Legal

Privacy Policy

Privacy is an important issue for most of us. Below you will find a description of the privacy protection policy applicable to this website, controlled by WPD Pharmaceuticals INC, 750 West Pender Street, Suite 401, Vancouver, BC, Canada V6C 2T7 .

Security

We guarantee personal data privacy according to the legal provisions on personal data protection. The collected data is protected against third parties who are not authorized to access it.

Cookies

We may collect personal data to a limited extent by means of cookies installed on our website.

Cookies are small text files stored on your computer or mobile device while you browse a website. Cookies enable the use of certain functions on a website or confirm that you have already seen the contents of the website.

Some cookies are necessary for websites to work properly – these cookies ensure the following functions:

• website availability;
• visitor session records.

Our website does not automatically collect any additional information other than the information stored in cookies.

We use two main types of cookies on our website: session cookies and persistent cookies. Session cookies are temporary files stored on your device until you log out, leave a web page, or exit the software (close your web browser). Persistent cookies are stored on your device for the time specified in cookie parameters or until you delete them.

Basic cookies enable the use of services within a website – these are files used for services that require authentication.

Security cookies are used to detect fraud website authentication fraud.

Performance cookies collect information about how you use the website.

Functional cookies allow you to save user settings and personalize the interface, i.e. the selected language or your region, font size, page layout, etc.

You may change your cookie preferences at any time. As the website operator, we would like to inform you that restricting cookies may affect some of the functionalities available on the website.

Information obligation

The Article 29 Task Force has included specific guidelines in its Transparency Guidelines on the wording of the information that the controller is required to provide to the data subject:

• The information must be clearly distinguishable from other non-privacy related information, such as contractual provisions.
• The information should be expressed as simply as possible. Complex sentences and linguistic structures, as well as overly legalistic, technical, or specialized language and terminology or phrases that may be ambiguous or incomprehensible to the data subject, should be avoided.
• The information should be specific and leave no room for different interpretations. In particular, it must be ensured that the purposes and legal basis for processing personal data are sufficiently clear to the data subject.
• The information should be easily accessible, which means that the data subject cannot be forced to search for information related to the processing. It should be immediately obvious to them where they can access this information, e.g. by directly providing them with the requested information, by redirecting them to this information, or via contextual pop-ups that activate when someone fills out an online form.

Data Protection Officer

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of this data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as the Regulation or the GDPR is the statutory implementation of the rights of natural persons in connection with the processing of personal data.

To protect WPD applicants and persons whose data may be processed by WPD, and to implement the GDPR guidelines, WPD Pharmaceuticals sp. z o.o. (WPD) appointed a Data Protection Officer. That person may be contacted in all matters related to the processing of your personal data and exercising your rights related to data processing.

You can contact the Officer in the following ways:

1. By post to the following address:

WPD Pharmaceuticals Sp. z o.o.

Mariusz Olejniczak, CEO

750 West Pender Street, Suite 401, Vancouver, BC, Canada V6C 2T7

2. By email: gdpr@wpdpharmaceuticals.com

 

Overview of the GDPR

What is the GDPR?

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of this data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as the Regulation or the GDPR is the statutory implementation of the rights of natural persons in connection with the processing of personal data. The GDPR also regulates, i.a., obligations of the data controller and processors.

If we mention detailed provisions anywhere without referring to specific acts, we mean the GDPR.

Learn more by checking the legislator’s website. The following information is an interpretation of the provisions, not a set rule of their understanding.

What Is Personal Data?

Personal data is any information that may be used to identify a natural person.

Objectives of the Regulation.

The objective of the Regulation is to standardize the protection of fundamental rights and freedoms of natural persons in respect of personal data processing and to ensure free flow of personal data between Member States.

What Is Processing of Personal Data?

Processing of personal data is any and all activities that we may perform on the data, i.e. collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

What Is Profiling?

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Data Subject Rights.

Each and every natural person whose personal data is processed has the following rights.

1. Right to transparent information and communication (Article 12 of the GDPR)

The controller provides all information related to personal data processing to the data subject in a concise, transparent, intelligible, and easily accessible form, using clear and plain language, in particular any information addressed specifically to a child.

2. Right to be informed when personal data is collected from the data subject (Article 13 of the GDPR)

The controller provides directly the person from whom it obtains personal data with all the information determined in the GDPR.

3. Right to be informed when data has not been obtained from the data subject (Article 14 of the GDPR)

When personal data has not been obtained from the data subject (e.g. from an assignee, from another database, etc.), the controller provides the data subject with the information determined in the GDPR.

4. Right to access data (Article 15 of the GDPR)

Each and every natural person has the right to obtain information on their personal data processed by the controller at no cost.

5. Right to rectification (Article 16 of the GDPR)

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them.

6. Right to erasure (“right to be forgotten”) (Article 17 of the GDPR)

If there are no longer legal grounds for processing personal data, the controller is required to delete unnecessary data of a natural person.

7. Right to restriction of processing (Article 18 of the GDPR)

Restriction of processing relates to the cases where processing is disputed but there are compelling reasons for data storage. A natural person may request that we restrict processing of their personal data only to its storage or performance of activities agreed with them, if, in their opinion, we have incorrect data about them or we process them with no legitimate grounds; or if they do not want us to remove it because they need it to establish, assert, or defend claims; or for the duration of their objection to data processing.

8. Right to data portability (Article 20 of the GDPR)

Exercising the right to data portability allows – if it is technically possible – to transfer data from the IT system of one controller to the IT system of another controller.

9. Right to object (Article 21 of the GDPR)

The right to object is exercised against processing your data on the basis of compelling legitimate grounds for purposes other than direct marketing, as well as when processing is necessary for us to perform a task carried out in the public interest or to exercise public authority entrusted to us. You indicate your particular situation to us, which justifies the cessation of the processing covered by the objection. We will cease to process your data for these purposes, unless we prove that the grounds for processing your data override your rights or that your data is necessary for us to establish, assert, or defend claims. As a consequence your data will not be allowed to be processed for the purposes covered by the objection, i.e. the controller will no longer be allowed to process the data of the objecting person.

10. The right not to be subject to decisions based solely on automated processing, including profiling (Article 22 of the GDPR)

The data subject being a natural person has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

11. Right to withdraw consent to process your personal data

You have the right to withdraw your consent to process your personal data, which we process on the basis on your consent, at any time. The withdrawal of consent will not affect the lawfulness of processing based on your consent before its withdrawal.

We undertake every effort to precisely define your rights under a given activity, in particular regarding personal data. However, at this point, an important issue should be mentioned – the rights are not absolute and may not apply to every data processing activity.

Should you believe we have violated the GDPR provisions, you have the right to lodge a complaint with the Supervisory Authority, which is the President of the Personal Data Protection Office. Before you decide to do so, we would appreciate if you contacted us to find out which of your personal data we have and how we process it.

If you have questions regarding processing your data or exercising your rights by WPD Pharmaceuticals sp. z o.o., please contact the Data Protection Officer gdpr@wpdpharmaceuticals.com

 

Information obligation

for WPD applicants and persons whose data may be processed by WPD

1. Data Controller

Pursuant to Articles 13(1)–13(2) and Articles 14(1)–14(2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJEU L 119, p. 1) – hereinafter referred to as the GDPR – we would like to inform you that we process your personal data.

The controller of your personal data:

WPD Pharmaceuticals Inc

with its registered office at the address: 750 West Pender Street, Suite 401, Vancouver, BC, Canada V6C 2T7, (hereinafter referred to as “we” or “us”).

You can contact us in the following way:

1. By post to the following address: 750 West Pender Street, Suite 401, Vancouver, BC, Canada V6C 2T7
2. By email: office@wpdpharmaceuticals.com,

2. Data Protection Officer

To implement the GDPR guidelines, we have appointed a Data Protection Officer. That person may be contacted in all matters related to the processing of your personal data and exercising your rights related to data processing.

You can contact the Officer in the following ways:

• By post to the following address: 750 West Pender Street, Suite 401, Vancouver, BC, Canada V6C 2T7
• By email: office@wpdpharmaceuticals.com,

3. Purposes, Legal Basis and Period of Personal Data Processing

Your data may be processed to take action in connection with:

1. lodged complaints, submitted applications, handling correspondence;
2. recruitment procedures;
3. concluding and performing contracts;
4. conducting public procurement procedures;
5. ensuring safety of employees, security of entrusted data and protection of property in terms of image, keeping secret information, the disclosure of which could expose the employer to damage;

in scope of data provided personally or by a third party.

Legal Basis

We will process your personal data on the basis of the provisions of the GDPR and other regulations. Detailed references to the legal basis, purpose and storage period of the data can be found in the detailed information clauses.

Providing your data may be a voluntary, statutory, or contractual requirement or a condition for concluding a contract, and failure to do so may result in the case not being considered.

Data Storage Period

Your personal data will be kept for the period necessary to achieve the objectives and after their achievement to meet the legal obligation.

We will not process your data in an automated manner (profiling).

4. Recipients of your Personal Data

WPD will not transfer your personal data, except in cases resulting from legal regulations, performance of contracts or when it requires considering a case outside WPD.

We will not transfer your data to third countries.

5. Your Rights Related to Personal Data Processing

You have the following rights related to personal data processing:

1. right to access data (Article 15 of the GDPR);
2. right to rectification (Article 16 of the GDPR);
3. right to erasure (“right to be forgotten”) (Article 17 of the GDPR);
4. right to restriction of processing (Article 18 of the GDPR);
5. right to data portability (Article 20 of the GDPR);
6. right to object (Article 21 of the GDPR);
7. the right not to be subject to decisions based solely on automated processing, including profiling (Article 22 of the GDPR);
8. to the extent that the data is processed on the basis of a separate consent, you have the right to withdraw your consent at any time. However, this does not affect the lawfulness of data processing that was carried out before its withdrawal.

To exercise these rights, please contact us or our Data Protection Officer (contact details in sections 1 and 2 hereinabove).

Right to Lodge a Complaint with an Authority

You also have the right to file a complaint to the Supervisory Authority responsible for personal data protection i.e. the President of the Personal Data Protection Office.