PRIVACY POLICY OF THE EUROPHARMA ALLIANCE SP. Z O.O. WEBSITE (EUROPHARMA ALLIANCE WEBSITE)

I. GENERAL PROVISIONS

1. 1. The Privacy Policy of the EUROPHARMA ALLIANCE SP. Z O.O. Website (hereinafter: "EUROPHARMA ALLIANCE Website") is for information purposes only and does not constitute a source of obligations for Visitors.
2. 2. The Controller of personal data processed via the EUROPHARMA ALLIANCE Website is EUROPHARMA ALLIANCE spółka z ograniczoną odpowiedzialnością with its registered office in Rzeplin at al. LED 1, 55-020 Rzeplin, entered into the Register of Entrepreneurs of the National Court Register by the District Court for Wrocław-Fabryczna in Wrocław, 6thCommercial Division of the National Court Register under KRS number 0000286948, NIP8942915092, e-mail: office@pharmaalliance.eu, hereinafter referred to as the " Controller".
3. 3. Personal data of the Visitor who disclosed it by accessing the EuroPharma Alliance Website or entering it on the Website pages are collected and processed in accordance with applicable legal regulations, in particular with the General Data Protection Regulation (GDPR), including the Corrigendum of May 23, 2018 (OJ L 127, p. 2) and the Corrigendum of March 4, 2021 (OJ L74, p. 35), as well as the Personal Data Protection Act of May 10, 2018.
4. 4. The Controller processes Visitor data including: e-mail address, IP address, domain name, browser type, operating system type, and other data disclosed by the Visitor at their discretion by entering it on the EuroPharma Alliance Website (e.g., name, surname, company name, telephone number).
5. 5. The Controller specifically processes the e-mail address provided by the Visitor for the purposes indicated in Art. III below, including sending direct marketing information regarding products or services of the Controller or third parties, including entities affiliated with the Controller. By entering personal data, including the e-mail address, into the field marked "email" on the EuroPharma Alliance Website, the Visitor consents to the processing of their personal data. Providing data is voluntary but necessary to receive commercial and marketing information.
6. 6. The Controller processes Visitor data based on a legal basis and in accordance with the law, reliably, fairly, and transparently, for specific purposes and not "in advance," no more than necessary and no longer than necessary, ensuring data accuracy and security.
7. 7. The term "EuroPharma Alliance Website" refers to a collection of websites and other documents made available on the Internet for the purpose of presenting goods and services of EuroPharma Alliance sp. z o.o., conducting marketing activities, establishing contacts with parties interested in cooperation, or for the proper performance of contractual obligations.

II. VISITOR STATUS AND TYPE OF DATA COLLECTED

1. 1. A Visitor is any person browsing the EuroPharma Alliance Website.
2. 2. While browsing, data regarding the Visitor is collected automatically (IP address, domain name, browser type, operating system). This data may be collected via Cookies. Detailed issues regarding Cookies are specified in the Cookie Policy in Art. VIII below.
3. 3. The Controller also processes anonymized operational data (IP, domain) to generate statistics for website administration. This data is aggregate and anonymous and is not disclosed to third parties.
4. 4. For statistical purposes, the Website is integrated with its own statistics system and Google Analytics.

III. PURPOSE AND GROUNDS FOR PROCESSING PERSONAL DATA

1. The Controller processes personal data because it is necessary to:
2. • Take actions necessary before concluding a contract or performing a concluded contract, including the implementation of cooperation or sale of goods, delivery, or provision of services(basis: Art. 6(1)(b) GDPR);
   • For archiving purposes to secure information in case of a legal need to prove facts, which is alegitimate interest of the Controller (basis: Art. 6(1)(f) GDPR);
   • For the possible establishment, exercise, or defense of legal claims (basis: Art. 6(1)(f) GDPR);
   • To perform legal obligations resulting from tax and treasury regulations (basis: Art. 6(1)(f)GDPR);
   • To conduct customer satisfaction surveys and determine the quality of service (basis: Art.6(1)(f) GDPR)
   • For direct marketing of products and services of the Controller or third parties (basis: Art.6(1)(f) GDPR).

IV. VOLUNTARY PROVISION OF DATA

1. By accessing the Website and clicking "I agree," the Visitor gives voluntary consent to the processing of data. Providing data is voluntary but may be necessary for the proper display of the Website and contact with the Controller.

V. TRANSFER OF PERSONAL DATA

1. 1. The Controller may transfer data to:
2. • Entities providing telecommunications, IT, legal, financial, tax, and accounting services;
   • Entities involved in contract performance, including affiliated entities;
   • Marketing service providers;
   • Law enforcement, judicial, and public administration authorities.
3. 2. The Controller does not transfer personal data outside the EU/EEA or to international organizations.

VI. DATA RETENTION PERIOD

1. Visitor data is processed for the period necessary to protect the Controller's rights and claims.

VII. VISITOR RIGHTS

1. 1. Visitors have the right to:
2. • Access and receive a copy of their data;
   • Rectify (correct) data;
   • Erase data;
   • Restrict processing;
   • Object to processing;
   • Data portability;
   • Lodge a complaint with the President of the Personal Data Protection Office (UODO);
   • Withdraw consent at any time.
3. 2. Requests can be submitted in writing, via e-mail, by phone (+48 717 259 066), or directly at the registered office.

VIII. COOKIE POLICY

1. 1. Cookies are small text files stored on the Visitor's end device (e.g., hard drive, smartphone).
2. 2. Consent for Cookies is voluntary but may be necessary to use the Website.
3. 3. Purpose of Cookies:
4. • Enabling basic functionalities (security, correct display);
   • Personalization (language, region, font size);
   • Anonymous statistics (user behavior, error messages).
5. 4. Visitors can manage or disable Cookies via their browser settings. This may affect some website functionalities.
6. 5. Specific instructions for popular browsers (Internet Explorer, Firefox, Opera, Chrome, Safari) are available in their respective help sections.
7. 6. Detailed information on changing the settings regarding Cookies and their self-removal in the most popular web browsers is available in the help section of the web browser and on the following pages (just click on the given link)
8. • in Internet Explorer
   • in Firefox
   • in the Opera browser
   • in Chrome
   • in Safari
9. 7. For statistical purposes, the EuroPharma Alliance Portal uses cookies provided by, for example, Google AdWords, Google analytics.

IX. FINAL PROVISIONS

1. 1. This Privacy Policy is governed by Polish substantive and procedural law.
2. 2. The Controller uses technical measures (e.g., SSL certificate) to prevent unauthorized accessor modification of data.
3. • protection of data against unauthorized access,
   • SSL certificate
4. 3. The Website may contain links to external sites;
5. 4. The Controller recommends reading theirrespective privacy policies.
6. 5. External providers' privacy information:
7. • Google – https://www.google.pl/intl/pl/policies
   • Google AdWords
   • Google analytics
   • Google tag manager
   • Youtube
   • Webflow
   • Cloudflare
   • Hubspot