Personal data

Biomol-Med Sp. z o.o. with registered office in Łódź, at Huta Jagodnica 41, 94-412 Łódź, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for Łódź-Śródmieście, XII FACULTY OF THE NATIONAL COURT REGISTER, NCR (National Court Register) number: 0000136366, identified by TIN (Tax Identification Number): 7272573736 and NBRN (National Business Registry Number): 473083583, share capital in the amount of 126,000.00 PLN (hereinafter referred to as "company" or "Biomol"), devotes great attention to the protection of personal data. The purpose of this document is to inform you on how we process your personal data, for what purpose and for what reason the data is processed, to whom we may transfer this data, and what rights the owners of the personal data have.

As part of its operations, Biomol-Med Sp. z o.o. processes personal data of several categories of entities as well as types of data, including, among others, personal data of employees and applicants for employment, clients - natural persons or persons conducting sole proprietorship including suppliers and recipients of goods and services. The purpose of this document is to provide basic information on the subject of personal data processing at Biomol-Med Sp. z o.o. Any issues related to the protection of personal data may be sent to the following email address: lp.lomoibdoi

1. Which personal data is processed?

Biomol-Med Sp. z o.o. makes every effort to carefully process personal data only to the extent necessary for the purposefor which they are processed and attempts to minimize any processing of personal data. Biomol-Med Sp. z o.o. almost always processes personal data, which consists of personal data such as: name and surname/company name and contact details: address of residence/registered office, correspondence address, telephone number and email address. Other personal data is processed to the extent determined by the specific purpose of the processing, which you will be informed of before purchasing services in regards to the acquisition of your personal data.

For the purposes of implementing rights related to the processing of personal data, the following email address can be used: lp.lomoibdoi

---

2. On which basis is personal data processed?

Biomol-Med Sp. z o.o. processes personal data only when there is a legal reason to do so. The processing of personal data can only take place when:

• it's based on its owners consent and only if such consent has been expressed,
• without the owner's consent, usually on the basis of fulfilling the obligations of the cooperation agreement,
• in connection with fulfilling legal obligations

In the event that this is not related to the situation described in point 1, Biomol-Med Sp. z o.o. does not process any personal data without its owner's consent.

---

2.1. Processing of personal data for the purpose of fulfilling obligations under the agreement

In the event that an agreement is being concluded between a person and Biomol-Med Sp. z o.o. or if an agreement it is necessary to process personal data for the conclusion thereof , Biomol-Med Sp. z o.o. will processes it in such a way that it shall fulfil its rights and obligations under this agreement. In such case, Biomol-Med Sp. z o.o. does not need permission for such data processing. This type of agreement may be, for example, an employment contract, a commercial representation contract, a single contract concluded with a client of Biomol-Med Sp. z o.o. or contracts concluded with recipients and suppliers of goods and services.

It is the task of Biomol-Med Sp. z o.o. to make every effort to process personal data only when necessary as well as to ensure that the personal data being processed is updated and, most importantly, deleted, if the reasons for processing this data have ended, e.g. conclusion of the agreement.

---

2.2. Processing personal data for the purpose of fulfilling legal obligations

The obligation to process personal data is imposed on Biomol-Med Sp. z o.o. in accordance with the provisions of law. Certain Laws are directly imposed on the Biomol-Med Sp. z o.o., such as an obligation to store/process personal data, taking into account the obligations arising from the activities of Biomol-Med Sp. z o.o. Due to the fulfilment of these obligations, the person’s consent for the processing of personal data is not required.

In order to better understand. If a given person is, for example, an employee of Biomol-Med Sp. z o.o., then Biomol-Med Sp. z o.o. is obliged to process certain personal data in connection with the fulfilment of tax obligations as well as social and health insurance.

In this case, Biomol-Med Sp. z o.o. also ensures that personal data is processed to the minimum possible extent and for the shortest possible period. Processing of personal data for the purpose of fulfilling obligations under the agreement

In the event that an agreement is being concluded between a person and Biomol-Med Sp. z o.o. or if an agreement it is necessary to process personal data for the conclusion thereof , Biomol-Med Sp. z o.o. will processes it in such a way that it shall fulfil its rights and obligations under this agreement. In such case, Biomol-Med Sp. z o.o. does not need permission for such data processing. This type of agreement may be, for example, an employment contract, a commercial representation contract, a single contract concluded with a client of Biomol-Med Sp. z o.o. or contracts concluded with recipients and suppliers of goods and services.

It is the task of Biomol-Med Sp. z o.o. to make every effort to process personal data only when necessary as well as to ensure that the personal data being processed is updated and, most importantly, deleted, if the reasons for processing this data have ended, e.g. conclusion of the agreement.

---

2.3. Processing of personal data on the basis of consent

If a person has provided Biomol-Med Sp. z o.o. with consent for the processing of their personal data, this very fact will lead to the processing of their data. All consent obtained by Biomol-Med Sp. z o.o. is completely voluntary and the owner of the personal data is not obliged to provide said data. Moreover, failure to provide this consent should not be associated with any adverse consequences. What's more, once the consent is granted it can be revoked without any sanctions. The revocation of consent does not include the legal provisions for data processing carried out prior to this revocation.

---

3. The period for processing of personal data

Biomol-Med Sp. z o.o. processes personal data for a specified period of time. This period is determined by taking into account the purpose and legal basis of the processing. For example, the processing of personal data on the basis of obligations under the agreement takes into account it being processed for the period necessary to fulfil the rights and obligations arising from this agreement, therefore, for the most part, until the expiration of the last right resulting from this agreement. Medical records are stored in accordance with the Regulation of the Minister of Health of 21 December 2010 based on the types and scope of medical documentation and the manner of its processing. The processing conducted on the basis of legal obligations is done so for a period necessary to fulfil these obligations. As for the processing of personal data in accordance with the legitimate interest of its owner, this data shall be processed for the duration of this legitimate interest.

In the event that personal data is processed on the basis of granted consent, it is processed for the period specified in the consent and there exists a right to at any time withdraw the consent to its processing.

---

4. What sources is personal data obtained from?

Biomol-Med Sp. z o.o. acquires the vast majority of personal data directly from the data owner.

---

5. Who is the personal data transferred and shared with?

Biomol-Med Sp. z o.o. is the administrator of the personal data in question, which means that Biomol-Med Sp. z o.o. determines the purposes of it processing. In view of the above, Biomol-Med Sp. z o.o. may transfer or share personal data with entities which in their nature are data administrators or data processors.

Such entities are, for example, doctors describing analysis.

Biomol-Med Sp. z o.o. supervises that all persons to whom personal data is transferred comply with a high standard of its security. Biomol-Med Sp. z o.o. does not transfer the owner's personal data to any entities that do not guarantee adequate levels of protection of personal data.

Biomol-Med Sp. z o.o. neither transfers nor intends to transfer personal data outside of the European Union.

---

6. The rights of the personal data owner in connection with the processing of personal data

The right to access data

On the basis of this right, the owner of personal data has the right to access information on how the data is processed, for what purpose the data is processed as well as for what period of time the data is processed, this also includes where this personal data is collected, to whom it is transferred to, who besides Biomol-Med Sp. z o.o. is processing it as well as what other rights the data owner has. In case of any doubts, please contact Biomol-Med Sp. z o.o. with a request to this information at the following email address: lp.lomoibdoi

The right to rectification

In the event that the personal data owner determines that the personal data which is being processed is inaccurate or incomplete, the owner has the right to request, without undue delay, for it to be rectified or supplemented.

The right to deletion

In some cases, the owner of the personal data has the right to have his personal data deleted. The owner’s personal data will be deleted without undue delay if any of the following conditions are met:

• the owner’s personal data is no longer needed for the purposes for which it was processed,
• the owner withdraws the consent to the processing of personal data relating to the data for which the consent was absolutely necessary and at the same time there exists no other reason for which it would still need to be processed,
• the owner uses their right to object to the data being processed,
• the owner assumes that the processing of personal data being carried out by Biomol-Med Sp. z o.o. has ceased to comply with generally applicable laws, this right does not apply if the processing of personal data is still necessary for the fulfilment of legal obligations by Biomol-Med Sp. z o.o. as well as for defining, executing or defending of legal claims.

The right to restrict data processing

In some cases, apart from the right to delete personal data, it is also possible to exercise the right to limit the processing of personal data. In certain cases, this right allows the owner to request for their personal data to no longer be subject to processing - in this case, however, it is not final (as in the case of having the right to delete) but only pertains to a limited period of time Biomol-Med Sp. z o.o. must limit the processing procedures of specific personal data, if:

• the owner of the personal data refuses to confirm whether the given data is current,
• the owner’s personal data is processed without a sufficient legal basis (e.g. beyond the scope for which it may be processed), however, instead of requesting its deletion,
• the owner decides to limit its processing (e.g. if the owner thinks that sometime in the future he will like Biomol-Med Sp. z o.o. to process this data),
• there is no longer any need or purpose to process the data, but considers it necessary to identify, enforce or protect legal claims, or
• if the owner objects to its processing.

The right to lodge objections is described in more detail in the following point. During the period in which the objection is clarified, Biomol-Med Sp. z o.o. is obliged to limit the processing of the owner’s personal data.

The right to transfer

The owner of the personal data has the right to obtain, from Biomol-Med Sp. z o.o., information concerning any personal data which has been provided by it and which is processed on the basis of its consent. The owner’s personal data must be provided in a format which is transparent and legible and which is commonly used. In order for the data to be more easily transferred, it can only be data that is processed in an automated form in electronic databases.

The right to object

The owner of the personal data has the right to object to the processing of data, based on the legitimate interest of Biomol-Med Sp. z o.o. In such case, Biomol-Med Sp. z o.o. will cease the processing of personal data, unless important reasons exist for the processing to continue. In any such case, Biomol-Med Sp. z o.o. will cease to process the personal data for the purpose of direct marketing.

The right to revoke consent

If the processing of data is based on the consent given by the owner of the data, he/she has the right to revoke the consent for processing.

The right to lodge an objection

In connection with the protection of personal data and its processing, the owner of the personal data may lodge an objection to the Bureau of the Inspector General for Persona Data Protection (GIODO).

---

7. Using rights related to the processing of personal data

All issues related to data protection can be addressed in writing to the following email address: lp.lomoibdoi

Your application will be reviewed without undue delay, within a maximum period of one month. In unique cases, especially in the case when the problem is complex, Biomol-Med Sp. z o.o. reserves the right to extend the reply deadline for another two months. In such cases, the person concerned will be duly informed.