Privacy Policy for psychotherapy-ipsk.com.pl
- Introduction This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with the use of the Website’s services.
- Data Controller The administrator of personal data is KUBS.Co. Multiservice Company Paulina Kubś, with its registered office at 28 Wielicka Street, Building B, 30-552 Kraków, NIP 6762506764, entered into the CENTRAL REGISTER AND INFORMATION ON BUSINESS ACTIVITY kept by the MINISTER OF DEVELOPMENT AND TECHNOLOGY.
- Processing of personal data
- Scope of processed data The Data Administrator, acting through the Website and other means of communication, processes the Users’ personal data collected during the registration processes and other interactions with the Website, which include, but are not limited to: name and surname, address, e-mail address, telephone number.
- Purpose and duration of data processing Users’ personal data are processed for the purpose of providing services, including maintaining the user account, fulfilling orders, communicating on the performance of the contract, as well as for marketing purposes, including sending newsletters. Personal data will be stored for the duration of the agreement and the time necessary to comply with legal obligations, including the statute of limitations for claims and tax obligations. The data to which the User has given consent will be stored until the withdrawal of this consent.
- Right of access, rectification and deletion of data You have the right to access, rectify, request erasure of your personal data (“right to be forgotten”) and other rights under applicable data protection laws.
- Personal data requests The User has the option of submitting requests regarding their personal data, including their processing, in electronic form to the e-mail address of the Data Controller.
- Transfer of personal data Personal data may be transferred to external entities, such as payment operators and courier companies, in order to provide the services offered by the Website.
- Consent to data processing The User agrees to the processing of personal data by actively ticking the appropriate checkboxes, which will not be selected by default.
- Protection and confidentiality of personal data The Administrator undertakes to maintain the secrecy of the Users’ personal data and to ensure their proper protection against unauthorized access.
- Right to lodge a complaint The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if it is considered that the processing of their personal data violates the provisions on personal data protection.
- Use of data in social media The Administrator may use the personal data of users on social platforms to the extent enabled by the functions of social media integration, always in accordance with the privacy settings of the users.
- Automated decision-making The website may use automated decision-making tools, including algorithms and artificial intelligence, which can affect the user experience, e.g. in terms of personalizing offers.
- Purpose of data processing Personal data is processed in order to:
- Perform a contract for the services available on the website, including providing health information and managing bookings.
- Marketing of the Administrator’s own services.
- Contact with the user, including for the purposes of possible complaints.
- The Administrator may use personal data for profiling in order to personalize advertising content or offers, which means analyzing user preferences and behaviors in order to tailor marketing communications.
- Data recipients The recipients of personal data may be:
- Entities providing IT services to the Administrator.
- Entities conducting marketing activities on behalf of the Administrator.
- Entities related to legal and debt collection services of the Administrator.
- Other entities participating in the provision of the Website’s services under an agreement with the Administrator.
- Transfers of data outside the EU Personal data may be transferred outside the European Union on the basis of standard data protection clauses adopted by the European Commission.
- Data retention period Personal data are stored for the period necessary to perform the contract and for the period required by law, including the storage of medical records and for accounting and tax purposes.
- User rights The User has the right to:
- Access your personal data.
- Data rectification.
- Deletion of data.
- Restrictions on data processing.
- Data portability.
- Lodge a complaint with the authority supervising compliance with personal data protection regulations.
- Changes to the privacy policy The Administrator reserves the right to change the privacy policy, about which users will be informed on the Website.
- Contact In case of questions related to the processing of personal data, users may contact the Administrator via e-mail: admin@psychotherapy-ipsk.com.pl or via the contact form on the website.
- Data security The Controller applies appropriate technical and organisational measures to ensure the security of personal data.
- Procedures in the event of a data breach In the event of a breach of personal data security, the Administrator will take the necessary steps to minimize possible negative consequences for users, as well as inform them about the incident in the time and form required by law.
- Definitions and abbreviations
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council.
- Act on Patients’ Rights – Act of 6 November 2008
- Regulation of the Ministry of Health – Regulation of the Minister of Health on medical documentation.
- Use of third-party services and applications The Website Administrator uses tools and applications offered by external entities that enable the improvement of communication and provision of services. Among them are:
- Zoom – a video conferencing platform that allows you to conduct online meetings and provide counseling or consultation services remotely.
- Google – various tools and services offered by Google LLC, including analytical services, e-mail communication support and other tools supporting the operation of the Website.
- TidyCal – an application used to manage your calendar and make appointments.
- Web analytics The Administrator uses analytical tools, such as Google Analytics, to collect statistical data on the activity of users on the Website, which helps in the optimization and development of the Website.
- Automatic data collection The Website may use technologies such as tracking pixels, web beacons, etc., to collect information about user behaviour on the website, which helps to analyse traffic and improve the functionality of the Website.
It should be noted that in the future, the calendar used may be changed or replaced by another tool that better suits the needs of the Website and its Users.
Each of these entities has its own privacy policy and terms and conditions, which Users should familiarize themselves with. The Website Administrator is not responsible for the processing of personal data by external services and applications, and the regulations and privacy policies of these services are available directly on their websites.
- Information about cookies The website uses cookies for the following purposes:
- Adapting the content of the website to the user’s individual preferences (e.g. regarding language, colours, font size).
- Preparation of statistics to help understand how Users use the website, which allows for improving its structure and content.
- Maintaining the user’s session after logging in, so that the user does not have to re-enter the login and password on each subpage.
- To provide Users with advertising tailored to their interests.
- Additional provisions
- The Website may contain links to other websites that operate independently of the Website and may have their own privacy policies, which are recommended to be reviewed. The Administrator is not responsible for the privacy rules on these websites.
- It is forbidden to copy any content posted on the Website without the written consent of the Administrator.
- The Administrator reserves the right to make changes to the Privacy Policy. Users will be informed about any changes and updates to the Privacy Policy through announcements on the Website.
- In case of questions or doubts regarding the Privacy Policy, the User may contact the Administrator via the contact form available on the Website.
- The date of the last update of the Privacy Policy will be indicated on the Website.
Date of entry into force of the Privacy Policy: 01.01.2024