Privacy Policy
1. General Provisions
1.1. This Privacy Policy outlines the rules for the processing and protection of personal data of users visiting the website dedicated to the 23rd International Congress of Aesthetic and Anti-Aging Medicine, taking place on September 26–28, 2025.
1.2. The Data Controller is Pharma Medical House Sp. z o.o., headquartered in Warsaw (address: ul. Pod Lipą 4/U6, 02-798 Warsaw), registered in the National Court Register under number KRS: 0000648227, NIP: 5213756285, REGON: 365901683.
1.3. Personal data is processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) of April 27, 2016.
2. Scope and Purpose of Data Collection
2.1. Personal data is collected for the following purposes:
registration and handling of Congress participation,
payment processing (if applicable),
issuing certificates of attendance,
communication regarding organizational and informational matters related to the Congress,
sending promotional and marketing information (with the user’s consent).
2.2. The following data may be processed: name, surname, email address, phone number, professional data, invoicing details, and other information voluntarily provided in contact or registration forms.
3. Legal Basis for Data Processing
3.1. Personal data is processed on the basis of:
Article 6(1)(b) GDPR – necessary for the performance of a contract (event participation),
Article 6(1)(c) GDPR – legal obligation (e.g. issuing an invoice),
Article 6(1)(a) GDPR – data subject’s consent (e.g. for marketing),
Article 6(1)(f) GDPR – legitimate interests of the controller (e.g. legal claims protection).
4. Data Sharing
4.1. Personal data may be shared only with entities cooperating with the Controller in organizing the event, including IT providers, payment operators, accounting firms, and technology partners.
4.2. Data will not be transferred outside the European Economic Area (EEA) unless necessary, and only if adequate data protection measures are ensured.
5. Data Retention Period
5.1. Personal data will be retained for the duration necessary to achieve the processing purposes:
for the time required to conduct the event and fulfill accounting and tax obligations,
until consent is withdrawn (where applicable),
for the period of legal claim limitation (up to 6 years after the event ends).
6. Data Subject Rights
6.1. Users have the right to:
access their personal data,
rectify, delete, or restrict processing,
object to data processing,
data portability,
withdraw consent at any time (without affecting prior lawful processing),
lodge a complaint with the President of the Personal Data Protection Office.
7. Cookies
7.1. The website may use cookies for statistical, functional, and marketing purposes.
7.2. Users may change browser settings at any time to manage or disable cookies.
8. Security
8.1. The Controller uses appropriate technical and organizational measures to protect personal data from loss, unauthorized access, alteration, or disclosure.
9. Contact
9.1. For matters related to personal data processing, please contact the Controller at: ptmeiaa@kongres-ptmeiaa.pl or in writing to the company’s registered address.
10. Changes to the Privacy Policy
10.1. The Controller reserves the right to update this Privacy Policy. The current version will always be published on the event website.
