Privacy policy

This is an English translation provided for information. The binding version is the Polish privacy policy.

Who the controller is

The data controller is Jakub Suski, ul. Władysława Orkana 23, 34-424 Szaflary, NIP (tax ID) 7352799098, who runs the Podologiczni clinics at: ul. Władysława Orkana 23, 34-424 Szaflary and ul. Nowotarska 25, 34-500 Zakopane. Contact in data matters: recepcja@podologiczni.pl, phone +48 881 952 783.

This website

The website is static. We do not set cookies, we do not profile you and we do not embed tracking tools from other companies. The only data we collect through the website is what you type into the recruitment form or the voucher purchase form yourself.

We count visits to know which pages are read and where patients come to us from. This is done by Umami, running on our own server — without cookies and without storing your IP address; we collect only aggregate data: pages visited, the page you came from, country, type of device and browser, and clicks on the booking and phone buttons. We do not link it to your identity and we do not share it with anyone. If “Do Not Track” is switched on in your browser, the visit is not counted at all.

Buying a voucher through the website

When you buy a voucher, you give your first and last name and email address and, if you wish, names and a dedication to be printed on the voucher. We use them to perform the sales contract: to take the payment, issue the voucher and send it to the address given (Article 6(1)(b) GDPR), and to meet our tax and accounting obligations (Article 6(1)(c) GDPR). We keep them for as long as tax law requires.

Payments are handled by Tpay (Krajowy Integrator Płatności S.A.), to which we pass your first and last name, email address and the amount — Tpay collects the data needed for the payment itself. The form uses no cookies and no scripts from other companies; you go to the Tpay site only after clicking the button that takes you to the payment. We do not use your address to send offers.

Recruitment form

Data from the form — name, contact details and the CV you send — goes to our internal system and is used only for the recruitment in question. The legal basis is Article 6(1)(b) and (f) GDPR and, if you consent to future recruitment, additionally Article 6(1)(a).

We delete it three months after the application arrives — or twelve months if you consent to taking part in future recruitment. You can withdraw your consent at any time by writing to the address above; withdrawing is as easy as giving it.

Visits to the clinic

If you are our patient, we process the data needed to keep treatment records. Their scope, legal basis and retention period are described in the information notice you receive at your first visit. Consents to photographs and to being contacted are separate, and each can be withdrawn independently of the others.

Bookings

We manage appointments in Booksy. When you book through Booksy, you also give your data to that provider, on the terms set out in its own terms of service. You can call reception instead.

Your rights

• access to your data and a copy of your records (Article 15)
• rectification (Article 16)
• erasure, to the extent we are not required to keep the data (Article 17)
• restriction of processing (Article 18)
• data portability (Article 20)
• objection (Article 21)
• withdrawal of consent at any time (Article 7(3))

We deal with a request within one month. If the matter is complex, this may be extended — in that case we will tell you, together with the reason. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), the Polish supervisory authority.

Security

Records are kept in a system with access control: every opening of a patient file is logged, and entries cannot be changed or deleted. Photographs are visible only to the department that took them and to the administrator. Data is stored on a server in Poland.