GDPR

Tomasz Styk
  • Updated

Data Protection Declaration


In accordance with art. 13 section 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR") Sundose sp.z o.o. provides the following information regarding the processing of personal data:

Personal data administrator

The administrator of personal data is Sundose sp.z o.o., ul. Vetterów 1, 20-277 Lublin, entered into the Register of Entrepreneurs kept by the Lublin-East District Court in Lublin with headquarters in Świdnik, VI Commercial Department of the National Court Register under the number KRS: 0000642406, NIP: 7123320705, REGON: 365652197, gdpr@sundose.io.

Data Protection Officer

The administrator has appointed a Data Protection Inspector, which is Małgorzata Kufel. The inspector can be contacted in matters related to data protection, including the exercise of the rights of data subjects. Contact with the inspector is possible at the e-mail address gdpr@sundose.io or by post at Sundose sp.z o.o., ul. Vetterów 1, 20-277 Lublin.

The purposes of processing personal data

Personal data may be processed by the Administrator in order to compile the results of health history based on the data provided by the user - pursuant to art. Art. 6 clause 1 lit. a and art. 9 item 2 lit. a (consent to the processing of health data).

Data recipients

The administrator may provide personal data to its subcontractors (entities that use the services for processing) such as IT service providers.

The Administrator does not transfer personal data outside the European Economic Area, except for sharing data with the Administrator's subcontractors (entities that process data on his behalf), who provide IT services to the Administrator. The administrator uses only entities belonging to the EU-U.S. Program. Privacy Shield, which ensure compliance of their activities with the GDPR.

Time of processing personal data

The administrator may store your personal data for a period of 10 years from the moment they were obtained.

Rights of data subjects

You have the following rights:

  1. the right to access your personal data and the right to receive a copy thereof;
  2. the right to rectify personal data;
  3. the right to delete personal data;
  4. the right to request the restriction of the processing of personal data;
  5. the right to transfer personal data;
  6. the right to object to the processing of personal data;
  7. the right to lodge a complaint with a supervisory authority;

You also have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.

In order to exercise the above rights, you can contact the Data Protection Officer.

The administrator does not make a decision towards you that would be based solely on automated processing, including profiling, unless you have agreed to it.

Related articles