Privacy Policy

Introduction

This Privacy Policy describes personal-data processing on the StacjaMowa - Therapy Center website and through its contact form. It covers information provided directly by the person using the form. The form may also save a draft locally on the user's device. This draft is not sent to the Controller or to our server.

Data controller

The data controller is StacjaMowa Edyta Bykowska, NIP: 844-21-85-176. The public business name is StacjaMowa - Centrum Terapii. The contact address is Limbowa 5, 80-175 Gdańsk. The offices operate at: Limbowa 5, 80-175 Gdańsk; Stanisława Lema 4/9U, 80-126 Gdańsk.

Contact about personal data

For questions about personal-data protection, contact the Controller at kontakt@stacjamowa.pl or +48 737 394 377.

Purposes and legal bases

The legal basis depends on the purpose:

• Handling an inquiry and taking steps at the person's request before a possible agreement - GDPR Art. 6(1)(b), where processing is necessary for those steps.
• Health information entered in the form - GDPR Art. 9(2)(a), based on explicit consent given in the form.
• Website security, abuse prevention, and legal-claim defence - GDPR Art. 6(1)(f), within the Controller's legitimate interest.
• Aggregated website analytics with Umami without cookies - within our legitimate interest (GDPR Art. 6(1)(f)), where the tool runs without storing or accessing information on the device.
• The interactive Google map - connecting to an external service may involve Google processing technical data.

Data categories

Depending on the inquiry, we may receive:

• Name and contact details, such as an email address and telephone number.
• A child's name and date of birth when the inquiry concerns a child.
• A description of the matter, preferred location, and preferred times.
• Health information if a person chooses to enter it in the form and gives explicit consent to its processing.
• Technical information related to website use, such as IP address, browser type, and device information, to the extent sent by hosting, form protection, analytics, or the embedded Google map.

Processing purposes

We use the data to:

• answer an inquiry and contact the person about a possible appointment
• operate and protect the contact form, including Turnstile verification
• maintain security, detect abuse, and handle data requests
• create aggregated website statistics with Umami without cookies
• show an interactive Google map

Retention period

We keep data for as long as needed to handle the inquiry and then for the period needed to establish, pursue, or defend legal claims. If a law requires a longer period, we follow that period. The exact period depends on the data type and purpose.

Data-subject rights

You may use the rights below. We respond without undue delay, normally within one month of receiving a request. A complex request may extend the period by up to two further months. We will explain this within the first month.

• access your data and receive a copy
• correct inaccurate data or complete incomplete data
• request erasure where the law allows it
• request restriction of processing where the law allows it
• receive or transfer data where the basis is consent or an agreement and processing is automated
• object to processing based on legitimate interest
• withdraw consent at any time; withdrawal does not affect earlier lawful processing
• receive information about automated decision-making; this website does not make decisions based solely on automated processing

Right to complain

If you believe that we process data in breach of the GDPR, you may complain to the President of the Polish Personal Data Protection Office. Information about submitting a complaint is available at https://uodo.gov.pl/pl/526/2464. You may also seek a judicial remedy.

Data security

We use technical and organisational measures appropriate to the risk of processing personal data. Access is limited to people and services that need it for a defined purpose, and we respond to events that may affect security.

Data recipients

Data may be shared with the following recipients or categories of recipients, only to the extent needed for the relevant purpose:

• The Controller and people authorised to handle inquiries.
• Resend, an email provider that helps deliver the form message.
• The website hosting provider.
• Cloudflare, whose Turnstile service helps protect the form from automated abuse.
• Umami, for aggregated website analytics without cookies.
• Google LLC or entities operating Google Maps, because the map is embedded directly in the website.
• Public authorities when disclosure is required by law.