Privacy Policy

I. The entity deciding on the purposes and means of personal data processing, that is the data controller, is Medily Spółka z ograniczoną odpowiedzialnością, located at ul. Wyszyńskiego 29, 94-048 Łódź, entered into the register of entrepreneurs maintained by the District Court for Łódź Śródmieście under the number KRS 0000802508, with NIP 727 283 86 95, REGON 384301570 (hereinafter referred to as the "Administrator"). For matters related to personal data processing, you can also contact us via email at: hello@healthicate.com.
‍
‍II. Personal Data – understood as any information about an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person (in accordance with Article 4, point 1 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"). The Administrator's website – www.aurero.com collects the following personal data from users:- Name and surname;- Email correspondence address;- Contact phone number;(hereinafter referred to as "Personal Data").

‍III. In fulfilling its business tasks, the Administrator processes personal data for the following purposes:- Conclusion and execution of a contract with a contractor, legal basis: Article 6(1)(b) and (f) GDPR, data storage for the duration of the contract, and after its termination until the statute of limitations for claims resulting from it, generally 3 years, up to a maximum of 6 years;- Handling complaints and claims, legal basis: Article 6(1)(b) and (f) GDPR, data storage for one year after the warranty period or settlement of the complaint;- Pursuing claims or defending against legal claims, legal basis: Article 6(1)(f) GDPR, for the duration of the claims proceedings until the issuance of a final judgment ending the case, and in the case of enforcement proceedings until the final satisfaction of the pursued claims;- Archiving documents, i.e., contracts and accounting documents, legal basis: Article 6(1)(c) GDPR, for the periods indicated by law, and if not indicated for certain documents, for as long as their storage serves a legitimate purpose regulated by the time possible for pursuing claims;- Conducting marketing activities without using electronic communication means, legal basis: Article 6(1)(f) GDPR, until the objection is raised by the data subject, the objection can be made in any form, as long as it clearly and unequivocally shows that one does not want to stay in contact with us and receive further information;- Conducting marketing activities using electronic communication means, legal basis: Article 6(1)(a) GDPR, these activities, due to other applicable laws, especially the Telecommunications Law and the Act on Providing Services by Electronic Means, are conducted based on obtained consents. Until the consent is withdrawn, that is until an objection to further contact and receiving information about our activities is expressed, and after its withdrawal for the purpose of demonstrating compliance with legal obligations resting on the Administrator and related claims (up to 6 years after withdrawing the consent).
‍
‍IV. Personal Data will be disclosed to the following entities (in connection with the Administrator's business activities):- Individuals conducting business activities, including lawyers and legal advisers cooperating with the Administrator in consulting services provided to the Administrator's clients;- State authorities or other entities authorized by law;- Entities supporting the Administrator in conducted activities commissioned by the Administrator, in particular: external IT system providers supporting our activities, entities auditing our activities, entities providing accounting services, or entities cooperating with the Administrator within marketing campaigns, where such entities will process data under an agreement with the Administrator and only following its instructions;- Banks in case settlements are necessary.

‍V. Each person whose data is processed by the Administrator has the right to:- Access their personal data;- Rectify their personal data;- Delete their personal data;- Restrict the processing of their personal data;- Object to the processing of their personal data;- Data portability;- Lodging a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.