Privacy policy

Data controller

• Name: REGAL PHARMACY s.r.o.
• Registered office: Sokolská tř. 936/21, 702 00 Moravská Ostrava a Přívoz, Czech Republic
• Company ID: 10809104
• Website: www.regalpharm.cz
• E-mail: info@regalpharm.cz

What are the purposes of personal data processing?

The main reason for processing personal data is to provide our products and services.

Our activity: a multinational pharmaceutical distribution company for medicines, botulinum toxin and dermal fillers.

Specific purposes of processing:

• Using your e-mail to handle your enquiry

What are the legal bases for processing?

Personal data is processed for the purposes stated above on the following legal bases:

• Conclusion or performance of a contract
• Legitimate interests of the controller or a third party — sending newsletters to clients

Where processing is based on your consent, such consent is always voluntary and freely given, and we will not pressure you in any way to grant it. We will not carry out processing without your consent. You may withdraw your consent at any time and we will stop the processing based on it. Withdrawal of consent does not affect processing already carried out.

Where processing is based on legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. We are obliged to assess whether we have sufficient grounds to continue processing and to inform you accordingly.

What data do we process?

We process mainly the data we need to provide our products or services, to comply with legal obligations and to protect your or our interests.

Categories of personal data processed:

• Contact data
• Data on the creation and status of a service order

Unless stated otherwise, the data listed above is necessary for the purposes stated above and without providing it no contractual or similar relationship can be established with us. Where certain data is voluntary, we will inform you of this.

Where do we obtain the data?

We obtain personal data:

• Directly from data subjects (customers, employees, etc.)

How do we work with the data?

We carry out processing manually and automatically using various applications and software, in particular those that help us perform our activities and without which we could not practically provide our services.

Automated individual decision-making means processing that has significant consequences for you (e.g. refusal to conclude a contract) and in which no people are directly involved — it uses exclusively automated means (applications, software, algorithms, etc.). Profiling means automated processing of data to evaluate certain personal aspects of a person (work performance, economic situation, health, behaviour, preferences or location tracking).

We do not carry out automated individual decision-making.

Where automated decision-making would have significant consequences for you (e.g. lead to refusal to conclude a contract, rejection of a payment or a change in the terms of an agreed service), you have the right to have such a decision reviewed, to express your point of view and to contest it.

We do not carry out profiling.

To whom may we disclose the data?

Personal data may be processed by these recipients:

• We do not disclose data to any third parties

If anything changed in our business and we transferred our commercial or other activity, in whole or in part, to another person, the personal data relating to that activity would form part of such transfer. The same would apply if we were required to make such changes in accordance with legal regulations.

Similarly, we may be obliged to provide certain data on the basis of legal regulations to authorised public authorities or other entities designated by binding legal regulations.

Where may your data be processed?

Your personal data may be transferred for processing within the EU and the European Economic Area. In accordance with legal regulations we may also transfer personal data to countries outside the EU/EEA, but only where adequate safeguards are ensured and guarantees are demonstrated that the data will be handled in accordance with legal regulations.

How long do we keep the data?

We process personal data:

• After the end of the service or delivery of goods, for the protection of rights and legitimate interests, generally until the expiry of the limitation period

What are your rights?

You may request information about processing, rectification of inaccurate data, erasure of data where the purpose has ceased or processing is unlawful; you have the right to restriction of processing, the right to object to processing based on legitimate interest including direct marketing, the right of access to data (a copy) and portability, and the right to lodge a complaint with the supervisory authority (the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz) or with your local data protection authority (find yours at https://edpb.europa.eu/about-edpb/board/members_en).

If you receive commercial communications from us, you always have the option to unsubscribe via the link contained in each such electronic message or by a direct request sent to our contact points.

Where requests related to the exercise of your rights are manifestly unfounded or excessive (in particular if repeated), we may require a reasonable fee not exceeding the costs necessary to handle the request, or refuse your request.

Contacts for requests and questions concerning personal data are stated in the header of this document.

What security measures do we apply?

To protect personal data we have introduced the following measures:

• Security of devices, systems, networks and websites