Privacy Policy

The controller of personal data is nCage Therapeutics sp. z o.o., with its headquarters in Kraków (30-348) at ul. Profesora Michała Bobrzyńskiego 14, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division, under KRS number 0000813543, with share capital of PLN 5,000.00 and NIP number 676-257-40-04.

The controller can be contacted at info@ncage.org, or in writing at the address of the controller's registered seat.

In connection with the functioning of our website, we collect and process:

• the identifier assigned to the visitor (ID) and the associated statistical information about visits to our website;
• server logs — the user's activity during a visit.

The collected data is used to handle server requests and to perform statistical analysis of users' activity on the website: to understand the transparency of the website and its content, and to monitor how users navigate the site and which content is attractive to them. We do this in order to understand the needs of our users and to increase the communication, educational and usability value of our website.

The personal data we collect is processed on the following legal grounds:

• data collected using cookie technology, used to analyse behaviour on our website, is processed on the basis of voluntary consent, which can be withdrawn at any time (Article 6(1)(a) GDPR and Article 173 of the Telecommunications Law Act);
• server logs are processed on the basis of legitimate interest (Article 6(1)(f) GDPR), consisting of security reasons and safeguarding the legitimate interests of the data controller.

The data controller can share data with subcontractors who provide services in:

• website administration;
• data hosting;
• analysing user behaviour (Google LLC, on the basis of Standard Contractual Clauses; where necessary we collect the explicit consent of the user).

Data processed using cookie technology is kept for the following periods:

• log data: 14 days;
• cookie data: 180 days.

Every person whose personal data is processed has the right to:

• access their data;
• correct their data;
• have their data erased;
• restrict the processing of their data;
• transfer their data;
• object to further processing.

Users may withdraw their consent at any time.

Every user has the right to lodge a complaint with the supervisory authority if they conclude that our practice violates the law.

Providing personal information related to cookie identifiers is voluntary. Data related to server logs is collected automatically and is necessary to provide access to our website.