Privacy Policy

1. Data Controller

The controller of your personal data is the Polish Society of Phlebology (Polskie Towarzystwo Flebologiczne) with its registered office in Katowice (40-635), ul. Ziołowa 45-47, Poland (hereinafter: "PTF" or "Controller").

Registration details: KRS: 0000089956, NIP: 9541570914, REGON: 270222286

The Controller may be contacted:

• by e-mail regarding data protection matters: rodo@ptf.org.pl
• general e-mail: kontakt@ptf.org.pl
• via e-mail message
• phone: +48 513 190 514

The Controller has not appointed a Data Protection Officer (DPO). For matters concerning the protection of personal data, please contact us at: rodo@ptf.org.pl.

2. Purposes and Legal Bases of Processing

Your personal data is processed for the following purposes:

2.1. Membership in PTF

• Purpose: Registration and administration of Society membership
• Legal basis: Art. 6(1)(b) GDPR – performance of a contract
• Retention period: For the duration of membership + 5 years

2.2. Registration for events

• Purpose: Organization of conferences, trainings and events
• Legal basis: Art. 6(1)(b) GDPR – performance of a contract
• Retention period: 3 years from the end of the event

2.3. Contact and correspondence

• Purpose: Responding to inquiries and communication
• Legal basis: Art. 6(1)(f) GDPR – legitimate interest
• Retention period: 2 years from the last contact

2.4. Newsletter and marketing communication

• Purpose: If a newsletter is launched — sending information about events and news
• Legal basis: Art. 6(1)(a) GDPR – consent
• Retention period: Until consent is withdrawn

3. Rights of Data Subjects

You are entitled to the following rights related to the processing of personal data:

• Right of access – to obtain information about processed data (Art. 15 GDPR)
• Right to rectification – to correct inaccurate data (Art. 16 GDPR)
• Right to erasure – to request deletion of data, the so-called "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing – to temporarily suspend operations on data (Art. 18 GDPR)
• Right to data portability – to receive data in a machine-readable format (Art. 20 GDPR)
• Right to object – to processing based on legitimate interest (Art. 21 GDPR)
• Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out before its withdrawal (Art. 7(3) GDPR)
• Right to lodge a complaint – with the supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland)

4. Data Recipients

Your data may be shared with the following categories of recipients:

• IT and hosting service providers
• Entities providing accounting and legal services
• Event organizers (in the case of co-organized conferences)
• Entities authorized under applicable law

We do not transfer personal data to third countries or international organizations outside the European Economic Area.

5. Data Security

The Controller applies appropriate technical and organizational measures to ensure data security, including:

• Encryption of data transmission (SSL/TLS)
• Regular backups
• Access control to IT systems
• Staff training on data protection

6. Automated Decision-Making

Your data is not subject to automated decision-making, including profiling, as referred to in Art. 22(1) and (4) GDPR.

7. Changes to the Privacy Policy

The Controller reserves the right to introduce changes to this Privacy Policy. We will inform you of any significant changes via a notice on the website.