Privacy notice

Privacy notice for public cooperation and transport enquiries

Controller and contact

The controller is Allenort Medway sp. z o.o., ul. Wiejska 11/15, 00-480 Warsaw, Poland, KRS 0000615263, NIP 5252657162, REGON 364318941. We have not appointed a data protection officer. Contact about personal data: medway@allenort.com.

Purposes and legal bases

We use data sent through the carrier, medic, b2b, individual and medical_facilities forms to answer the enquiry and prepare or discuss the requested cooperation or transport. Article 6(1)(b) GDPR applies to steps requested before a contract where you are its party. Article 6(1)(f) applies to a representative's contact and to establishing, exercising or defending claims. The medic form concerns current B2B or contract-of-mandate recruitment. Future recruitment is processed only after a separate optional consent.

Special-category and patient data

The individual and medical_facilities forms do not request patient or health data. Do not enter it in free-text fields. A medic may provide special-category data only on their own initiative. We use such data only with explicit consent under Article 9(2)(a) GDPR, and refusing or withdrawing that consent does not affect assessment of other data.

Voluntary data and optional choices

Providing data is voluntary. Without the required fields we cannot answer or continue the requested contact. Marketing and future-recruitment choices are optional, empty by default and do not affect submission. Each choice is separate for its purpose and channel: email does not include telephone or SMS. Allenort Medway is the only controller and sender for its own products and for products currently listed in the Allenort Group portfolio at https://allenort.com/inwestycje/. Data is not disclosed to those entities for this purpose.

Recipients and transfers

Data may be accessed by authorised service providers acting only on our documented instructions, where needed to operate the website, store submissions or deliver messages. We do not intend to transfer data outside the European Economic Area for these forms. If a transfer becomes necessary, we will use a GDPR Chapter V mechanism and provide the information required by law.

Retention

An unqualified enquiry for carrier, b2b, individual or medical_facilities is kept for 3 months after contact closes. Current medic recruitment data is kept for 3 months after recruitment ends. A future-recruitment consent is kept for up to 1 year or until withdrawal. Evidence of consents and withdrawals is kept for 3 months after the consent purpose ends. A longer period is used only where a specific law requires it or where a documented need exists to establish, exercise or defend a concrete claim; access is then restricted.

Your rights

You may request access to, rectification, erasure or restriction of processing of your data, and portability where the legal conditions apply. You may object to processing based on Article 6(1)(f), and withdraw an optional consent at any time without affecting earlier lawful processing. To exercise a right, contact medway@allenort.com.

Complaints and automated decisions

You may complain to the President of the Polish Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland. We do not use your form submission for solely automated decision-making, including profiling.

Version and changes

This notice is version privacy-2026-09-03. We will publish a new version when the purposes, legal bases, recipients, transfers or retention rules change.