Privacy Policy

Since May 25, 2018, the Regulation (EU) 2016/679 of the European Parliament and of the Council (commonly known as “GDPR”) has been in effect. GDPR applies uniformly across all European Union member states.

What is Personal Data

Personal data, according to GDPR, refers to information about an identified or identifiable natural person. When using our services, such data includes: name, surname, address, PESEL number, health data, phone number, or email address.

Providing personal data is voluntary but may be necessary for the provision of services.

Basis and Purpose of Processing

1. Contract (Art. 6(1)(b) GDPR): when necessary for concluding or performing a contract, e.g., booking a stay, patient identification, ensuring treatments.
2. Legal obligation (Art. 6(1)(c) GDPR): e.g., issuing invoices, maintaining medical records.
3. Legitimate interest (Art. 6(1)(f) GDPR): e.g., ensuring security, responding to complaints.
4. Consent (Art. 6(1)(a) GDPR): e.g., marketing activities. Consent may be withdrawn at any time.