Back
pro.therapy Mykhailo Harkavka, based in Warsaw, ul. Koncertowa 4 , 02-787, NIP: 7123344315, REGON: 527132802, fulfilling the obligations arising from applicable legal provisions regarding the protection of personal data, including the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR), wishes to provide you with information regarding the processing and protection of your personal data. The information contained in the Privacy Policy will help you understand what personal data is collected and processed by pro.therapy Mykhailo Harkavka, for what purpose it is used, and what rights you have in connection with the protection of personal data. We invite you to read the following information. WHO COLLECTS AND PROCESSES YOUR PERSONAL DATA, I.E., WHO IS THE CONTROLLER OF YOUR PERSONAL DATA? pro.therapy Mykhailo Harkavka, based in Warsaw, ul. Koncertowa 4 , 02-787, (hereinafter referred to as the “Controller” – personal data controller, Controller). HOW CAN YOU CONTACT THE CONTROLLER? You can contact the controller:
  • via e-mail: kontakt@protherapy.pl,
  • by phone: +48 570 037 096,
  • by post: ul. Koncertowa 4 , 02-787 Warsaw,
  • via the contact form available at https://protherapy.pl/ (including the “Book now” button, which redirects to the Booksy system)
A Data Protection Officer is not required at pro.therapy Mykhailo Harkavka. WHEN AND WHAT PERSONAL DATA DOES pro.therapy Mykhailo Harkavka COLLECT AND PROCESS: pro.therapy Mykhailo Harkavka collects and processes personal data in connection with:
  • the provision of medical services;
  • undertaken marketing activities;
  • establishing contact via forms available on the websites;
  • established commercial relations.
WHAT PERSONAL DATA DOES pro.therapy Mykhailo Harkavka COLLECT AND PROCESS pro.therapy Mykhailo Harkavka collects and processes personal data to the extent necessary to achieve the purpose for which it was collected. Depending on the purpose and legal basis for the collection and processing of personal data, pro.therapy Mykhailo Harkavka may collect and process, among others, the following data:
  • identifying data, including but not limited to: first name, last name, PESEL (national identification number), date of birth;
  • contact details, including but not limited to: address, phone number, e-mail address;
  • data collected and processed to make a diagnosis and carry out the treatment process, including in particular data concerning health, provided that this applies exclusively to persons using the medical services provided by pro.therapy Mykhailo Harkavka.
FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DOES pro.therapy Mykhailo Harkavka PROCESS YOUR PERSONAL DATA AND HOW LONG IS IT STORED?
  • If you use medical services provided by pro.therapy Mykhailo Harkavka:
Purpose of data processing Legal basis for data processing Storage/processing period of personal data Providing health services, including maintaining medical records; performance of a contract for the provision of medical services Art. 6 sec. 1 lit. b or c of the GDPR and Art. 9 sec. 2 lit. h of the GDPR in connection with Art. 3 sec. 1 of the Act on Medical Activity and Art. 24 of the Act on Patient Rights and the Patient Rights Ombudsman, as well as the Regulation of the Minister of Health on the types, scope and templates of medical records and the method of their processing (hereinafter referred to as the Regulation of the Minister of Health) The period of storage of medical records resulting from legal provisions Provision of health care and management of health care systems and services, e.g., identity verification during registration and before providing health services Art. 6 sec. 1 lit. c and Art. 9 sec. 2 lit. h of the GDPR in connection with Art. 3 sec. 1 of the Act on Medical Activity and Art. 24 and 26 of the Act on Patient Rights and the Patient Rights Ombudsman, §10 sec. 1 point 2 of the Regulation of the Minister of Health, Art. 32 in connection with Art. 3 sec. 1 of the Act on the Information System in Healthcare The period of storage of medical records resulting from legal provisions Provision of social security and management of social security systems and services, e.g., issuing medical certificates or sick notes Art. 9 sec. 2 lit. h of the GDPR in connection with Art. 3 sec. 1 of the Act on Medical Activity and Art. 24 of the Act on Patient Rights and the Patient Rights Ombudsman, and Art. 54 of the Act on Cash Benefits from Social Insurance in the event of Sickness and Maternity The period of storage of medical records resulting from legal provisions Health prophylaxis Art. 9 sec. 2 lit. h of the GDPR in connection with Art. 3 sec. 2 of the Act on Medical Activity and Art. 24 of the Act on Patient Rights and the Patient Rights Ombudsman The period of storage of medical records resulting from legal provisions Occupational medicine, including the assessment of an employee’s fitness for work Art. 9 sec. 2 lit. h) of the GDPR in connection with Art. 6, 11 and 12 of the Occupational Medicine Service Act The period of storage of medical records resulting from legal provisions Making a medical diagnosis Art. 9 sec. 2 lit. h) of the GDPR in connection with Art. 3 sec. 1 of the Act on Medical Activity and Art. 24 of the Act on Patient Rights and the Patient Rights Ombudsman The period of storage of medical records resulting from legal provisions Implementation of patient rights, including the right to designate a person authorized to access their medical records and/or to be informed about their health status, and sharing medical records and/or information with an authorized person Art. 6 sec. 1 lit. c of the GDPR in connection with Art. 9 sec. h of the GDPR and Art. 26 sec. 1 of the Act on Patient Rights and § 8 sec. 1 of the Regulation of the Minister of Health The period of storage of medical records resulting from legal provisions Contact using a phone number or e-mail address, e.g., to confirm an appointment, cancel an appointment or procedure, inform about the possibility of collecting test results, which constitutes a legitimate interest of the Data Controller, namely patient service Art. 6 sec. 1 lit. b of the GDPR Art. 6 sec. 1 lit. f of the GDPR The period of storage of medical records resulting from legal provisions Inclusion in a medical program as part of occupational medicine examinations, based on an agreement for the provision of medical services concluded by the employer and/or ordering party with the Data Controller, including registration and verification of eligibility to use medical services provided by the Data Controller Art. 6 sec. 1 lit. b of the GDPR Art. 6 sec. 1 lit. c of the GDPR in connection with Art. 6, Art. 11 sec. 1 and Art. 12 sec. 2 point 1 of the Occupational Medicine Service Act Art. 9 sec. 2 lit. h of the GDPR in connection with Art. 3 sec. 1 of the Act on Medical Activity and Art. 24 of the Act on Patient Rights and the Patient Rights Ombudsman The period of storage of medical records resulting from legal provisions Duration of the contract Inclusion in a medical program regarding the provision of health services based on a contract concluded by the employer and/or ordering party with the Data Controller, including registration and verification of eligibility to use medical services provided by the Data Controller Art. 6 sec. 1 lit. a or b of the GDPR Art. 9 sec. 2 lit. h of the GDPR in connection with Art. 3 sec. 1 of the Act on Medical Activity and Art. 24 of the Act on Patient Rights and the Patient Rights Ombudsman The period of storage of medical records resulting from legal provisions Duration of the contract Execution of an agreement for the provision of electronic services in the form of maintaining an account in an online system – applies to persons holding an account in the online system operated by the Data Controller Art. 6 sec. 1 lit. a and b of the GDPR Account maintenance period Establishing, pursuing claims and defending against claims arising from business activity, which constitutes a legitimate interest in processing data by the Data Controller Art. 6 sec. 1 lit. f of the GDPR The limitation period for claims resulting from legal provisions Keeping accounting books and tax documentation Art. 6 sec. 1 lit. c of the GDPR in connection with Art. 74 sec. 2 of the Accounting Act and other specific regulations The period of storage of accounting and tax documentation resulting from legal provisions Ensuring the safety of persons and property by using video monitoring, recording images at the headquarters of pro.therapy Mykhailo Harkavka, which constitutes a legitimate interest in processing data by the Data Controller Art. 6 sec. 1 lit. f of the GDPR 1 month Use and dissemination of an image for marketing purposes based on your consent Art. 6 sec. 1 lit. a of the GDPR – consent to the processing and use of an image For the period necessary to achieve the purpose, but no longer than until you withdraw your consent
  • If marketing activities are undertaken towards you by pro.therapy Mykhailo Harkavka / a newsletter is sent:
Purpose of data processing Legal basis for data processing Storage/processing period of personal data Conducting marketing activities related to the activities of pro.therapy Mykhailo Harkavka, including establishing commercial relations, sending offers, information about goods, services, promotions, newsletters – as part of the legitimate interest of the Data Controller or based on your consent Art. 6 sec. 1 lit. f of the GDPR, which constitutes the legitimate interest of the Data Controller, namely the marketing of products and services Art. 6 sec. 1 lit. a of the GDPR, Art. 10 sec. 2 of the Act on Providing Services by Electronic Means, Art. 172 of the Telecommunications Law For the period necessary to achieve the purpose, but no longer than until: 1) you object to the processing of personal data for this purpose or 2) if you have given marketing consent – until the consent is withdrawn Profiling (creating preference profiles) aimed at adapting the services offered by the Data Controller to your needs, which constitutes a legitimate legal interest of the Data Controller; The Data Controller does not use any special category data for profiling, including data contained in medical records kept by the Data Controller. Art. 6 sec. 1 lit. f of the GDPR For the period necessary to achieve the purpose, but no longer than until you object to the processing of personal data for this purpose WHERE DOES pro.therapy Mykhailo Harkavka OBTAIN YOUR DATA FROM? Patients: Using medical services provided by pro.therapy Mykhailo Harkavka Data is obtained directly from you or an authorized person during appointment booking and the performance of medical services on your behalf, e.g., medical consultations, examinations, treatments. If you use a medical program for the provision of health services based on an agreement (e.g., Booksy, Znany Lekarz), data is primarily obtained from you based on the program accession form you filled out. If you use a medical program as part of occupational medicine examinations, the following data: first name, last name, PESEL (in the case of a person without a PESEL number – series, number and name of the identity document), date of birth (in the case of a person being hired), residential address (city, street, house no., apartment no.) as well as position and description of working conditions, are provided to the Data Controller by your employer. The Data Controller may also obtain your data from other medical entities as part of sharing medical records if it is necessary to ensure the continuity of health services. Clients: Using non-medical services provided by pro.therapy Mykhailo Harkavka, e.g., beauty services, personal trainer services Data is obtained directly from you before concluding the contract or during its execution. Clients: Making purchases, including using the online store Data is obtained directly by you or by the person concluding the contract, before concluding the contract or during its execution. Contractors: Establishing commercial relations Data is obtained directly from you before concluding the contract or during its execution. Contractor representatives, contact persons Data is obtained from the entity you represent or directly from you. In the event that personal data is provided by the entity you represent, the Data Controller collects your data: first name, last name, phone number, e-mail address, job position. Potential contractors Data is obtained directly from you or from publicly available sources. In the event that personal data is collected from publicly available sources, the Data Controller collects your personal data: first name, last name, company name, phone number, e-mail address, job position. Users of contact forms Data is obtained directly from you in the contact form or during contact carried out to respond to a notification made via the contact form. Recipients of marketing activities Data may be obtained: 1) directly from you; 2) from the entity you represent (first name, last name, phone number, e-mail address, job position); 3) from publicly available sources (first name, last name, company name, phone number, e-mail address, job position) Patients: Using medical services provided by pro.therapy Mykhailo Harkavka Providing your personal data is voluntary, however, it is a statutory condition for the Data Controller to maintain records, including medical records in the manner specified by law, including for your identity verification. Therefore, failure to provide data may result in a refusal to book a visit, register, or a refusal to provide a health service – a refusal to provide data will make it impossible for the Data Controller to provide health services. In the event of not providing a phone number and e-mail address, the Data Controller cannot refuse to provide you with a health service, but providing this data facilitates the use of services by enabling contact regarding service execution, including confirmation and cancellation of visits. If you use the online system operated by the Data Controller, providing the data necessary to maintain an account is a condition for concluding an agreement for the provision of account maintenance services. Refusal to provide data will result in the inability to create and maintain an account in the online system. Clients: Using non-medical services provided by pro.therapy Mykhailo Harkavka, e.g., beauty services, personal trainer services Providing the data necessary to execute the contract is a condition for concluding the contract. Refusal to provide it will result in the inability to use the service or issue an invoice. Clients: Making purchases, including using the online store Providing the data necessary to execute the sales contract is a condition for concluding the sales contract. Refusal to provide it will result in the inability to make a purchase or issue an invoice. Contractors: Establishing commercial relations Providing the data necessary to submit an offer, and then sign and execute a contract, is a condition for concluding the contract. Refusal to provide it will result in the inability to submit an offer and conclude a contract. Contractor representatives, contact persons If you provide personal data directly to the Data Controller, its provision is voluntary, but necessary for the Data Controller to execute the contract for the entity you represent. In the event of not providing data, the execution of the contract may be hindered. Potential contractors If you provide data directly to the Data Controller, its provision is voluntary, but necessary to take actions aimed at establishing commercial relations, including submitting an offer and concluding a contract. Users of contact forms Providing the data necessary to provide and respond to a notification/question is a condition for obtaining an answer. Failure to provide data will result in the inability to answer the notification/question. Recipients of marketing activities Providing your data is voluntary. TO WHOM CAN pro.therapy Mykhailo Harkavka TRANSFER YOUR PERSONAL DATA? Access to your personal data may be granted to:
  • employees and associates of the Data Controller authorized to process your personal data on the instructions of the Data Controller;
  • in the case of personal data processed to provide medical services – other medical entities to ensure treatment continuity and availability of health services;
  • entities to which the Data Controller has entrusted the processing of personal data, including:
  • providers of technical and organizational services (in particular, providers of ICT services, suppliers of medical equipment, entities providing postal and courier services);
  • providers of legal and advisory services, including in the case of pursuing claims related to the business activity conducted by pro.therapy Mykhailo Harkavka and defending against claims;
  • ordering parties with whom the Data Controller has concluded contracts for the provision of medical services;
  • other entities, persons, or authorities – to the extent and under the conditions specified by law, including persons authorized by you as part of exercising patient rights;
  • Proassist sp. z o.o. based in Krakow, os. Handlowe 5, 31-935 Krakow, KRS: 0000378475, NIP: 6762436420, REGON: 121461470 – as the entity operating the Booksy application, through which it is possible to book an appointment and schedule a visit at the Controller’s enterprise;
subject to the condition that the sharing of your data with the aforementioned entities takes place in accordance with applicable laws and while maintaining full rules related to their security. The Controller reserves the right to disclose selected information concerning the User to competent authorities or third parties who submit a request for such information, relying on an appropriate legal basis and in accordance with the provisions of applicable law. WILL YOUR DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA (TO COUNTRIES OTHER THAN THE EUROPEAN UNION AND ICELAND, NORWAY AND LIECHTENSTEIN)? The Data Controller may transfer your personal data to countries outside the European Economic Area (hereinafter referred to as Third Countries) and international organizations, which is related to the scope of activity conducted by pro.therapy Mykhailo Harkavka and cooperation undertaken with various entities. pro.therapy Mykhailo Harkavka ensures that data will be transferred to countries for which the European Commission has issued decisions stating that they meet an adequate level of personal data protection and/or in compliance with all legal requirements, including on the basis of a relevant agreement containing data protection clauses adopted by the European Commission, ensuring an appropriate method of securing the transferred personal data. WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH DATA PROCESSING BY pro.therapy Mykhailo Harkavka? In connection with the processing of your personal data by pro.therapy Mykhailo Harkavka, you have:
  • The right to information about the processing of personal data – the Controller provides information about the processing of personal data, primarily about the purposes and legal grounds for processing, the scope of data held, the entities to which personal data are disclosed, and the planned date of their deletion;
  • The right to obtain a copy of the data – the Controller provides a copy of the processed data regarding the person making the request;
  • The right to rectification – the Controller removes any inconsistencies or errors regarding processed personal data, and supplements or updates them if they are incomplete or have changed;
  • The right to erasure (the so-called right to be forgotten) – constitutes a basis to request the deletion of data whose processing is no longer necessary to carry out any of the purposes for which they were collected;
  • The right to restrict processing – the Controller ceases carrying out operations on personal data, with the exception of operations consented to by the data subject and their storage, in accordance with the adopted retention rules, or until the reasons for restricting data processing cease to exist (e.g., a decision of a supervisory authority is issued allowing for further data processing);
  • The right to data portability – to the extent that data is processed in connection with a concluded contract or explicit consent, the Controller provides the data provided by the data subject in a format that can be read by a computer. It is also possible to request that this data be sent to another entity – provided that both the Controller and the other entity to which the data is sent have appropriate technical means enabling such a transfer;
  • The right to object to data processing for marketing purposes – the data subject may object at any time to the processing of personal data for marketing purposes, without having to justify such an objection;
  • The right to object to other processing purposes – the data subject may object at any time to the processing of personal data on the basis of the Controller’s legitimate interest (e.g., for analytical or statistical purposes or for reasons related to the protection of property). An objection in this respect should contain a justification and is subject to the Controller’s assessment;
  • The right to withdraw consent – if data is processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of this consent;
  • The right to complain – in the event of concluding that the processing of personal data violates the provisions of the GDPR or other provisions regarding the protection of personal data, the data subject may submit a complaint to the President of the Personal Data Protection Office.
If you wish to exercise any of these rights, pro.therapy Mykhailo Harkavka provides contact:
  • via e-mail: kontakt@protherapy.pl;
  • by post: ul. Koncertowa 4 , 02-787 Warsaw,
  • via the contact form available at https://protherapy.pl/
WILL AUTOMATED DECISIONS BE MADE REGARDING YOUR DATA (DECISIONS WITHOUT HUMAN INTERVENTION)? No automated decisions will be made regarding your personal data (decisions without human intervention), nor will your data be subject to automated profiling. An exception to the above are decisions related to the execution of a binding contract for the provision of health services between us and you, e.g., decisions regarding ensuring adequate availability of services for you, making which in such a manner is necessary to conclude or perform an already concluded contract. SECURITY OF PERSONAL DATA pro.therapy Mykhailo Harkavka applies appropriate technical and organizational measures to ensure your personal data is secure, including protecting personal data against unauthorized access, loss, or destruction. In order to ensure the security of your personal data at pro.therapy Mykhailo Harkavka, appropriate personnel, organizational, technical (IT), and physical safeguards have been implemented.
  • SOCIAL MEDIA
  • The Controller processes the personal data of Users visiting the Controller’s profiles run on social media (Facebook or Youtube). This data is processed solely in connection with running the profile, including to inform Users about the Controller’s activities and promote various events, services, and products, as well as to communicate with users via functionalities available on social media. The legal basis for processing personal data by the Controller for this purpose is its legitimate interest (Art. 6 sec. 1 lit. f GDPR) consisting in promoting its own brand and building and maintaining a community related to the brand.
  • Integrated social media plugins are visible on the Website. This means that if a User clicks on one of such buttons (such as “Like” on Facebook), certain information will be shared with the providers of these social channels. If the User is simultaneously logged into a given social account, the social service provider may link this information to the User’s social channel account and make activities on the User’s profile public in such a way that they will be shared with other network users.
  • Social media plug-ins, including Facebook.com and Youtube and others, may be located on the Website pages. The associated services are provided respectively by Facebook Inc. and Google.
  • Facebook and Instagram are operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 and Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA Facebook https://developers.facebook.com/docs/plugins ; https://help.instagram.com/519522125107875;
  • Youtube is operated by Google, 1600 Amphitheatre Parkway Mountain View, CA 94043 United States: www.google.de/intl/de/policies/privacy;
  • The plugin provides its provider only with information about the time the User had access to the Website. If, while viewing the Website or staying on it, the User is logged into their account located e.g., on Facebook or Instagram, the provider is able to combine the User’s interests, information preferences, and other data obtained, for example, by clicking the “Like” button or leaving a comment, or entering the profile name in the search. Such information will also be transmitted directly to the provider by the browser. To avoid recording the visit on the selected User account by Facebook or Instagram on the Website’s page, you must log out of the account before starting to browse the Website.
  • The Website also contains links to websites administered by entities independent of the Controller, i.e., Facebook and You Tube. Separate privacy protection clauses or policies may apply to them. The Controller encourages you to familiarize yourself with their content, as the Controller has no influence on the data collected and data processing procedures, nor knowledge of the full scope of their acquisition, the purpose of their processing, or the time of their storage. The Controller also has no information regarding the deletion of data collected by plugin providers.
  • Addresses of plugin providers and URLs for their privacy policies:
  • Facebook: http://www.facebook.com/policy.php; further information on data acquisition: http://www.facebook.com/help/186325668085084 ; http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook joined the “Privacy Shield” agreement concluded between the EU and the USA, https://www.privacyshield.gov/EU-US-Framework.
  • Youtube: www.google.de/intl/de/policies/privacy;
  • Evaluations from clients or patients of the Controller’s enterprise are also published on the Website, which evaluations are added by them on the Controller’s fanpage maintained on the Facebook portal. The User’s use of the Facebook portal is subject to the Facebook portal’s personal data protection rules, which can be read at the links indicated in paragraph 5 above.
  • After adding an opinion and evaluation of the Controller’s enterprise on the Controller’s fanpage maintained on the Facebook portal, the user’s opinion and evaluation will be displayed on the Website at the address: pro.therapy Mykhailo Harkavka. The rating, the content of the opinion, and the name data (usually first and last name) of the account on the Facebook portal from which the given opinion was issued will be visible. By adding an opinion on the Facebook portal, you automatically consent to their display on the Website.
  • In the absence of consent to display opinions on the Website, please contact us:
  • via e-mail: kontakt@protherapy.pl,
  • by phone: +48 70 037 096,
  • by post: ul. Koncertowa 4 , 02-787 Warsaw.
  • This consent may be withdrawn at any time, and the Controller will remove the opinion from the Website.
  • The Website also features an integrated messenger used for contact with the Controller, based on the Messenger communicator belonging to the Facebook company.
  • If the User establishes contact with the Controller using this messenger, the User has the option to either log into their Facebook account in order to converse with the Controller from their Facebook account and the associated Messenger, or to converse as a guest. In the latter case, however, the conversation will remain available for a maximum period of 24 hours after the chat is closed.
  • If the User chooses the option to converse with the Controller while logged into their Facebook account, personal data and the content of the conversation will be fully visible and accessible to the Facebook portal, which will process the User’s personal data in accordance with its personal data processing rules, which are described here: https://www.messenger.com/privacy?locale=en_US.
  • If the User chooses the option to converse with the Controller as a guest, the Facebook portal will also have access to the conversation content and the data contained therein, however, this conversation will not be linked to the User’s account on the Facebook portal.
  • Video materials hosted on YouTube are published on the Website. For all these videos, the “extended data protection mode” is used, which means that no data about you as users is transmitted to YouTube unless you play the videos. Only when the video is played are the data listed in paragraph 4 transmitted. We have no influence on this kind of data transmission.
  • In the event of a visit to the Website and playback of a given video material hosted on the YouTube portal, the YouTube service receives information that you have opened the given video material on the Website, which involves the transmission of personal data to YouTube. This happens regardless of whether YouTube provides a User account through which you are logged in, or if there is no User account. If you are logged into Google (and consequently also into the YouTube portal), your data is assigned directly to your account. If you do not wish to be assigned to your YouTube profile, you must log out before playing the video material. YouTube saves your data as user profiles and uses it for advertising purposes, market research, and to design its website according to demand. Such analysis is carried out primarily (also for unlogged users) in order to present advertisements tailored to the demand, as well as to inform other social network users about your activities on our website. You have the right to object to the creation of such user profiles, however, to exercise this right you must contact YouTube.
  • More information regarding the purpose and scope of data collection and processing by YouTube can be obtained from the privacy policy statement. There you will also receive further information regarding your rights and the possibilities of making settings to protect your privacy sphere: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and complies with the EU-US-Privacy-Shield agreement, www.privacyshield.gov/EU-US-Framework.
COOKIES AND SIMILAR TECHNOLOGY Cookies are small text files installed on the device of a User browsing the Website. Cookies collect information that makes it easier to use the website – e.g., by remembering the User’s visits to the Website and actions taken by them.
  • “SERVICE” COOKIES
  • The Controller uses so-called service cookies primarily to provide the User with services provided electronically and to improve the quality of these services. In connection with this, the Controller and other entities providing analytical and statistical services on its behalf use cookies, storing information or accessing information already stored in the User’s telecommunications end device (computer, phone, tablet, etc.). Cookies used for this purpose include:
  • cookies with data entered by the User (session ID) for the duration of a session (user input cookies);
  • authentication cookies used for services that require authentication for the duration of a session (authentication cookies);
  • cookies used to ensure security, e.g., used to detect authentication fraud (user centric security cookies);
  • multimedia player session cookies (e.g., flash player cookies), for the duration of a session (multimedia player session cookies);
  • persistent cookies used to personalize the User’s interface for the duration of a session or slightly longer (user interface customization cookies),
  • cookies used to remember the contents of a shopping cart for the duration of a session (shopping cart cookies);
  • To collect statistics, the Controller uses the Google Analytics product; thus, data regarding the User visiting the Service will be received by Google, 1600 Amphitheatre Parkway Mountain View, CA 94043 United States. Google is certified under the Privacy Shield program. As part of an agreement between the USA and the European Commission, the latter has determined an adequate level of data protection in the case of enterprises holding a Privacy Shield certificate. It is possible to block Google Analytics access to User data after the User installs a plugin in their browser, which can be found at this link: https://tools.google.com/dlpage/gaoptout/. If you are interested in details related to data processing under Google Analytics, we encourage you to read the explanations prepared by Google: https://policies.google.com/privacy?hl=en.
  • “MARKETING” COOKIES
  • The Controller also uses cookies for marketing purposes, including in connection with directing behavioral advertising to Users. For this purpose, the Controller stores information or accesses information already stored in the User’s telecommunications end device (computer, phone, tablet, etc.). The use of cookies and personal data collected through them for marketing purposes requires the User’s consent. This consent can be expressed through appropriate browser configuration, and it can also be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in the browser settings.
  • GOOGLE ADS.
  • The Website uses the Google Ads program.
  • Google Ads is a program by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). As part of Google Ads, the Controller applies so-called conversion tracking. When you click an ad displayed by Google, a conversion tracking cookie is generated. Cookies are small text files saved in the web browser on the user’s computer. Such cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and the Website are informed that the user was redirected to this page after clicking the ad.
  • Every Google Ads client receives a different cookie. Cookies cannot be tracked through the websites of Ads clients. Information collected via a conversion cookie is used to compile conversion statistics for Ads clients who have opted for conversion tracking. Clients receive information about the total number of users who clicked the ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that can personally identify a user. If you do not wish to participate in conversion tracking, you can object to the use of this function. To do this, simply deactivate the Google conversion tracking cookie in your web browser. You will then not be included in the conversion tracking statistics.
  • The storage of the conversion cookie takes place on the basis of Art. 6 sec. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user activity in order to optimize both its website offer and its advertising.
  • More information on Google Ads and Google Conversion Tracking can be found in Google’s privacy policy at: https://www.google.pl/policies/privacy/.
  • You can set your browser to inform you about the generation of cookies and to allow them only on a case-by-case basis, to exclude the acceptance of cookies in certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.