GHSH Privacy Policy

This Privacy Policy describes how the GHSH service collects, processes, and protects users' personal data. This document is for informational purposes only and does not constitute legal advice. We encourage you to read it carefully and contact us if you have any questions about the processing of your data.

What data we collect and for what purpose

Depending on how you use the service, we may collect different categories of personal data. Below we present the main scenarios for collecting such data along with the corresponding processing purposes.

1

Government forms

Data provided in forms used to deliver administrative or regulatory services — processed to perform the service or fulfill a legal obligation.

2

Partner forms

Contact and organizational data shared by business partners — processed to establish and maintain cooperation and communication.

3

Newsletter

Email address and optional profile data — collected based on consent given during signup, for the purpose of sending industry information and service updates.

4

Site analytics

Anonymous or pseudonymous data about activity on the site (e.g., visited pages, time spent) — collected to improve service quality and tailor content to users' needs.

Legal basis for processing

Personal data is processed only when there is an appropriate legal basis. Depending on the nature of the processing, this may include:

User consent

Voluntary, informed consent given, for example, when signing up for a newsletter or accepting analytics cookies.

Performance of a contract or pre-contractual steps

Processing necessary to carry out a service requested by a user or partner.

Legal obligation

Laws may require the collection or retention of certain data.

Legitimate interest of the controller

To the extent that it does not override the rights and freedoms of the data subjects — for example, for site security purposes.

Legal notice

This document contains general information about the legal bases for data processing. Detailed references to applicable regulations (e.g., GDPR, national laws) should be reviewed by a lawyer before publication.

[PLACEHOLDER — weryfikacja prawna wymagana]

Data retention period

We retain personal data for as long as necessary to fulfill the purposes for which it was collected. After that period, the data is deleted or anonymized unless legal regulations require further retention.

Form data

Until the matter is closed or the legal obligation expires — [PLACEHOLDER: podać konkretny okres]

Newsletter

Until consent is withdrawn or the user unsubscribes.

Analytics data

According to the policy of the analytics tool used — usually from several months to 2 years.

Data recipients

In certain cases, users' personal data may be shared with third parties that support the operation of the service. This is done only to the extent necessary to achieve the given purpose and on the basis of appropriate data processing agreements or other relevant legal instruments.

Hosting and infrastructure providers

The service uses external hosting services that provide data storage and platform continuity.

Communication tools

For newsletter management or correspondence — external email marketing platform providers operating under a data processing agreement.

Analytics tool providers

Traffic data on the site may be transferred to analytics tools (e.g., [PLACEHOLDER: tool name]) in accordance with their own privacy policies.

Public authorities

Data may be transferred to public authorities only on the basis of applicable legal provisions and to the extent required by them.

User rights

Every person whose data is processed is entitled to a number of rights related to the processing of personal data. Below we present the most important ones. To exercise any of these rights, please contact us at the address indicated in the section below.

1

Right of access

You may request information about what data we process about you and for what purpose.

2

Right to rectification

You have the right to request correction of data that is inaccurate or incomplete.

3

Right to erasure

In certain cases, you may request deletion of your data ("right to be forgotten").

4

Right to restriction

You may request restriction of data processing in situations provided for by law.

5

Right to data portability

You have the right to receive your data in a structured format and transfer it to another controller.

6

Right to object

You may object to processing based on the controller's legitimate interest.

Cookies and analytics

What are cookies?

Cookies are small text files stored on the user's device when visiting the service. They are used to recognize the browser, remember preferences, and analyze user behavior on the site.

GHSH may use the following categories of cookies:

  • Necessary — required for the proper operation of the service
  • Analytical — enable the collection of statistical traffic data
  • Functional — remember user preferences

Cookie management

The user has the right to change cookie settings at any time through their internet browser settings or — if the service provides such a function — a consent management panel (CMP).

Disabling necessary cookies may prevent some features of the service from functioning properly. Analytical and functional cookies may be disabled without affecting the availability of core services.

[PLACEHOLDER: provide the name of the CMP tool, if used]

Privacy contact

The controller of personal data is GHSH. If you have questions about the processing of personal data, wish to exercise your rights, or wish to raise concerns, please contact:

Email address

iod@ghsh.org — dedicated address for personal data protection matters

Mailing address

Fundacja Healthcare Poland (HCPL), GHSH Secretariat, ul. Kawęczyńska 36 A003, 03-772 Warszawa, Poland

Data Protection Officer

Data Protection Officer (Inspektor Ochrony Danych): iod@ghsh.org. Written correspondence may be sent to the mailing address above with the note "IOD".

We respond to submitted requests without undue delay, and no later than within 30 days of receiving them, unless the complexity of the matter requires an extension of this deadline.