Legal
Privacy Policy
Last updated: 14 September 2026
01Who we are
The data controller for personal data processed through this website is:
OBNOWA PHARMA PROSTA SPÓŁKA AKCYJNA,ul. Puławska 303, 02-785 Warsaw, PolandKRS: 0001254613 · NIP (Tax Identification Number): 9512653655 · REGON: 545421024Entered in the Register of Entrepreneurs of the National Court Register (Krajowy Rejestr Sądowy) maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register.
Privacy & Data Protection: privacy@obnowa.com.
02Scope of this Privacy Policy
This Privacy Policy applies to personal data collected through obnowa.com and to communications initiated through this website — for example when you contact us by email using the addresses published on our pages.
It does not cover processing activities that are not carried out through this website, such as clinical-trial documentation, employee or recruitment data, or pharmacovigilance records. Should such activities be conducted by ObNowa Pharma, they will be governed by separate, dedicated privacy information.
03Personal data we may process
Depending on how you interact with this website, we may process the following categories of personal data:
Data you provide directly
Name and surname; email address; organisation or company; job title or professional role; and the information contained in your correspondence with us.
Technical data
Technical information generated when you visit the website, such as IP address, browser and device information and server logs; and cookie or similar storage identifiers where applicable, as described in our Cookie Policy.
This website does not operate contact forms, user accounts or newsletter subscriptions. We do not sell personal data to any third party.
04How we collect data
We collect personal data directly from you when you contact ObNowa Pharma, for example by email; automatically through the necessary technical and server processes that deliver and secure the website; and through cookies or similar technologies where applicable, as described in our Cookie Policy.
05Purposes and legal bases
We process personal data only where a valid legal basis under Article 6 GDPR applies. The table below summarises the purposes, the data concerned, the legal basis and the applicable retention approach.
Consent under Article 6(1)(a) GDPR is used as a legal basis only where optional cookies or similar technologies genuinely require it. No such optional technologies are currently deployed on this website; if they are introduced, they will not be activated before your consent, and this Policy will be updated accordingly.
Responding to enquiries
- Data
- Contact details and correspondence content
- Legal basis
- Art. 6(1)(f) GDPR — legitimate interest in responding; Art. 6(1)(b) GDPR where discussions progress towards a contract
- Retention
- For the duration of the enquiry and any resulting relationship, after which the data is deleted or anonymised
Business-development and partnership communications
- Data
- Contact details, professional role, correspondence
- Legal basis
- Art. 6(1)(f) GDPR — legitimate interest in developing business relationships
- Retention
- For the duration of the business relationship and any follow-up period justified by its nature
Investor and media enquiries
- Data
- Contact details and correspondence content
- Legal basis
- Art. 6(1)(f) GDPR — legitimate interest in handling investor and media relations
- Retention
- For the duration of the enquiry and any resulting relationship
Website security and operation
- Data
- IP address, browser/device information, server logs
- Legal basis
- Art. 6(1)(f) GDPR — legitimate interest in operating and securing the website
- Retention
- Server logs are kept only for a limited period proportionate to security and diagnostic needs
Compliance with legal obligations
- Data
- Records relevant to the obligation
- Legal basis
- Art. 6(1)(c) GDPR — compliance with a legal obligation
- Retention
- For the period required by the applicable law
06Pharmaceutical and medical information
The general contact channels published on this website are not intended for reporting medical emergencies or suspected adverse events, and are not a channel for requesting individual medical advice.
Please do not submit health data or other special-category personal data through the general enquiry channels unless we expressly ask you to do so. Treatment decisions belong to qualified physicians.
07Data sharing and processors
Personal data may be shared with service providers who support website hosting, IT and security, or our professional and corporate functions, strictly where necessary for those purposes. Such providers process personal data only on our documented instructions and under appropriate data protection agreements.
We do not publish a fixed list of processors in this Policy, as our suppliers may change over time; information about the providers relevant to a specific processing activity is available on request at privacy@obnowa.com.
08International data transfers
Where a service provider processes website-related personal data outside the European Economic Area, the transfer is made only with appropriate safeguards under Chapter V GDPR — for example an adequacy decision of the European Commission or Standard Contractual Clauses — and, where required, supplementary measures.
09Data retention
We retain personal data only for as long as necessary for the purpose for which it was collected and to meet applicable legal obligations. Correspondence is kept for the duration of the enquiry and any resulting relationship, after which it is deleted or anonymised. Technical and server logs are kept only for a limited period proportionate to security and diagnostic needs. We do not store personal data indefinitely.
10Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the state of the art and the nature of the processing. No method of transmission or storage can be guaranteed to be absolutely secure.
11Your rights
Under the GDPR you have the right of access to your personal data; the right to rectification; the right to erasure; the right to restriction of processing; the right to object to processing; the right to data portability where applicable; and, where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the competent supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO).
To exercise any of these rights, contact us at privacy@obnowa.com.
12Automated decision-making
This website does not use automated decision-making or profiling within the meaning of Article 22 GDPR.
13Children
This is a corporate website intended for healthcare professionals, business partners, investors, media and other professional stakeholders. It is not directed at children, and we do not knowingly collect personal data from children through this website.
14Third-party websites
This website contains links to third-party websites, such as the LinkedIn profiles of members of our Leadership team and Board of Directors. Third-party websites are governed by the privacy practices of those third parties, and we encourage you to read their privacy notices. We are not responsible for the content or privacy practices of third-party websites.
15Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in law, technology or our processing activities. The current version will always be published on this page, and the date of the latest update is shown at the top of this Policy.
16Contact
For any question about this Privacy Policy or the processing of your personal data, and to exercise your data protection rights, contact us at privacy@obnowa.com.