This document is a privacy policy used by Natasza Nowak operating under the name TOP – MEDICS POLAND NATASZA NOWAK based in Warsaw. The privacy policy contains information about the data administrator, the grounds, and purposes of data processing by the administrator and the rights of the person from whom personal data is collected and specifies the scope of cookies used.
Definitions used in the Privacy Policy:
– Data Administrator / Website Administrator – it means Natasza Nowak operating under the name TOP – MEDICS POLAND NATASZA NOWAK with its registered office at Adama Mickiewicza street, No. 37, office 58, 01-625 Warsaw,
– Website User – a person visiting the website www.topmedicspoland.com,
– Client – a person using the services of Natasza Nowak operating under the name TOP – MEDICS POLAND NATASZA NOWAK based in Warsaw.
§1
Information about the data controller
- The administrator of clients’ personal data is TOP – MEDICS POLAND NATASZA NOWAK with its seat at Adama Mickiewicza street, No. 37, office 58, 01-625 Warsaw.
- Contact at the following e-mail address: contact@topmedicspoland.com.
- Customers’ personal data will be processed for the purpose for which they were provided. The data controller processes personal data for the following purposes:
– prepare and send the offer, based on the information provided by the user/customer in the survey, according to art. 6 sec. 1 let. b of the GDPR,
– advice and consultation in the selection of a medical entity and appointment of a consultation / medical treatment date, based on data of a specific category provided by the user/client, based on consent – art. 9 sec. 2 let. a of the GDPR,
– performance of the concluded contract, according to art. 6 sec. 1 let. b of the GDPR,
– conducting settlements with customers and issuing an invoice/receipt for the services provided according to art. 6 sec. 1 let. c of the GDPR,
– responding to user inquiries via the contact form, according to art. 6 sec. 1 let. b of the GDPR,
– conducting e-mail correspondence and making contact by phone, including answering inquiries, providing information about the offer, accepting and handling orders according to art. 6 sec. 1 let. b of the GDPR,
– administrative services related to the provision of services, user/customer service, complaint handling, e.g., contact by phone / SMS / e-mail, to confirm/cancel dates of visits, consultations, providing information, etc. according to art. 6 sec. 1 let. b and f of the GDPR,
– conducting direct marketing of own services via telephone and e-mail, based on the consent granted, according to art. 6 sec. 1 let. a of the GDPR,
– operating the fan page on the Facebook portal and application, including answering inquiries, providing information about the offer, responding to comments, etc. – according to art. 6 sec. 1 let. f of the GDPR – implementation of the legitimate interests of the data controller,
– conducting communication with customers with the help of Messenger on the Facebook portal and application, including answering inquiries, providing information about the offer, accepting and handling orders according to art. 6 sec. 1 let. b of the GDPR,
– handling the account on the Instagram portal and application, including answering inquiries, providing information about the offer, responding to comments, etc. – according to art. 6 sec. 1 let. f of the GDPR – implementation of the legitimate interests of the data controller,
– handling the account on the YouTube portal and application, including answering inquiries, providing information about the offer, responding to comments, etc. – according to art. 6 sec. 1 let. f of the GDPR – implementation of the legitimate interests of the data controller,
– sending the user/customer a newsletter, according to art. 6 sec. 1 let. a of the GDPR, based on the consent granted,
– investigating or establishing claims or defending against them, and the basis for processing is the legitimate interest of the Administrator by the provisions of art. 6 sec. 1 let. f of the GDPR, in connection with the protection of its rights,
– for analytical purposes, using cookies to analyze data collected automatically when using the website, according to art. 6 sec. 1 let. f of the GDPR – implementation of the legitimate interests of the data controller.
- The administrator uses clients’ personal data for the purpose of direct marketing of their own services. The client may object to the processing of their personal data for the purposes described in the previous sentence.
- In the event of consent to the processing of personal data, they will be processed based on art. 6 sec. 1 let. a of the GDPR and art. 9 sec. 2 let. a of the GDPR. If personal data is processed based on consent, the person who gave the consent has the right to withdraw it. Withdrawal of consent does not affect the lawfulness of the processing which was carried out based on consent before its withdrawal.
- The recipient of the clients’ personal data will be entities with services used by the administrator (e.g., hosting provider, accounting services) and medical entities cooperating with the data administrator, as well as entities authorized to obtain personal data based on legal provisions (e.g., public authorities, Tax Office, ZUS).
- Unless the law provides otherwise, the Administrator processes the provided personal data for the time necessary to achieve the purposes for which the data was provided to them and:
– until the claims are time-barred, in accordance with the deadlines resulting from the provisions of the Code of Civil Procedure,
– for the period required by the provisions of the tax law and the Accounting Act (5 years from the end of the calendar year in which the tax payment deadline expired),
– until the objection is effectively raised – in relation to personal data processed based on the legitimate interest of the data controller (art. 6 sec.1 let. f of the GDPR),
– until the consent to the processing of personal data is withdrawn or the purposes of processing are achieved.
- The customer has the right to access their personal data, the right to rectify them, the right to request their removal, the right to request processing restrictions, the right to object to their processing.
- The customer has the right to complain to the President of the Personal Data Protection Office if their data will be processed contrary to the provisions of the GDPR.
- The data controller does not make automated decisions, including those based on profiling. The content of the inquiry, which is sent via the contact form and the information provided in the questionnaires, is not subject to evaluation by the IT system. The proposed price and scope of services are not the result of an assessment made by any IT system.
- Providing personal data by the Customer is voluntary, but necessary to achieve the purpose for which the data was provided, including to use the services offered by the data administrator (e.g., correspondence, send an offer, conclude a contract).
§2
Information about cookies
- The website does not automatically collect any information, except for the information contained in cookies and data voluntarily provided by the Website User via the contact form.
- Cookie files (so-called “cookies”) are IT data, in particular text files, which are stored on the Website User’s end device and are intended for using the Website’s pages. Cookies usually contain the name of the website they come from, the storage time on the end device and a given, usually unique value.
- The Website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User’s end device until logging out, leaving the website, or turning off the software (web browser). Persistent cookies are stored on the User’s end device for the time specified in the cookie file parameters or until they are deleted by the User.
- The entity that places cookies on the Website User’s end device and accesses them is the Website Administrator and the administrators of Partner Entities (without the right to access the Administrator’s cookies).
- The Website Administrator uses the following cookies:
a) own cookies – posted by the Website Administrator to: adjust the content of the Website pages to the User’s preferences, remember user preferences, control and authorize access to certain parts of the website, and optimize the use of websites; in particular, these files allow to recognize the device of the Website User and properly display the website, tailored to his individual needs,
b) external cookies – placed by Partner Entities to:
– collect general and anonymous static data via Google Analytics analytical tools [cookie administrator: Google Inc., based in the USA],
– establish a connection by the user with the social networking site Facebook, by using a plugin for the social networking site Facebook (provided by Facebook Inc.).
– establish a connection by the user with the Instagram social network by using a plugin for the Instagram social network (provided by Facebook Inc.),
– establish a connection by the user with the YouTube social network by using a plugin for the YouTube social network (provided by Alphabet Inc.).
- In many cases, the software used for browsing websites (web browser) allows cookies to be stored on the User’s end device by default. The Website Users can change the terms of use of cookies at any time. These settings can be changed in such a way as to block the automatic handling of cookies in the web browser settings or to inform about their every posting on the Website User’s device.
- Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.
- The Website operator informs that restricting or disabling cookies may affect some of the functionalities available on individual pages of the Website or completely prevent the use of the Website.
- More information on cookie files is available at the following address: wszystociasteczkach.pl or in the “Help” section in the menu of the User’s browser/web application.