The MODICA Privacy Policy gives information about what rights you have regarding your personal data in relation to MODICA.
If you are an employee of MODICA, our Employee Privacy Policy applies to MODICA's processing of your personal data for these purposes. Such privacy policy is provided to you in connection with your employment.
1. Who is responsible for your personal data?
"Us", "we", "our" means MODICA P.S.A. registered with the Polish Companies Register under the registration number REGON: 523449198, KRS: 0000998265. MODICA's main office is located at Żurawia 45, Warsaw, Poland. We are legally responsible for the personal data that we hold and process, as described in this Privacy Policy.
2. How do we collect personal data?
2.1 We may collect personal data when you contact us, visit our website, apply for employment within our organization and during a recruitment process, or when we are fulfilling an assignment or service provided by you or a company that you represent.
2.2 In some cases, we may collect personal data from different companies or public authorities, e.g. to verify any of the personal data that you have provided us in a recruitment process. When we are collecting personal data from different companies or public authorities, this is always done in accordance with applicable law.
3. What personal data do we process?
3.1 The personal data that we process is listed below, although not in an exhaustive way:
- Contact information – such as name, postal address, e-mail address, phone number, title and workplace information.
- Identification information – such as national ID-number, citizenship, passport data, work permit, employee ID, tax registration number and photo.
- Recruitment-related data – such as educational background, previous work experience, qualifications and work history, language skills (e.g. CV), professional information contained in social media, geographic location preferences, hobbies, interview notes and communication information.
We will never ask you for the special categories of data — any personal data that constitutes "special categories" of personal data according to EU Regulation 2016/679 ("GDPR"), including e.g. data revealing religious, political or philosophical beliefs, trade union membership, or data concerning health, biometric information, sex life or sexual orientation. If you provide us with such data it is on a strictly voluntary basis and based on your explicit consent.
We may also collect and process personal data about how you are using our website. Such personal data is collected through cookies and similar technologies that collect information.
4. Why do we process personal data, and on what legal basis?
4.1 Processing to fulfill our contractual obligations
4.1.1 Administration. To administer the relationship with you in your capacity as a representative of any of our clients, suppliers or other third parties ("Partners"), and to fulfill our obligations as a party to an agreement. Legal basis: MODICA's legitimate interest in conducting its business effectively.
4.1.2 Transfer of personal data. Where required, we may transfer your personal data to Partners (see §5). Legal basis: legal obligation or legitimate interest.
4.2 Provide information and marketing
4.2.1 Information. We may send you information regarding changes in our general terms or our policies. Legal basis: legitimate interest.
4.3 Compliance and protection of our legal rights
4.3.1 Fraud prevention. We process personal data to protect our business and your personal data from fraud or other illegal activities. Legal basis: strictly necessary.
4.3.2 Legal claims. To protect MODICA from legal claims and enforce our legal rights.
4.3.3 Legal obligations. To comply with legal obligations.
4.4 Recruitment
4.4.1 Administration, evaluation & communication. To administer your job application, evaluate your qualifications and suitability for a position, and communicate with you in connection with your application. Legal basis: legitimate interest.
5. Do we share personal data with any third parties?
5.1 We do not transfer or disclose your personal data in any way other than those described in this Privacy Policy, unless we have informed you beforehand and, when necessary, you have given your consent.
5.2 Your information is not transferred or shared with any third party for their marketing or business purposes without your consent.
5.3 We may share your personal data with our Partners and with suppliers that provide services to us or on our behalf. Each supplier is solely entitled to process your personal data to provide their offered service, and we enter into agreements that limit them to processing in accordance with our instructions. Our Partners in IT services are located in the EU.
5.4 In some cases we act as a processor (not a controller); in those cases you should turn to the original controller for access to your personal data.
5.5 In some cases, we may be required to disclose your personal data to a public authority or a court to comply with a governmental decision or legal obligation.
5.6 We reserve the right, in case of reconstruction, liquidation, merger, acquisition, business restructuring or the like, to transfer your personal data to any relevant third parties.
6. Where do we process your personal data?
6.1 We do not transfer your personal data outside the EU or the European Economic Area (EEA) unless you have given your consent, or there is sufficient protection in accordance with applicable law to make such a transfer.
7. Your legal rights
7.1 You have certain legal rights regarding the personal data that we process about you:
- Right to be informed – we fulfill this obligation through this Privacy Policy.
- Right to access – you may request a copy of your personal data.
- Right to rectification – ask us to rectify or complete inaccurate or incomplete data.
- Right to withdraw consent – withdraw consent you have given us to process your data.
- Right to object – object to processing based on our legitimate interest.
- Right to restriction – request that we restrict processing in certain circumstances.
- Right to erasure – request that we cease processing and erase your personal data from our systems.
- Right to data portability – demand that we transfer your data to another controller.
8. How long do we process your personal data?
8.1 We ensure that your personal data is not stored for longer than necessary to fulfill the purpose for which it was collected, unless otherwise required or permitted by applicable law. Personal data will be deleted or duly anonymized when no longer required.
9. How do we protect your personal data?
9.1 We protect your personal data by communicating our guidelines and policies on integrity, security and protection to all our employees and to our whole organization. We also maintain appropriate technical and organizational measures to protect your personal data and comply with applicable law.
10. Cookies
10.1 We use cookies on our website www.modica.bio.
11. Contact details
11.1 If you have any questions regarding our Privacy Policy or the processing of your personal data, or if you want to lodge a complaint, please contact us at info@modica.bio and we will handle your request as soon as possible.