Last update: October 10, 2023
Learn how and why we collect and process your data – and what we do to keep it safe.
We respect the privacy rights of those whose personal data we collect and process.
All of our activities connected with the Website comply with the applicable data protection legislation, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).
who we are
why we collect and process personal data
what personal data we collect and process
for how long we process personal data
with whom we can share the data
what rights you have regarding your personal data.
Who we are
Infermedica Sp. z o.o. with its registered office in Wrocław, at Plac Solny 14/3, 50-062 Wrocław, Poland ("Infermedica", “we”, “us”, “our”) owns the website under the domain www.infermedica.com and its related subdomains (the “Website”), and is the controller of any personal data collected and processed in connection with usage of the Website.
You can reach us:
by writing to our registered office: Infermedica Sp. z o.o., Plac Solny 14/3, 50-062 Wrocław, Poland
Data Protection Officer
Considering the security and transparency of the processing of personal data and the need for their constant control, we have appointed a Data Protection Officer (“DPO”) in the person of Mr. Marcin Kaleta.
The DPO can be contacted by using email@example.com or via our postal address (with notation “Data Protection Officer”)
Why we collect and process data
We collect and process your personal data - information that identifies, or at least makes it possible to identify, you as a natural person- when you browse the Website and interact with us. Most of the personal data processed by us is passed directly to us due to one of the following reasons:
You are our Client,
You represent your organization,
You use one of our services,
You contact us (e.g. you request contact, you want to know more about our product or services, you share feedback regarding our products and services etc.),
You participate in our events (e.g. webinars, conferences, meetings, etc.),
You subscribe to our materials (marketing, newsletters, case studies, etc.),
You interact with our fan pages via social media or other similar platforms.
Additionally, we collect and process your data to ensure and improve the functioning of the Website. We may also collect data for cybersecurity reasons, and process certain technical data that’s generated by your visit to the Website. This may also be considered personal data if it allows your identification, such as if an IP address is included in the logs.
What personal data we collect and process
We collect several different types of information for various purposes. The categories of information that we collect and process depend on the purposes of the processing. We collect and process:
Your identification data like name, surname, address or contact data (email, phone number), company details, field of interest - when we communicate (especially when contact is initiated or requested by you) ;
Infrastructure and usage logs generated by your use of the Website- when you browse the Website or use one of our services;
Your data stored in social media when you use interact with us via such platforms (e.g. Facebook, Instagram, X, LinkedIn, You Tube);
The feedback you share about our services and products on our or other websites - when you provide feedback;
Other data explicitly indicated in the scope of the forms uploaded or information relating to the service used by you.
If you wish to apply for a job vacancy currently offered on the Website, you will be automatically redirected to the recruitment website, where you will be provided with information regarding the processing of your personal data in the recruitment process separately.
Is there an obligation to provide personal data?
We collect data to the extent necessary for the purpose of the processing. Your personal data is provided voluntarily. However, it may be possible that without it, we may not be able to process your request. For example, without the appropriate data, we will not be able to send you the newsletter or reply to your contact request.
The legal basis for the processing
In any case, when we process your personal data, we must have a so-called "legal basis". The legal bases result directly from the data protection law (Article 6, Article 9 of the GDPR), below are those on which we rely:
Consent [Art. 6(1)(a) GDPR]: You have indicated that you agree to the processing of your data for a specific purpose e.g. to receive your subscription, make contact, get marketing communications, take part in an event, etc.;
Preparation for or performance of the contract [Art. 6(1)(b) GDPR]: we need to process your personal data in order to take steps prior to entering into a contract or to be able to perform the contract;
Legal obligation [Art. 6(1)(c) GDPR]: when we are obliged under law to process your personal data. For example, when we are obligated to process your request according to the GDPR;
Legitimate interests [Art. 6(1)(f) GDPR]: only if processing is necessary to conduct our business and it does not interfere with your rights in respect to your privacy e.g. managing marketing or commercial communication, the development and promotion of our brand, the administration and management of our account or fan page, ensuring the security and functionality of the Website or our services, to analyze your behavior for the purposes of optimizing the functionality of the Website, to promote our Website and services and thereby develop our business, and to establish, assert or defend ourselves against claims.
How long we process your personal data for
We will retain and use your personal data only as long as we need it to fulfill the purpose for which it was collected and processed for or as long as required and/or possible due to the retention requirements specified in the provisions of law.
For example, when it comes to:
communication/contact – we will process your data until the communication is completed but no longer than when you object or withdraw your consent to communicate;
webinars or events - we will process your data until the consent is withdrawn, or the purpose is met;
marketing purposes, including providing you with a newsletter or other marketing communication – until consent is withdrawn or until you object to our processing, or until you change the ad settings both on your Google profile as well as directly on the webpages of other internet marketing services providers, or for a period of up to one year from the date of last activity;
social media matters – we will process your data until the consent is withdrawn, as long as we have an account on the relevant platform and in accordance with the platform’s terms and conditions or until you change the settings on your social media profile. Stored social media cookies remain on your device until you delete them or until they expire according to their retention settings;
security matters – we will process your data until you object to our processing but no longer than 30 (thirty) days from the date they were collected;
analysis and improvements - we will process your data until the purpose is met, until you object to the processing, or until data is considered personal;
establish, assert or defend ourselves against claims – until such claims become time-barred.
We use third party services and these entities may have access to some of the information about you that we collect and process. The recipients of your personal data may include:
entities authorized by law on the basis of a proper request (courts, state authorities);
entities providing accounting, IT, marketing, communication, and analytical and legal services, including HubSpot, or Google,
subcontractors with whom we cooperate.
Based on legitimate interest as it relates to marketing purposes, which includes optimizing the functionality of the Website, as well as for the purposes of optimizing our advertising activities, we’ll use certain online marketing services such as Google Analytics, LinkedIn, and Cloudflare. These services can change over time. You can check the current list of technologies used in CookieYes - the tool we use to manage cookies. You can also examine the web page in the settings of your browser or contact us for details.
You can prevent the collection and processing of information generated by the Google cookie by placing an opt-out cookie or deactivating Google Analytics in the menu of your terminal device. More information can be found here: https://policies.google.com/privacy
Your information, including personal data, may also be transferred to — and maintained on — computers located outside of the European Economic Area where the data protection laws may differ from the GDPR.
Therefore, if we transfer personal data outside of the European Economic Area, i.e. to third countries, the transfer of personal data will be based on appropriate legal mechanisms such as a Commission Implementing Decision, standard contractual clauses or other similar legal instruments provided for in the GDPR.
To ensure that you have adequate control over your personal data that’s transferred outside of the European Economic Area, you will have the right to obtain a copy of what personal data, as it relates to you, was transferred to third countries at any time.
Your rights concerning personal data
You have the following rights under the GDPR:
the right to request access to your data and to receive a copy of your data: whenever possible, you can access, update, or request deletion of your personal data;
the right to rectify (correct) your data: you have the right to have your information rectified if that information is inaccurate or incomplete;
the right to erasure: you have the right to the erasure of your personal data that is no longer required for the original purposes or that was processed unlawfully;
the right to data portability: you have the right to be provided with a copy of the information we have regarding you in a structured, machine-readable, and commonly used format;
the right to object: you have the right to object to our processing of your personal data – upon your justified objection, we will cease any further processing under Article 6(1)(f) of the GDPR;
the right to withdraw consent: you also have the right to withdraw your consent at any time where we relied on your voluntary consent to process your personal information;
the right to lodge a complaint with the competent supervisory authority - about our collection and use of your personal data.
In order to exercise your rights, you may:
send a letter to our correspondence address (Infermedica Sp. z o.o., Plac Solny 14/3, 50-062 Wrocław, Poland) given above or come to our registered office in person.
Please note that before responding to such requests or enabling exercise of your rights, we may ask you for proof of identification. In order to withdraw the consent given to us for personal data processing, you can also click the ‘unsubscribe’ hyperlink in the e-mail correspondence. The withdrawal of your consent does not affect the lawfulness of our previous processing based on your consent before consent was withdrawn effectively.
The security of your data is a very important issue for us. We strive to conscientiously and perpetually protect your personal data from loss, destruction, distortion/falsification, manipulation and unauthorized access or unauthorized disclosure through appropriate technical and organizational measures adopted at our company.
However, please always keep in mind that no method of transmission over the Internet or method of electronic storage is 100% secure. Due to the inherent nature of the Internet, we cannot guarantee that during transmission over the Internet or while stored on our system or otherwise in our care, the information will be safe from any intrusion by third parties, such as hackers.
Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from our Website and stored on your device. They are used to collect and track information and to improve and analyze our services rendered through our Website.
Detailed information can be found in our Cookies policy.
Services rendered by third parties