent to deletion of the Account of that User.§7 §9.

9 Period of functioning of Cookies and determination of whether third parties can access such files

If we process personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of the use of third party services or if personal data is disclosed or transferred to third parties, this will only occur if it is for the purpose of: fulfilling our (pre-)contractual obligations, based on your consent, based on a legal obligation, or based on our legitimate interests. Subject to legal considerations or contractual provisions, we process or transfer Personal Data in a third country only if the prerequisites and security levels set forth in Articles 44-47 of the RODO are met.

Therefore, the Administrator transfers Personal Data outside the EEA only when necessary, with an adequate level of protection, primarily by:

  • cooperation with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued regarding the determination of ensuring an adequate level of protection of Personal Data;
  • the consent of the Data Subject, insofar as it can be obtained for specific processing operations
  • application of standard contractual clauses issued by the European Commission;
  • application of binding corporate rules approved by the relevant supervisory authority;
  • evaluation of the intended transfer to ensure compliance with the CJEU judgment in Schrems II and possible implementation of measures in addition to the standard contractual clauses;

The Administrator always informs you of its intention to transfer Personal Data outside the EEA at the stage of collection.

Only in exceptional cases may your full IP address be transferred to a Google server in the US.

For more information about analytics cookies, see below.

10 Changes to Privacy Policy and Cookies Policy.

  1. The Administrator reserves the right to change this Privacy Policy and Cookies Policy at any time.
  2. The changes made will always be published on this page.

III. Introduced changes become effective on the date of publication.