Privacy Policy

Welcome to the website of Infermedica Sp. z o.o. with its registered office in Wrocław, at Plac Solny 14/3, 50-062 Wrocław, Poland ("Infermedica", “we”, “us”, “our”). Infermedica is a Polish company entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under KRS number: 0000429183, having tax identification number (NIP): 8971782877 and registered business number (REGON): 021889810. Infermedica owns the website under the domain www.infermedica.com and its related subdomains (the “Website”), and is the controller of any personal data collected and processed in connection with usage of the Website.

All our activities connected with the Website comply with the applicable data protection legislation, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).

The main goal of this Privacy Policy is to inform you how and for what purpose we process personal data in connection with your visit to, and use of the Website.

We collect and process your data to ensure and improve the functioning of the Website. We collect and process your personal data, i.e. information that identifies, or at least makes it possible to identify, you as a natural person when you voluntarily decide to actively communicate with us or when you voluntarily subscribe for information we provide via the Website, including subscription to our Blog and scheduling a demonstration of our products and services.

What is more, we collect and process certain technical data generated due to you visiting the Website which may also be considered personal data. ‘Processing’ means any operation which is performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, any kind of disclosure, erasure or destruction, or other use.

We collect several different types of information for various purposes to ensure and improve our Website. The types of information that we collect and process depend on the types of services we provide via the Website. We collect and process your personal data:

• when you submit a request for a meeting, contact or demonstration of our products and services,

• when you subscribe to a newsletter (e.g. containing the information posted on our blog, commercial information) or reports,

• when you contact us,

• when you browse the Website,

If you wish to apply for a job vacancy currently offered on the Website, you will be automatically redirected to the recruitment website, where you will be provided with information regarding processing of your personal data in the recruitment process separately.

Your personal data are provided voluntarily, are necessary to contact you, schedule a call, send you a requested report or similar materials, distribute the newsletter requested related to our blog, and to provide you with commercial information about our services and products. Without it, we will not be able to contact you, conduct a requested call, provide you with requested information including commercial information, or share the newsletter with you.

Scheduling a meeting:

If you request a meeting to talk about our products and services (by clicking the “schedule a meeting” button on our Website), we will collect and process the personal data which is necessary to initiate communication, share materials or resources and assess the extent of your interest in our products and services (e.g. name, e-mail address, company details, field of interest)

Where we collect and process your personal data when scheduling a meeting about our products and services, in particular:

• to provide you with requested information (legal basis under Article 6(1)(a) of the GDPR – your consent);

• to take steps before entering into negotiations (legal basis under Article 6(1)(b) of the GDPR);

• the purpose of establishing, asserting, or defending ourselves against claims – since the processing is necessary for us to pursue a legitimate interest (Article 6(1)(f) of the GDPR), namely being able to establish, assert or defend ourselves against claims.

Newsletter subscription:

If you subscribe to our newsletter  (“subscribe to our newsletter” button on our Website), we will collect and process the personal data necessary to send the information you have subscribed to (e.g. e-mail address, name, organization name).

Where we collect and process your personal data when you subscribe to our newsletter, the legal basis is in particular:

• the purpose of providing you with a newsletter and other content related to market insights, commercial information, industry trends, blog article recommendations, and other topics – the basis is your voluntary consent (legal basis under Article 6(1)(a) of the GDPR) and Article 10(2) of the Act of 18 July 2002 on the provision of services by electronic means with respect to providing commercial information);

• the purpose of managing newsletter undertakings – it is our legitimate interest and it helps us to timely and efficiently provide you with the newsletter and to keep records regarding the efficiency and time until when your data is processed (legal basis under Article 6(1)(f) of the GDPR);

• the purpose of establishing, asserting, or defending ourselves against claims– since the processing is necessary for us to pursue a legitimate interest (Article 6(1)(f) of the GDPR), namely being able to establish, assert or defend ourselves against claims.

Contact:

When you ask us to contact you or you contact us, we will collect and process the personal data which is necessary to initiate contact or answer your call (e.g. e-mail address, name, message contents)

Where your personal data are collected and processed for contact purposes, the legal basis is in particular:

• the purpose of contacting you –the basis is your voluntary consent (legal basis under Article 6(1)(a) of the GDPR) by which we mean the ability of giving you an answer you expect from us;

• the purpose of establishing, asserting, or defending ourselves against claims – since the processing is necessary for us to pursue a legitimate interest (Article 6(1)(f) of the GDPR), namely being able to establish, assert or defend ourselves against claims.

Security:

When you browse our Website and use our services, we collect and process your IP address and other technological data derived from logs, which may be considered personal data, for security purposes. We do not process such data to identify you as a natural person, but only to increase the level of security of the Website and the service in order to be able to react - for example - to the activity of automatic mechanisms.

In such a case, your personal data is collected and processed for purposes related to:

• ensuring the security and functionality of the Website and the service, and the legal ground for processing is legitimate interest (legal ground under Article 6(1)(f) of GDPR) understood as a necessity to ensure the secure use of the Website and our services. 

• establishing, asserting or defending ourselves against claims – the processing is necessary for us to pursue our legitimate interest (Article 6(1)(f) of the GDPR), namely being able to establish, assert or defend ourselves against claims.

Marketing:

Additionally, we take advantage of marketing services in order to analyze your behavior for the purposes of optimizing the functionality of the Website, as well as for the purposes of optimizing our advertising activities. In particular, we take advantage of technologies such as Google Analytics.

In such a case the data is collected and processed for

•  marketing purposes, and the legal grounds for processing is legitimate interest (legal ground under Article 6(1)(f) of GDPR) understood as the desire to reach as many users and customers as possible, to promote our Website and services and thereby develop our business;

• establishing, asserting or defending ourselves against claims – the processing is necessary for us to pursue our legitimate interest (Article 6(1)(f) of the GDPR), namely being able to establish, assert or defend ourselves against claims.

We will retain and use your personal data only for as long as we need them to fulfil the purpose for which they are collected and processed or as long as required and/or possible due to retention requirements specified in the provisions of law.

When it comes to demo scheduling, we will process your data:

• to conduct a meeting - until the meeting or communication is completed;

• to establish, assert or defend ourselves against claims – until such claims become time-barred;

When it comes to newsletter subscription, we will process your data:

• to provide you with a newsletter, to analyze its efficiency and to maintain a commercial database – until consent is withdrawn, until you object to our processing of personal data or for a period of up to three years from the date of the last action you performed by clicking the link to the newsletter sent to you via e-mail

• to establish, assert or defend ourselves against claims – until such claims become time-barred.

When it comes to requests for contact, we will process your data:

• to contact you - until the purpose of contact is achieved, in any case for no more than three years from the last action performed;

• to establish, assert or defend ourselves against claims – until such claims become time-barred.

When it comes to security matters, we will process your data:

• until you object to our processing of your personal data, or no longer than 30 (thirty) days from the date they were collected;

• to establish, assert or defend ourselves against claims – until such claims become time-barred.

When it comes to online marketing matters, we will process your data:

• until you object to our processing of your personal data for marketing purposes, or until you change the ad settings on your Google profile as well as directly on the webpages of other internet marketing services providers;

• to establish, assert or defend ourselves against claims – until such claims become time-barred.

We work with some third parties and they may have access to some of the information about you that we collect and process. The recipients of your personal data may include:

• entities authorized by law on the basis of a proper request (courts, state authorities);

• entities providing accounting, IT, marketing, communication, and analytical and legal services, including HubSpot, or Google, 

• subcontractors with whom we cooperate.

Your information, including personal data, may also be transferred to — and maintained on — computers located outside of the European Economic Area where the data protection laws may differ from the GDPR.

Therefore, if we transfer personal data outside the European Economic Area, i.e. to third countries, the transfer of personal data will be based on appropriate legal mechanisms such as a Commission Implementing Decision, standard contractual clauses or other similar legal instruments provided for in the GDPR.

To ensure that you have adequate control over your personal data transferred outside the European Economic Area, you will have the right to obtain a copy of your personal data transferred to third countries at any time.

You have the following rights under the GDPR:

• the right to request access to your data and to receive a copy of your data: whenever possible, you can access, update or request deletion of your personal data;

• the right to rectify (correct) your data: you have the right to have your information rectified if that information is inaccurate or incomplete;

• the right to erasure: you have a right to erasure regarding data that are no longer required for the original purposes or that are processed unlawfully;

• the right to data portability: you have the right to be provided with a copy of the information we have regarding you in a structured, machine-readable and commonly used format;

• the right to object: you have the right to object to our processing of your personal data – upon your justified objection we will cease any further processing under Article 6(1)(f) of the GDPR;

• the right to withdraw consent: you also have the right to withdraw your consent at any time where we relied on your voluntary consent to process your personal information;

• the right to lodge a complaint with the competent supervisory authority - about our collection and use of your personal data.

In order to exercise your rights, you may send a request to the following e-mail address: support@infermedica.com send a letter to our correspondence address given above or come to our registered office in person. Please note that before responding to such requests or enabling exercise of your rights, we may ask you for proof of identification. In order to withdraw the consent given to us for personal data processing, you can also click the ‘unsubscribe’ hyperlink in e-mail correspondence. The withdrawal of your consent does not affect the lawfulness of our previous processing based on your consent before consent was withdrawn effectively.

The security of your data is a very important issue for us. We strive to conscientiously and perpetually protect your personal data from loss, destruction, distortion/falsification, manipulation and unauthorized access or unauthorized disclosure through appropriate technical and organizational measures adopted at our company.

However, please always keep in mind that no method of transmission over the Internet or method of electronic storage is 100% secure. Due to the inherent nature of the Internet, we cannot guarantee that during transmission over the Internet or while stored on our system or otherwise in our care, information, will be safe from any intrusion by third parties, such as hackers.

We use cookies to track your activity on our Website, and we hold certain information obtained from such tracking.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from our Website and stored on your device. They are used to collect and track information and to improve and analyze our services rendered through our Website.

Detailed information can be found in our Cookies policy.

Certain services offered to you through the Website contain links to websites hosted and operated by companies other than us, in particular the webpages of our partners or software hosting webpages. We do not share your personal information with these third parties, but you should be aware that any information you disclose to these third parties once you access their websites is not subject to this Privacy Policy.

Based on the legitimate interest in the analysis, optimization and economic operation of our activities, as well as in analyzing your behavior in order to optimize both our Website and our advertising, we use certain online marketing services such as Google Analytics, LinkedIn, and HotJar. These services can change over time. You can check the current list of technologies used in CookieYes - the tool we use to manage cookies. You can also examine the web page in the settings of your browser or contact us for the details. 

Our Website mostly uses Google Analytics, a web analysis program from Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). Google Analytics uses cookies that are stored on your terminal device as well as your IP address with an active IP anonymization feature. On our behalf, Google uses such information to analyze your use of our Website and provides us with reports and other services. The IP address transmitted from your terminal device to Google Analytics will not be merged with any other data that Google has. Google will transfer your data to third parties only if permitted by applicable law or in accordance with outsourced data processing agreements.

You can prevent the collection and processing of information generated by the Google cookie by placing an opt-out cookie or deactivating Google Analytics in the menu of your terminal device. More information can be found here: https://policies.google.com/privacy

We may revise this privacy policy from time to time. The most recent version of the privacy policy will govern our use of your personal data and other information we process, and will be posted on the Website. By continuing to access or use the Website and the services we render through it, once those changes take effect, you agree to be bound by the revised privacy policy. If you do not agree, you must cease using our Website immediately.

You can reach us:

• via e-mail: support@infermedica.com or dpo@infermedica.com

• by writing to our registered office: Infermedica Sp. z o.o., Plac Solny 14/3, 50-062 Wrocław, Poland

Considering the security and transparency of the processing of personal data and the need for their constant control, we have appointed a Data Protection Officer (“DPO”) in the person of Mr. Marcin Kaleta.

With the DPO you can contact by using dpo@infermedica.com or via our postal address (with notation “Data Protection Officer”).