Privacy policy

Personal data controller

The controller of personal data is Magdalena Rutkowska, conducting business activity under the name PROSTEZĘBY.COM Magdalena Rutkowska with its registered office in Warsaw, ul. Grzybowska 2 lok. 28, 00-131 Warszawa, NIP (Tax ID): 8941862264, REGON: 931057769 (hereinafter: the “Controller” or the “Practice”).

You can contact the Controller as follows:

1. e-mail: kontakt@prostezeby.com,
2. phone: +48 730 730 798,
3. the contact form available at https://prostezeby.com/contact/.

Categories of personal data processed

In running the Practice, we process the following categories of personal data:

• health data (e.g. X-ray imaging, referrals, e-prescriptions, test results, medical opinions, course of treatment);
• identification data (e.g. full name, PESEL number);
• contact data (e.g. e-mail address, phone number);
• address data (e.g. home address);
• billing and accounting data (e.g. number and date of issue of an accounting document (invoice, receipt), Tax ID – if applicable);
• communication data (e.g. content of correspondence);
• technical data (e.g. IP address, device data, cookies);
• image (e.g. photo, recording).

In accordance with applicable law, the Controller is obliged to keep and store medical records, which contain, among other things, identification data and health data.

Purposes and legal bases for storing personal data

Personal data processing period

Personal data processed by the Controller are stored for the period necessary to achieve the purposes for which they were collected, and then for the time required by law or until any claims become time-barred.

In practice, this means that:

• data needed to book visits and provide dental services, i.e. to perform the contract, are stored for the time necessary to provide the services rendered by the Controller and, after that, for the period required by law or needed for any complaints and for pursuing or defending against claims;
• data contained in medical records are stored for a period of 20 years, counting from the end of the calendar year in which the last entry was made. Exceptions to this period result from Art. 29(1) of the Act of 6 November 2008 on Patient Rights and the Patient Ombudsman;
• data needed to issue and store accounting documents (e.g. invoices, receipts and data for tax settlements) are stored for the time required by tax and accounting regulations;
• data processed on the basis of your consent are stored until you withdraw your consent;
• data processed in our legitimate interest are stored until you raise an effective objection or until the data are no longer needed.

Sources of personal data

We obtain personal data:

• directly from you (e.g. when booking a visit, taking a medical history, contacting us);
• automatically when you use the website prostezeby.com (IP address, device data, cookies, activity on the website).

Recipients of personal data

In connection with running the Practice, your personal data may be transferred to the following categories of recipients:

• platform providers – to the extent necessary to maintain and ensure the proper operation of the website prostezeby.com, including hosting, IT infrastructure and technical support;
• accounting firms and bookkeeping offices – to the extent necessary to fulfil tax and accounting obligations;
• electronic payment operators (e.g. Przelewy24, PayU, Tpay, BLIK) – to handle payments for services provided by the Controller;
• IT service and technical support providers – for the maintenance, administration and security of IT systems;
• mailing system providers – where e-mail communication is carried out;
• employees or associates of the Controller – persons practising a medical profession who cooperate with the Controller, to the extent necessary to provide the Controller’s services;
• operators of portals such as ZnanyLekarz.pl – for purposes including handling visit bookings and contact with patients;
• entities authorised to receive data under the law – in particular public authorities (e.g. ZUS), if such an obligation results from the law.

Processing of data outside the European Economic Area

Your personal data are not transferred outside the European Economic Area.

Rights regarding personal data

You have rights to your personal data. Here is what you can do:

1. Access to data – you can ask us to show you what data we process about you and for what purpose.
2. Rectification of data – you can correct data that are incorrect or incomplete.
3. Erasure of data – you can request the erasure of data if they are no longer needed for the purposes for which we collect them, or if you withdraw your consent.
4. Restriction of processing – you can ask us to temporarily restrict the processing of your data, e.g. when you contest their accuracy.
5. Right to data portability – you can receive your data in electronic format and transfer them to another controller.
6. Objection to processing – you can object to the processing of your data.
7. Withdrawal of consent – if you have consented to the processing of your data, you can withdraw your consent at any time.
8. Complaint to the supervisory authority – if you believe that your data are being processed unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office

To exercise the above rights, contact us at kontakt@prostezeby.com or by post at the Controller’s address for service: ul. Nowoursynowska 178B/, 02-787 Warszawa

Automated decision-making (profiling)

The Controller will not use personal data for automated decision-making (profiling).

Social media

We run profiles of the Practice on social networks, i.e. Facebook and Instagram. The rules for processing the personal data of social network users are set out in the network’s terms of service and privacy policy. We do not have access to all data processed by Facebook and Instagram.

If you follow our profile or interact with us (e.g. through likes, comments or private messages), we process the data you share as part of these activities and the data provided to us by Facebook and Instagram in accordance with your individual social media account settings.

Use of cookies

Cookies are small text files saved on the user’s device when using the website www.prostezeby.com. Cookies enable the website to work properly, increase its functionality and allow traffic analysis and marketing activities.

Cookies:

• are saved in the memory of the user’s device;
• do not change the device configuration;
• can be deleted or blocked by you in your browser settings.

We use cookies for the following purposes:

• essential cookies needed for the website prostezeby.com to work may be used without the user’s consent (Art. 6(1)(f) GDPR – legitimate interest of the controller);
• analytical, marketing and functional cookies require the user’s consent (Art. 6(1)(a) GDPR).

Use of cookies

Consent to cookies is collected via the cookie banner displayed on the first visit to the website www.prostezeby.com. You can withdraw it at any time.

Cookies used on the website www.prostezeby.com are stored:

• session cookies – until the browser is closed;
• persistent cookies – no longer than 1 year from the creation of the cookie.

You can manage cookies yourself through your browser settings. In particular, you can:

• delete saved cookies;
• block cookies;
• restrict their operation;
• withdraw consent to non-essential cookies;

Instructions on managing cookies are available on the browsers’ help pages:

• Firefox;
• Chrome;
• Safari;
• Microsoft Edge / Internet Explorer.

Disabling or restricting cookies may affect some features of the website www.prostezeby.com.

External tools that also use cookies may be used on the website www.prostezeby.com, such as:

• advertising systems (e.g. Google Ads, Meta Ads);
• social plugins (e.g. Facebook, Instagram),

Each of these providers may use its own cookies in accordance with its privacy policy.

On the first visit to the website www.prostezeby.com, the user is given the option to:

• accept all cookies;
• reject non-essential cookies;
• customise cookie settings.

Consent may be withdrawn at any time through the browser settings or the consent management tool.

Final provisions

1. The Controller reserves the right to make changes to the Privacy Policy.
2. The current version of the Privacy Policy is always available at https://prostezeby.com/privacy-policy/.
3. In matters not covered by this Policy, the applicable provisions of law shall apply.