Privacy policy

This policy explains what information about you the drsawicki.pl website collects, including personal data and cookies, and what happens to it.

01 · General information

1. This policy applies to the drsawicki.pl website (the Website).
2. The controller of your personal data is Paweł Sawicki, running a business at ul. Żwirki i Wigury 14A, 06-300 Przasnysz, Poland, NIP (tax ID) 7611551193, REGON 363127736 (the Controller).
3. For matters concerning personal data, you can contact us by post at the Controller’s address given above.
4. The Website collects information in two ways:
   • data you enter yourself in forms;
   • cookies and technical data recorded automatically (sections 06–08).

02 · Purposes and legal bases of processing

Providing data is voluntary, but without contact details we cannot respond to your request. We do not make automated decisions about you and do not profile you.

03 · How we protect data

1. The connection to the Website and form submissions are encrypted (SSL certificate).
2. The Website is static — there are no user accounts, passwords or databases on the Website’s server.
3. Only persons authorised by the Controller have access to form submissions.
4. The software and services used by the Website are updated regularly.

04 · Who we share data with

Data may be shared only with recipients needed for the purposes described above:

1. the dental clinic selected in the form where the Controller sees patients — to arrange an appointment;
2. technical service providers acting on the Controller’s behalf: website hosting, form and email handling and — with your consent — visit statistics;
3. the provider of Google Analytics and Google Maps — only after you give consent (section 08);
4. public authorities, where required by law.

We do not sell data and do not use it for advertising.

Some technical service providers process data outside the European Economic Area. In that case the transfer is based on a European Commission adequacy decision or standard contractual clauses (Art. 45–46 GDPR). You can obtain a copy of the safeguards on request.

05 · How long we keep data

1. Form data: until your request has been handled, no longer than 12 months from the last contact. If you become a patient, further data is kept in the clinic’s medical records in line with the rules on medical documentation.
2. Google Analytics statistics: up to 14 months.
3. Server logs: for the short period needed to keep the Website secure.

06 · Information in forms

1. Forms on the Website collect only the data you provide — depending on the form: your name, phone number, email address, the chosen clinic and, in some forms, a message.
2. When you submit a form, connection details (date and time, IP address) may be recorded to protect the form against spam.
3. We use form data only for the purpose stated in the form (e.g. arranging a consultation, registering for a course).
4. Please do not include information about your health in forms — we will discuss it during the consultation.

07 · Logs and statistics

1. The Website’s server automatically records basic technical data (IP address, browser type, time of visit). It is used only to keep the Website secure and to administer it.
2. If you consent to statistics, we use a tool for aggregate visit statistics that does not store cookies on your device and does not identify individuals.
3. With your consent we also use Google Analytics (Google). It collects information about how the Website is used by means of cookies. We do not pass form data to Google.

08 · Cookies

1. Cookies are small text files stored in your browser. They can be session cookies (deleted when you close the browser) or persistent cookies (kept for a set period or until you delete them).
2. Without your consent the Website stores only one necessary cookie: it remembers your cookie choice (for 6 months).
3. With your consent we use cookies for two purposes:

   Category	Purpose	Provider	Duration
   Statistics	website traffic analysis (Google Analytics)	Google	up to 2 years
   Maps	displaying directions maps to the clinics (Google Maps)	Google	per Google’s rules

4. Google may process data outside the EEA under the EU-US Data Privacy Framework.
5. Refusing consent does not limit your use of the Website — the map can also be opened via a link to Google Maps.

09 · How to change or withdraw cookie consent

1. At any time, click “Cookie settings” in the Website footer. Withdrawing consent does not affect the lawfulness of processing before it was withdrawn.
2. You can also delete or block cookies in your browser settings. Instructions:
   • Chrome: https://support.google.com/chrome/answer/95647?hl=en
   • Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
   • Safari (macOS): https://support.apple.com/en-us/guide/safari/sfri11471/mac
   • Safari (iOS): https://support.apple.com/en-us/105082
   • Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

10 · Your rights

1. You have the right to:
   • access your data,
   • have it rectified,
   • have it erased,
   • restrict processing,
   • data portability,
   • object to processing based on legitimate interest,
   • withdraw consent at any time.
2. To exercise these rights, contact the Controller (section 01).
3. You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

11 · Changes to this policy

When we change how data is processed or the tools used on the Website, we will update this policy and the date at the top of the page.