Privacy Policy 

About us

Swiss House Sp. z o.o., based in Warsaw (00-844) at 87 Grzybowska Street, registered in the Register of Entrepreneurs conducted by the District Court for the capital city of Warsaw, XIV Commercial Division of the National Court Register under the number KRS 0000776656, NIP 732-219-56-45. Personal data is obtained and processed in the manner and on the principles set out in this Policy. 

General Provisions

We ensure that the processing of your data complies with the provisions of the General Data Protection Regulation (GDPR) 2016/679/EU (hereinafter referred to as “GDPR”), the Personal Data Protection Act, as well as specific regulations (contained, among others, in labor law or the Accounting Act).

Our company is the data controller in the understanding of Article 4(7) of the GDPR, and we also use the services of processors as defined in Article 4(8) of the GDPR, who process personal data on behalf of the controller (e.g., accounting or IT companies).

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of rights or freedoms violations of natural persons, considering the likelihood and severity of the risk.

 What We Use Your Personal Data For

Contact details obtained from contractors (e.g., their employees) are used to respond to inquiries and to conclude and efficiently execute contracts. As an employer, we process the data of employees and individuals cooperating with us on a basis other than employment relationships. We also conduct marketing activities to reach interested parties and provide them with up-to-date information about our products and services.

We disclose your data to third parties with your consent or when we are required to do so by law.

On What Principles and Basis Do We Process Your Data

We take care to protect the interests of data subjects, particularly ensuring that data is:

• processed lawfully, fairly, and transparently;
• collected for specified, explicit, and legitimate purposes and further processed in a manner compatible with those purposes;;
• adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;;
• accurate and, where necessary, kept up to date; we take every reasonable step to ensure that inaccurate personal data is promptly erased or rectified;;
• kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed;;
• processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.

We usually process your data based on consent, which can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In other cases, processing is necessary for the performance of a contract to which you are a party or to take action at your request before entering into a contract.

In some situations, processing is necessary for compliance with a legal obligation to which we are subject. Such obligations arise, for example, from labor law or the Accounting Act.

Processing may also be necessary for purposes arising from our legitimate interests, such as pursuing claims related to our business activities.

Your rights

We take appropriate measures to provide all relevant information and facilitate communication with you regarding the processing of personal data and the exercise of your rights to:

• information provided at the time of data collection;
• information provided upon request about whether data is being processed and other matters specified in Article 15 of the GDPR, including the right to obtain a copy of the data;
• rectification of data;
• erasure of data (“right to be forgotten”);
• restriction of processing;
• data portability;
• objection;
• information about data breaches.

To contact us regarding the exercise of these rights, send a message to contact@shpharma.pl You have the right to lodge a complaint with the supervisory authority responsible for data protection.

How We Will Contact You

We provide information in writing or by other means, including electronically where appropriate. If you request it, we can provide information orally, provided your identity is confirmed by other means. If you submit your request electronically, we will respond electronically where possible, unless you indicate a preferred form of communication.

Timeframe for Responding to Your Request

We strive to provide information without undue delay, typically within one month of receiving a request. If necessary, this period may be extended by another two months due to the complexity or number of requests. In any case, within one month of receiving the request, we will inform you of the actions taken and, if applicable, the extension of the period, stating the reasons for the delay.

Subcontractors/Processors

When collaborating with entities that process personal data on our behalf, we use processors that provide sufficient guarantees of implementing appropriate technical and organizational measures so that processing meets the requirements of the GDPR and protects the rights of data subjects.

Data Retention

We store personal data in a form that permits identification of the data subject for no longer than is necessary for the purposes for which the data is processed. After this period, the data is anonymized (deprived of features allowing identification) or deleted.

The data processing period is primarily determined based on legal provisions (e.g., the retention period of employee records, accounting documents) and the legitimate interest of the controller (e.g., marketing activities). The retention policy covers both paper and electronic data.

Authorizations

We ensure that every person acting under our authority and having access to your personal data processes it only on our instructions, unless otherwise required by Union or Member State law.

Cookies 

Cookies are small files saved on your computer that store settings and other information used on the websites you visit. Cookies can contain site settings or be used to analyze user interactions with the site. We use cookies to tailor the content of our websites to your preferences and optimize the use of the websites, remember the data entered by the user in connection with the use of the service, as well as conduct statistical analyses regarding users and visitors to the site for the website administrator.

The data transmitted in cookies is safe for the user and does not affect the operation of the user’s device. You can configure your web browser on your device to automatically accept cookies, notify you about sending cookies to your device, or completely block the receipt of cookies.