a) Data Controller

Data Storage Location

The Controller of the personal data of users of the synerixa.eu website is Pharmena SA, with its registered office in Łódź, 90-729, ul. Gdańska 47/49, entered into the Register of Entrepreneurs of the National Court Register by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register, under KRS number: 0000304079, share capital: PLN 1,113,775.80, NIP (Tax Identification Number): 7282467846, REGON (National Official Business Register Number): 473085607. Contact details: phone +48 42 280 77 07, e-mail: office@pharmena.eu.

b) Purposes and Legal Basis for Processing

The Controller processes the personal data of website users for the following purposes:

• Handling inquiries and contact: providing answers to questions sent electronically or by phone; the legal basis for processing is the legitimate interest pursued by the Controller in building relationships with users and providing information about products/services (Article 6(1)(f) of the GDPR).
• Direct marketing: informing about new products and the Controller’s offer; the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).
• Analytics and statistics: optimizing the performance of the synerixa.eu website; the legal basis is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

c) Data Retention Period

Personal data will be stored for the period necessary to provide an answer to the inquiry, and after that time, until the expiry of any potential claims or until the user submits an effective objection to the data processing.

d) Data Recipients

The recipients of personal data may include entities providing services to the Controller, in particular:

• entities providing and supporting the Controller’s IT systems,
• entities providing website hosting and e-mail services,
• entities providing legal or advisory services.

e) User Rights

Every data subject has the right to access their data and rectify them, the right to erasure of data (“right to be forgotten”), the right to restriction of processing, the right to data portability, and the right to object to the processing of their data.

f) Complaint to the Supervisory Authority

If a user considers that the processing of their personal data violates the provisions of the GDPR, they have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (PUODO).