Privacy policy

GENERAL PROVISIONS

1. The administrator of personal data collected via the website https://jmsante.pl/ is JM SANTE PHARMA, operating at: ul. Krzysztofa Kamila Baczyńskiego 25A, 41-203 Sosnowiec, Poland. Correspondence address: ul. Krzysztofa Kamila Baczyńskiego 25A, 41-203 Sosnowiec, NIP: 1251614007, REGON: 145920490, email address: rodo@jmsante.pl, hereinafter referred to as the “Administrator“.
2. Personal data collected by the Administrator via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), and the Polish Act on the Protection of Personal Data of 10 May 2018.

TYPES OF PERSONAL DATA PROCESSED

The Administrator processes the following categories of personal data:

• Name and surname,
• Date of birth,
• Address (residential),
• Email address,
• Phone number,
• Tax Identification Number (NIP).

PURPOSE, LEGAL BASIS, AND DATA RETENTION PERIOD

1. The Administrator may process personal data collected via the website https://jmsante.pl/ for the purposes, legal bases, and retention periods indicated below:

Purpose of Data Processing	Legal Basis for Data Processing	Data Retention Period
Performance of a Sales Agreement or an electronic service agreement, or taking steps at the request of the data subject prior to entering into such agreements	Article 6(1)(b) GDPR – performance of a contract	Data are retained for the duration necessary to perform, terminate, or expire the agreement.
Direct marketing	Article 6(1)(f) GDPR – legitimate interest of the Administrator	Data are retained for the duration of the Administrator’s legitimate interest, but no longer than the statute of limitations for claims.
Marketing	Article 6(1)(a) GDPR – consent	Data are retained until consent is withdrawn by the data subject.
Providing feedback on the concluded Sales Agreement	Article 6(1)(a) GDPR – consent	Data are retained until consent is withdrawn by the data subject.
Use of the online store website and ensuring its proper functioning	Article 6(1)(f) GDPR – legitimate interest of the Administrator	Data are retained for the duration of the Administrator’s legitimate interest, but no longer than the statute of limitations for claims.

2. Additional information may be collected during website use, such as IP address, domain name, browser type, access time, or operating system type. The legal basis for these activities is Article 6(1)(f) GDPR.

DATA SHARING

1. Personal data may be shared with service providers cooperating with the Administrator, such as:
   • Carriers and couriers,
   • Electronic payment processors,
   • IT service providers.
2. Data are stored exclusively within the European Economic Area (EEA).

RIGHTS TO CONTROL, ACCESS, AND CORRECT DATA

1. Data subjects have the right to access, rectify, delete, restrict processing, transfer data, object to processing, and withdraw consent to data processing.
2. To exercise these rights, please contact the Administrator at: rodo@jmsante.pl.

COOKIES

1. The website uses cookies to ensure proper functioning and analyze visits.
2. Cookies allow the collection of information on how the website is used.

FINAL PROVISIONS

1. The Administrator applies technical and organizational measures to ensure the protection of personal data appropriate to the risks.
2. In matters not regulated by the Privacy Policy, GDPR and other applicable Polish laws shall apply.