Privacy Policy
Privacy Policy
The owner and operator of www.pbkm.pl is Polski Bank Komórek Macierzystych sp.
z o.o., hereinafter referred to as “PBKM”.
PBKM is responsible for the content of the service and for processing the information collected on it.
Personal data controller
The administrator of the personal data of the Users of the service, including customers of the e-store, who have concluded a contract for the collection and storage of stem cells is PBKM (Al. Jana Pawła II 29, 00-867 Warsaw).
In the case of opting for the SwissSafety service (which allows storage of the collected material in Poland and Switzerland), the controller of personal data will also be Famicord Suisse SA, based in Switzerland, c/o Studio Fiduciario Pagani SA, Corso Pestalozzi 3, 6900 Lugano.
In the case of joining a group life insurance contract offered to PBKM clients, the data controller will also be SIGNAL IDUNA Polska TU S.A. with registered office at ul.
Siedmiogrodzka 9, 01-204 Warsaw If additional studies are selected, data controllers will also be:
- Novogenia GmbH, headquartered in Austria, Saalachstrasse 92, 5020 Salzburg (for screening);
- Genomed S.A, based in Warsaw at ul.
Ponczowa 12 (for molecular genetic testing).
Personal Data Inspector
PBKM has appointed a Data Protection Inspector (Agnieszka Wiercińska-Krużewska) and a deputy (Karolina Miksa).
The Inspector can be contacted via email at: [email protected].
Information collection policy
The www.pbkm.pl website processes personal data in accordance with applicable regulations, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.
on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (“RODO“).
Any inquiries submitted to us will be processed with confidentiality and commercial confidentiality.
Personal data and email addresses will not be used for any purpose other than to respond to an inquiry submitted or for the conclusion and performance of a contract with PBKM.
In particular, personal data will not be used to provide commercial information in the future about services other than directly related to the submitted inquiry, nor will they be transferred to third parties, unless the user agrees to receive commercial information and/or other forms of contact.
Purpose and legal basis of data processing
The processing of personal data will take place:
- For the fulfillment of contractual obligations (Article 6(1)(b) RODO)
The data is processed for the purpose of performing PBKM’s activities in the execution of contracts concluded with clients or for pre-contractual activities that are performed at the request of the client.
Data processing is necessary for qualification, preparation and storage of collected biological material.
The data is also processed for the establishment of the user’s account in the e-store and the handling of the contract concluded with PBKM through the e-store.
- Based on explicit consent (Article 6(1)(a) and Article 9(2)(a) of the RODO)
Entering into a contract for the qualification, preparation and storage of collected biological material involves the processing of health data, which is a special category of data.
Data on health and processed for the purpose of depositing biological material for public purposes in a public bank are processed on the basis of consent.
Based on consent, we also process personal data for email or telephone contact for the purpose of making a business offer.
Consent may be withdrawn at any time.
The withdrawal of consent does not affect the lawfulness of data processing until the consent is withdrawn.
On the basis of separate voluntary consent, we also process health data related to biological material (not intended for use in accordance with the Biological Material Qualification and Preparation and Storage Service Contract concluded with PBKM), which is medical waste from the cord blood and human fetal tissue preparation process, for the purpose of internal process validation testing by PBKM and other entities of the Famicord Group. The data will be processed only by PBKM, which will ensure that the personal data will not be processed by other entities, including entities of the Famicord Group.
On the basis of separate, voluntary consent, we also process health data and genetic data relating to biological and genetic material for the purposes of scientific research by the PBKM Biobank. The data may also be made available to third parties (e.g. medical institutions, universities, scientific institutes, pharmaceutical companies) for the purpose of scientific research, which is concerned with the conduct of medical and population-based research, both nationally and internationally, but only in an anonymised form in which the data subject cannot be identified.
- for the fulfillment of legal obligations (Article 6(1)(c) RODO) or the performance of tasks carried out in the public interest (Article 6(1)(e) RODO)
As a cord blood bank and a medical entity, we are subject to a number of legal obligations, i.e.
requirements arising, for example, from the Law on Patients’ Rights and the Patients’ Ombudsman and the Law on the Collection, Storage and Transplantation of Cells, Tissues and Organs.
- for purposes arising from the legitimate interests pursued by PBKM or a third party (Article 6(1)(f) RODO)
If necessary, we process data to protect our own or third parties’ legitimate interests.
Examples of this include:
- Handling user inquiries and contacting potential customers;
- customer satisfaction survey,
- Investigation of claims and defense against claims,
- Direct marketing of products and services,
- Ensuring the safety of biological material,
- Ensuring IT security, including the functionality of the website.
Recipients of personal data
Personal data may be shared with other recipients in order to perform a contract, to comply with PBKM’s legal obligation, based on consent, or for purposes arising from the legitimate interests of the administrator or a third party.
Recipients may be, in particular: authorized employees of a business information bureau, credit and payment institutions, a law firm providing services to PBKM, a courier company delivering a contract or download kit.
In addition, data may be transferred to entities that process personal data on behalf of PBKM and their authorized employees, with such entities processing data on the basis of a contract with PBKM and only in accordance with instructions and subject to confidentiality and adequate protection of personal data security.
If the service is selected:
- SwissSafety, data will be shared with Famicord Suisse, for the purpose of executing the concluded contract.
The information clause regarding the processing of data by Famicord Suisse can be found in the contract concluded with the company; - accession to group life insurance, data will be made available to SIGNAL IDUNA Polska TU S.A. Information clause on data processing by SIGNAL IDUNA Polska TU S.A. is included in the Declaration of accession;
- to perform the screening test, the data will be shared with Novogenia GmbH for the purpose of performing the test.
The processing information clause can be found on the company’s website; - to perform a molecular genetic test, the data will be shared with Genomed S.A. for the purpose of performing the test.
The processing information clause can be found on the company’s website.
Duration of storage of personal data
Personal data will be processed for the period necessary to achieve the purposes of processing, in particular:
- with regard to the execution of the contract concluded with PBKM – until the completion of its execution, and after that time for the period required by law or for the realization of possible claims;
- in terms of fulfilling legal obligations incumbent on PBKM in connection with the conduct of its business and performance of concluded contracts – until PBKM fulfills these obligations;
- with regard to direct marketing carried out on the basis of consent – until you withdraw your consent to such processing;
- with regard to process validation and the conduct of scientific research on the basis of voluntary consent, until the withdrawal of consent to such processing, which shall not affect the compatibility of the processing carried out on the basis of such consent prior to its withdrawal;
- until the PBKM’s legitimate interests forming the basis for such processing are fulfilled or until you object to such processing, unless there are legitimate grounds for further processing.
Rights of persons whose data is processed by PBKM
A person whose data is processed by PBKM has the right to:
- to request access to their personal data and to rectify, limit the processing of their personal data, or to have it deleted,
- to the extent that the processing of personal data is based on consent, to withdraw at any time the consent previously given for the processing of personal data,
- object at any time to the processing of personal data on grounds related to your particular situation, where the PBKM processes the data for the purposes of legitimate interests (Article 21(1) RODO),
- request the transfer of personal data processed for the purpose of entering into and performing a contract or processed on the basis of consent.
A transfer consists of receiving personal data from the PBKM, in a structured, commonly used machine-readable format, and sending such data to another data controller.
The right to data portability does not apply to data that constitute company secrets, - lodge a complaint with the President of the Office for Personal Data Protection, in case the processing of personal data is deemed to violate the law.
Necessity of transfer of personal data
Provision of data is voluntary, but may be necessary for the conclusion and performance of a contract or for the deposit of biological material for public purposes in a public bank.
In the case of processing data for marketing purposes, providing data may be necessary to receive marketing information.
Source of personal data
First of all, the personal data collected by PBKM comes directly from customers.
Data processed for marketing purposes may also be obtained through marketing campaigns conducted on behalf of PBKM by third parties.
Transfer of data to a third country
If you choose the SwissSafety service, your data will be transferred to Famicord Suisse, a company based in Switzerland.
Switzerland has been recognized by the European Commission as providing an adequate level of protection for personal data.
About cookies
Service www.pbkm.pl
collects automatically only the information contained in cookies. Cookies (so-called “cookies”) are digital data, in particular text files, which are stored on the user’s terminal device (computer, phone, tablet, etc.) and are intended for the use of the website. Cookies usually contain the name of the website from which they come, the time they are stored on the end device and a unique number. Cookies can be used for (i) adapting the content of websites to the user’s preferences and optimizing the use of websites; in particular, these files allow for recognition of the user’s device and appropriately display the website, tailored to the user’s individual needs (ii) creating statistics that help understand how users use websites, which makes it possible to improve their structure and content, (iii) maintaining website user sessions (after logging in), so that the user does not need to re-enter login and password on each sub-page of a given website. There are two basic types of cookies: “session” (session cookies) and “permanent” (persistent cookies). “Session” cookies are temporary files that are stored on the user’s terminal device until the user logs out, leaves the website or shuts down the software (web browser). “Permanent” cookies are stored on the user’s end device for the time specified in the parameters of the cookies or until they are deleted by the user. The following types of cookies are used: (a) necessary cookies to enable the use of services available on the site, e.g. authentication cookies used for services requiring authentication on the site; (b) cookies used to ensure security, e.g. (b) cookies used to ensure security, e.g. used to detect abuse of authentication within the site; (c) performance cookies, enabling the collection of information on the use of the website; (d) functional cookies, enabling the storage of user-selected settings and personalization of the user’s interface, e.g. with respect to the selected language or region of the user’s origin, font size, website design, etc.; (e) advertising cookies, enabling the provision of advertising content more tailored to users’ interests.
User blocking or restricting cookies
In many cases, web browsing software (web browser) allows cookies to be stored on the user’s terminal device by default.
Users can make changes to their cookie settings at any time, in particular, it is possible to block cookies from being left in the browser settings on the user’s device or to force the user to be informed each time they are placed on the device.
Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser).
However, please note that disabling cookies may affect the correctness and/or quality of operation and convenience of some websites, including www.pbkm.pl.
In particular, some websites may stop working, so we do not recommend disabling cookies.
Third-party cookies
In particular, www.pbkm.pl uses statistics and cookies from Google to evaluate the effectiveness of its own activities and advertising campaigns and to analyze user traffic on www.pbkm.pl.
Google cookies, in particular, may be placed on the user’s computer when the user clicks on or views an advertisement.
They do not contain personal or contact information.
The purpose of placing these cookies is to measure the effectiveness of the advertisement and to identify whether the advertisement led the user to take the desired action on www.pbkm.pl.
For detailed information on how Google uses the information it collects through cookies, please visit Google’s Privacy Center page.
We also recommend the Ads Preference Manager page.
Third parties (third-party providers), including Google, may display advertisements published by PBKM on websites that provide their advertising space.
These providers, including Google, may use cookies or use web beacon images to collect information on websites and then to display ads based on your previous visits to www.pbkm.pl or other PBKM-affiliated websites, as well as other websites.
It is possible to opt-out and block these Google cookies on the site: Google Privacy Center.
PBKM may run advertising campaigns based on the user’s previous visits to www.pbkm.pl, as well as statistically available information about the user’s interests determined from previously visited websites in order to present the user with its offer or to attract the user to visit www.pbkm.pl again.
These advertisements will not contain the user’s personal information, nor will they explicitly suggest that the user has performed a specific action on www.pbkm.pl.
In particular, PBKM may use a dynamic ad display feature in its campaigns that uses a Teracent cookie, which you can opt out of on the Teracent website, and DoubleClick remarketing pixels, which you can opt out of on the DoubleClick website or the Network Advertising Initiative website.
For those particularly interested in privacy issues and how advertisers can limit their collection of information about website users, we recommend the Network Advertising Initiative website.