1. Data Controller

The controller of personal data is:

inPHARM spol. s r.o., organizační složka
Company ID (IČO): 27109640
Head office & distribution: V Areálu 1243, 252 42 Jesenice, Czech Republic
Registered with the Commercial Register kept by the Municipal Court in Prague, file no. A 49203
Email: inpharm@inpharm.cz
Phone: +420 724 312 994
Data box ID: 2rzc6xi

Hereinafter the „controller“ or „inPHARM“.

2. What personal data we process

In connection with operating the website and handling enquiries we may process in particular:

first name and surname,
email address,
phone number,
the company or organisation you represent,
job title,
the content of your message,
data related to a business or professional enquiry,
technical data generated during normal operation of the website.

Please do not send health data or other sensitive personal data in an ordinary email.

To report a suspected adverse reaction to a medicinal product, please use the contacts listed on the Product Safety page.

3. Purposes and legal bases of processing

Handling a general enquiry

We process personal data in order to receive, handle and record your enquiry.

The legal basis is our legitimate interest in communicating with people who contact us, or steps taken prior to entering into a contract if the enquiry relates to possible business cooperation or an order.

Orders and contractual relationships

If the communication relates to an order, delivery of goods or another contractual relationship, we process data for the purpose of concluding and performing the contract and fulfilling related legal obligations.

Professional and business cooperation

We may process the contact details of healthcare professionals, business partners and representatives of legal entities for the purpose of professional, business and organisational communication.

The legal basis is the controller's legitimate interest in maintaining professional relationships and ensuring its activities.

Protection of legal claims

We may also retain some data for the purpose of protecting rights, handling complaints or disputes, or demonstrating compliance with our obligations.

The legal basis is the controller's legitimate interest in protecting its rights and legal claims.

Compliance with legal obligations

We also process personal data where required by accounting, tax, pharmaceutical or other legal regulations.

Product safety / pharmacovigilance (Safety Reporting)

If you report, via the Product Safety page, a suspected adverse reaction to a medicinal product, an incident involving a medical device, a quality defect, or other safety information, we process the data provided exclusively for the purpose of ensuring product safety and fulfilling related legal obligations in the field of pharmacovigilance and medical device vigilance.

As part of this report, health data may also be processed (e.g. a description of the adverse reaction or general information about the patient). You provide this data voluntarily, and we recommend providing only the data necessary to assess the report.

The legal basis for this processing is the controller's compliance with legal obligations in the area of medicinal product and medical device safety, or, where applicable, the protection of vital interests or the public interest in the area of public health. This is not marketing consent, and by submitting a report you do not grant consent to any marketing processing.

We may, to the extent necessary, disclose data from safety reports to competent public authorities (e.g. the Czech State Institute for Drug Control, SÚKL), to manufacturers, or to marketing authorisation holders for the specific product or medical device, where required by the applicable regulatory process.

Personal data are retained only for as long as necessary to fulfil the relevant legal, regulatory and pharmacovigilance obligations governing the safety of medicinal products and medical devices.

4. Retention period

We retain data from general contact enquiries for the time necessary to handle them, and generally for no more than three years thereafter, unless a longer period is required to protect legal claims or comply with another legal obligation.

Data related to contractual relationships, orders, accounting, or compliance with statutory obligations are retained for the period stipulated by applicable legal regulations.

Data processed in the area of pharmacovigilance are retained in accordance with special legal regulations and rules on the safety of medicinal products.

5. Recipients of personal data

The following may have access to personal data to the extent necessary:

authorised employees and associates of inPHARM,
web hosting and technical operation providers,
email and communication service providers,
Google Ireland Limited (Google Fonts and Google Maps — the typeface and the map shown on this website); for details see Information on the use of cookies,
IT support providers,
accounting, legal or tax advisors,
public authorities, where required by law,
in the case of product safety reports, also manufacturers or marketing authorisation holders for the specific product or medical device, where required by the regulatory process.

We have appropriate contractual arrangements in place with service providers acting as processors.

6. Transfers outside the European Economic Area

Some providers of technical or cloud services may also operate outside the European Economic Area.

Where personal data are transferred outside the European Economic Area in connection with their services, this takes place on the basis of an appropriate legal mechanism, in particular an adequacy decision or standard contractual clauses approved by the European Commission.

7. Sources of personal data

We obtain personal data mainly directly from you, for example when you:

send us an email,
send us an email,
contact us by phone,
hand us your business card or contact details at a professional or business meeting,
communicate with our employee or sales representative.

8. Your rights

Subject to the conditions set out in applicable law, you have the right to:

obtain confirmation as to whether we process your personal data,
request access to your personal data,
request correction of inaccurate or incomplete data,
request erasure of personal data,
request restriction of processing,
object to processing based on legitimate interest,
obtain your data in a portable format, where the statutory conditions are met,
lodge a complaint with the supervisory authority.

Requests may be sent to inpharm@inpharm.cz or via data box ID 2rzc6xi.

9. Right to object

You have the right to object at any time to the processing of personal data based on our legitimate interest.

Once we receive an objection, we will no longer process the data unless we demonstrate compelling legitimate grounds for further processing, or the data is needed to establish, exercise or defend legal claims.

10. Supervisory authority

The supervisory authority for the Czech Republic is:

Úřad pro ochranu osobních údajů (Czech Office for Personal Data Protection)
Pplk. Sochora 27
170 00 Praha 7, Czech Republic

The supervisory authority for the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic.

11. Automated decision-making

When processing personal data through this website, we do not carry out automated individual decision-making that would have legal or similarly significant effects on you.

12. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

13. Updates to this document

We may update this document from time to time, in particular when the services we use or applicable legal regulations change.

Effective from: 4 August 2026

Information on the Processing of Personal Data