Privacy Policy

This Privacy Policy explains how Aptamedica sp. z o.o. processes personal data in connection with the website aptamedica.com.

1. Data Controller

The controller of personal data is:

You may contact us at the email address above regarding any matter related to privacy or the processing of your personal data.

2. Data We Process

The Aptamedica website is primarily an informational website and does not currently provide user accounts, online registration or contact forms.

We may process the following categories of data:

Website access and technical data

When you access the website, our hosting infrastructure may automatically process technical information necessary to deliver and secure the website, including:

• IP address;
• date and time of the request;
• requested URL;
• browser and device information;
• HTTP request and response information;
• information relating to technical errors or security events.

This information may be recorded in server access and error logs.

Email correspondence

If you contact us using an email link available on the website or otherwise send an email to Aptamedica, we may process information contained in your message, including:

• your name;
• email address;
• organisation or professional affiliation;
• contact details;
• the content of your correspondence;
• any other information you choose to provide.

Please do not include sensitive personal information in your message unless it is necessary.

3. Purposes and Legal Bases

We may process personal data for the following purposes:

Operating and securing the website

Technical data may be processed to:

• provide access to the website;
• ensure network and information security;
• diagnose technical problems;
• prevent abuse and malicious activity;
• maintain the stability and integrity of the website.

The legal basis is our legitimate interest in operating and protecting our website and IT infrastructure.

Responding to enquiries

If you contact Aptamedica, we process your personal data in order to respond to your message and manage the correspondence.

Depending on the nature of your enquiry, the legal basis may be:

• our legitimate interest in communicating with persons interested in Aptamedica, its technology, research, investment or potential cooperation; or
• taking steps at your request before entering into a contract.

Establishing or defending legal claims

Where necessary, data may also be processed for the establishment, exercise or defence of legal claims on the basis of our legitimate interests.

Compliance with legal obligations

Where applicable, personal data may be processed when necessary for Aptamedica to comply with obligations imposed by law.

4. Cookies and Similar Technologies

The website does not currently use analytics cookies, advertising cookies, marketing trackers or similar technologies for tracking visitors.

The website does not currently use:

• Google Analytics;
• Google Tag Manager;
• Meta Pixel;
• LinkedIn Insight Tag;
• behavioural advertising technologies;
• browser localStorage for visitor tracking;
• browser sessionStorage for visitor tracking.

More information is available in our Cookie Policy.

5. Recipients of Personal Data

Personal data may be made available, where necessary, to service providers supporting Aptamedica, including:

• website hosting and infrastructure providers;
• email service providers;
• IT and cybersecurity service providers;
• professional advisers, including legal or accounting advisers, where necessary.

Personal data may also be disclosed to public authorities where required by applicable law.

Service providers processing personal data on our behalf are required to process such data only for authorised purposes and subject to applicable data protection requirements.

6. Hosting and Server Logs

The website is hosted using third-party hosting infrastructure.

Technical server logs may be generated automatically when the website is accessed. Such logs may be used for security, diagnostics and technical administration.

At the time of the latest update of this Policy, the hosting provider's documentation states that website access and error logs are retained for 10 days.

We do not use server logs to create marketing profiles of website visitors.

7. International Data Transfers

The website does not currently intentionally integrate third-party analytics, advertising or social-media tracking technologies that require visitor data to be transmitted to such providers when the website is loaded.

Where any service provider used by Aptamedica processes personal data outside the European Economic Area, such processing will be carried out in accordance with the requirements applicable to international transfers of personal data, including appropriate safeguards where required.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

In particular:

• server logs are retained according to the technical retention period of the hosting provider;
• email correspondence is retained for as long as necessary to handle the enquiry and, where justified, afterwards for the period necessary to document the correspondence or establish, exercise or defend potential legal claims;
• data required by law may be retained for the period required by the relevant legal provisions.

Once personal data is no longer required, it is deleted or anonymised unless further retention is required by law.

9. Your Rights

Subject to the conditions provided by applicable data protection law, you may have the right to:

• access your personal data;
• obtain rectification of inaccurate personal data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive personal data in a portable format where the right to data portability applies;
• withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact:

contact@aptamedica.com

We may need to request additional information where reasonably necessary to verify your identity.

10. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

For Aptamedica in Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

11. Automated Decision-Making

Aptamedica does not use personal data collected through this website for automated decision-making or profiling producing legal or similarly significant effects.

12. External Links

The website may contain links to external websites, including LinkedIn.

Opening an external link means that you leave the Aptamedica website. The external website's own privacy rules and data processing practices then apply.

Aptamedica does not currently embed LinkedIn tracking technologies on the website merely by displaying links to LinkedIn.

13. Changes to this Privacy Policy

We may update this Privacy Policy where necessary, for example when:

• the website functionality changes;
• new service providers are introduced;
• analytics or other technologies are added;
• applicable legal requirements change.

The current version will always be published on this page together with its latest update date.