§1. General Information

1. The Administrator of personal data is Hanna Strzałkowska, conducting business activity under the name Psychoterapia Ucieleśniona Hanna Strzałkowska, NIP 6572590632, REGON 260440625, with its registered office at ul. Szymanowskiego 7/6, 03-477 Warsaw.

2. The Administrator can be contacted by e-mail: kontakt@psychoterapiaucielesniona.pl, telephone: +48 692-172-973.

3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”).

§2. What data do I process?

1. When booking an appointment, the following data is collected:

• first name and last name,

• e-mail address,

• phone number,

• data necessary for issuing an invoice (upon Client’s request),

• payment details (via PayU).

2. Providing this data is voluntary but necessary to book an appointment.

3. When using the contact form, the following data is collected:

• first name and last name,

• e-mail address,

• message content.

§3. Purposes and legal bases for data processing

1. Personal data related to appointment booking are processed for the following purposes:

• making bookings and providing psychotherapy services (Art. 6(1)(b) GDPR),

• processing payments and accounting settlements (Art. 6(1)(c) GDPR),

• handling inquiries and complaints (Art. 6(1)(b) and (f) GDPR),

• fulfilling legal obligations of the Administrator (e.g. tax obligations) (Art. 6(1)(c) GDPR).

2. Personal data is not used for marketing purposes unless the Client gives separate consent.

3. Data provided via the contact form is processed solely to respond to the inquiry (Art. 6(1)(f) GDPR – legitimate interest of the Controller consisting in communication with the website user).

§4. Data sharing

1. Data may be shared only with:

• the provider of the Bookero booking system,

• the payment operator PayU S.A.,

• the accounting office serving the Administrator,

• entities authorized under the law.

2. Data is not transferred to third countries (outside the EEA) or international organizations.

§5. Data retention period

1. Data related to booking and provision of services is stored for 5 years (in accordance with tax obligations).

2. Clients’ contact details are stored for the period necessary to handle the appointment and possible complaints.

3. After these periods, data is deleted or anonymized.

4. Data from the contact form is stored no longer than 12 months after the correspondence ends and then deleted.

§6. Rights of data subjects

Each Client has the following rights under the GDPR:

• the right to access their personal data,

• the right to rectify data,

• the right to erase data (“right to be forgotten”) if no grounds for further processing exist,

• the right to restrict processing,

• the right to data portability,

• the right to object to processing,

• the right to lodge a complaint with the President of the Personal Data Protection Office.

§7. Cookies

1. The website uses cookies to ensure the proper functioning of the booking calendar and to analyze website traffic.

2. The user may change browser settings regarding cookies at any time.

3. Restricting cookies may affect some website features.

§8. Data security

1. The Administrator applies appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or disclosure.

2. Access to data is granted only to authorized persons bound by confidentiality.

§9. Changes to the privacy policy

1. The Administrator reserves the right to amend this policy if required by law or due to changes in the functioning of the website.

2. The current version of the privacy policy is always available at https://psychoterapiaucielesniona.pl.