GDPR

Personal Data Protection / Privacy Policy

The company COMPEX, spol. s r.o., Company ID: 12164739, registered seat Palackého třída 924/105, Post Code: 612 00 Brno, (hereinafter referred to as ”we“ or ”Compex“) pays a great attention to personal data protection.

This document provides information about what personal data do we process, legal reasons for data processing, purposes of data utilization, and what rights do you have in connection with personal data processing.

A. What personal data do we process?

Personal data of the relevant data subjects – i.e. applicants or notifiers, which may be mainly the e-shop customers, doctors, representatives of distributors, representatives of healthcare providers and/or patients – are processed to the extent they are entered in the relevant application or form.

Categories of the personal data processed in this context are therefore as follows:

  1. a) identification data, which means in particular the birth code, date of birth, title, name and surname and/or company ID and VAT No;
  2. b) contact details, in particular address, e-mail address and telephone number;
  3. c) State of patient health, which means his/her health analysis, treated indications and possible contraindications
B. Why do we process the personal data and what authorizes us to do so?

We can process identification data and contact details of the applicants, persons interested in cooperation, prospective clients, interviewers or their representatives to obtain the feedback when settling the application, request inquiry or order and/or when processing a clinical trial.

The personal data are archived for as long as the defined purpose continues, and it is always possible to ask for immediate deletion of the personal data from our database.

C. Who processes your personal data and to whom they are transferred?

All personal data as above are processed by us, the administrator. This means that we determine the above-defined purposes for which your personal data are collected, identify the processing resources and are responsible for their proper performance. Such processing is performed by the Compex staff, but only those who necessarily need these data to fulfil the purpose, which the data are processed for.

We may also transfer your personal data to other entities, playing the role of an administrator, such as our clinical trial partners, collaborating physicians, or exclusive partners in the relevant locality, territory or country that have executed a written contract with us concerning personal data protection and that always store/archive the data at the same security level as we do, as a minimum.

We may, in some cases, also utilize services of other processors processing personal data only and exclusively in accordance with our instructions and for the purposes described in the part „Why do we process the personal data and what authorizes us to do so?

D. From what sources do we obtain the personal data?

In the majority of cases, we process the personal data released by you in the relevant application, form or inquiry.

E. What rights do you have when processing the personal data?

Right to access

Simply to say, you have the right to know what data we process about you, for what purpose, for what period of time, where we obtain your personal data, to whom do we transfer them, who processes them in addition to us, and what other rights do you have in connection with your personal data processing. You can find everything as above in this document “Customer Privacy Policy”. However, if you are unsure of what personal data do we process about you, you can ask us to confirm whether or not the personal data concerning you are processed by us and, if so, you have the right to access to these personal data. Within the scope of the right of access, you can ask us for a copy of the processed personal data; the first copy will be released free of charge and additional copies at a charge.

Right to correction

If you find that the personal data we process about you are inaccurate or incomplete, you are entitled to ask us to correct, rectify and/or complete them without undue delay.

Right to deletion

If you wish so, you are entitled to ask us to delete your personal information. We will delete your personal data without undue delay, if any of the following is true:

– we do not need your personal data any more for the purposes for which they have been processed;

– you will exercise your right to lodge an objection against processing (see the part below “Right to lodge an objection against processing”) regarding the personal data processed on the basis of fulfilment of the public interest tasks, and we will find it legitimate, or

– you believe that personal data processing performed by us does no more conform to the generally binding regulations.

Please do not forget that, even in presence of any of the reasons as above, we will not delete all your personal data immediately. This right will not be applied, if processing of your personal data is still necessary for fulfilment of our legal obligation or for determination, execution or defence of our legal claims (see “Why do we process the personal data and what authorizes us to do so?”) and/or  for keeping the documents in conformity with the Accountancy Act, where it is determined clearly for how long the information must be retained.

Right to restrict processing

In some cases you may, in addition to the right to deletion, exercise the right to restrict personal data processing. This right allows you to ask, in certain cases, to tag your personal data, and the tagged data will not be subject to any further processing operation – however, in this case not forever (as in case of the right to deletion), but for a limited time period. We have to restrict personal data processing when:

– you deny accuracy of your personal data before agreeing on what data are correct;

– your personal data are processed without an adequate legal basis (for example, beyond what has to be processed), but you will rather prefer to restrict them and not to delete such data (for example, if you expect that you would provide such data to us in the future anyhow);

– your personal data are no more needed for the processing purposes as above, but you require them to identify, exercise or defend your legal claims, or

– you lodge an objection against processing. The right to objection is described in details below in the part “Right to lodge an objection against processing”). For the time period of investigation whether or not your objection is justified, we are obliged to restrict processing of your personal information.

The right to lodge an objection against processing

You have the right to lodge an objection against processing of your personal data, resulting from fulfilment of the tasks in the public interest (see “Why do we process the personal data and what authorizes us to do so?”). We will discontinue data processing, unless we have serious legitimate reasons for continuing such processing.

Right to file a complaint

By exercising your rights in the way as above, your right to file a complaint with the relevant supervisory authority is not affected anyhow. You may exercise this right in particular if you believe that we process your personal data unjustifiably or in violation of the generally binding legal regulations. You may file a complaint against personal data processing by us with the Office for Personal Data Protection, registered seat Pplk. Sochora 27, 170 00 Prague 7.

F. How to exercise individual rights?

You can exercise your rights with us both in paper and in the electronic form. To be able to verify your identity adequately, without any doubt about who has in fact exercised the rights, it is necessary to accompany your documentary application by the verified signature, to send the electronic request from the data box or to demonstrate your identity in person with us.

We will settle your request without undue delay, within one month as a maximum. In exceptional cases, especially due to complexity of your request, we are entitled to extend this period by further two months. We will, of course, inform you about any such extension and its justification.

G. Personal Data Protection Commissioner

In all matters relating to processing of your personal data, our Personal Data Protection Commissioner (Officer) is available for you.

The Commissioner can be contacted at the e-mail address: