Privacy Policy
§1. Data Controller
1. The controller of your personal data is Nowoczesne Terapie (hereinafter: "Controller").
2. For matters related to personal data protection, you can contact the Controller via the email address provided on the homepage.
§2. What Data We Collect
1. When using the website and booking Sessions, we collect the following personal data:
a) Contact data: first name, phone number, email address - for booking processing and communication.
b) Booking data: selected session date, package type - for scheduling appointments.
c) Technical data: IP address, browser type, operating system - collected automatically for security and statistical purposes.
2. We do not collect sensitive data (health data, religious beliefs, sexual orientation, etc.).
3. Providing contact data is voluntary but necessary to use the booking service.
§3. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and on the following legal bases:
1. Contract performance (Art. 6(1)(b) GDPR) - processing data necessary for session booking, contact regarding scheduled appointments, and payment processing.
2. Legal obligations (Art. 6(1)(c) GDPR) - processing resulting from accounting and tax obligations (financial documentation retention).
3. Legitimate interest of the Controller (Art. 6(1)(f) GDPR) - for website security, fraud detection, establishment, pursuit, or defense of claims, and internal statistics.
4. Consent (Art. 6(1)(a) GDPR) - if you consent to marketing communications, your data will be processed for this purpose until consent is withdrawn.
§4. Data Recipients
1. Your personal data may be shared only with entities authorized to receive it under applicable law or entities cooperating with the Controller in the following areas:
a) hosting services (server operating the website),
b) payment services (payment operator - if applicable),
c) accounting services,
d) advertising and analytics services (Google LLC - for Google Ads conversion tracking, if you consent to marketing cookies).
2. The Controller does not sell or share personal data with third parties for marketing purposes.
3. If you consent to marketing cookies, data may be transferred to Google LLC (USA) based on Standard Contractual Clauses (Art. 46(2)(c) GDPR).
§5. Data Retention Periods
1. Booking-related data is stored for the duration of service delivery, then for the period required by law (up to 5 years for accounting purposes).
2. Data processed based on consent - until consent is withdrawn.
3. Data processed based on legitimate interest - until a successful objection is raised.
4. Technical data (server logs) - for a maximum of 12 months.
5. After the required periods expire, data is permanently deleted or anonymized.
§6. Your Rights
Under the GDPR, you have the following rights:
1. Right of access - you can obtain information about what data we process and for what purpose.
2. Right to rectification - you can request correction of inaccurate or completion of incomplete data.
3. Right to erasure ("right to be forgotten") - you can request deletion of data when there is no legal basis for further processing.
4. Right to restriction of processing - you can request restriction of data processing in certain situations.
5. Right to data portability - you can request transfer of data in a structured format.
6. Right to object - you can object to processing based on the Controller's legitimate interest.
7. Right to withdraw consent - you can withdraw consent at any time, which does not affect the lawfulness of processing carried out before withdrawal.
8. Right to lodge a complaint - you have the right to lodge a complaint with the Polish Data Protection Authority (UODO) or the supervisory authority in your country of residence.
To exercise your rights, contact the Controller via email.
§7. Cookies
1. The website uses cookies - small text files stored on the user's device.
2. We use only strictly necessary cookies for the proper functioning of the website:
a) session cookies - enabling proper form operation and user session maintenance,
b) language preference cookies - remembering the selected website language,
c) consent cookies - remembering the given cookie consent.
3.
3. Analytical cookies (Google Analytics) - with your consent - help us understand how visitors use the site. Data is anonymized (anonymize_ip).
4. Marketing cookies (Google Ads) - with your consent - enable measuring the effectiveness of advertising campaigns (conversion tracking). We do not use remarketing.
4. Users can manage cookies through their browser settings, including blocking or deleting cookies. Blocking necessary cookies may affect the proper functioning of the website.
5. The legal basis for using necessary cookies is the Controller's legitimate interest (Art. 6(1)(f) GDPR) - ensuring the proper functioning of the website.
§8. Data Security
1. The Controller implements appropriate technical and organizational measures to protect personal data, including:
a) encrypted SSL/TLS connection,
b) protection against unauthorized access to the admin panel,
c) regular website software updates,
d) limiting access to personal data to authorized persons only.
2. Despite implementing all available measures, the Controller cannot guarantee the complete security of data transmission over the Internet.
§9. Automated Decision-Making and Profiling
The Controller does not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
§10. Links to External Websites
The website may contain links to external sites. The Controller is not responsible for the privacy policies and practices of those sites' operators. We encourage you to review the privacy policies of each website you visit.
§11. Changes to the Privacy Policy
1. The Controller reserves the right to update this Privacy Policy in the event of changes in legislation, services provided, or technology.
2. The updated Privacy Policy will be published on the website.
3. Last updated: March 2026.