Consent Statement
I consent to the processing of my personal data obtained via “cookies” by the Dental Physiotherapy Clinic Piotr Kazana, located at ul. Friedleina 6/2, 30-009 Kraków, Poland. Providing consent is voluntary but necessary to use the website. I acknowledge that I may withdraw my consent at any time. Withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal.

Information Obligations
The controller of your personal data is Dental Physiotherapy Clinic Piotr Kazana, located at ul. Friedleina 6/2, 30-009 Kraków, Poland, Tax ID (NIP): 5090038545.
Contact email: kontakt@piotrkazana.pl

Personal data is processed based on your consent. Consent is voluntary, but necessary for the purposes described in this document. If consent is not granted, or is later withdrawn or modified, you will no longer be able to receive marketing communications and commercial offers at the email address you provided.

The following categories of recipients may access your personal data: authorized employees and representatives of the controller, as well as entities processing data under data processing agreements.

The company does not intend to transfer personal data to third countries or international organizations.

Personal data will be processed until consent is withdrawn. If consent is withdrawn, the personal data will be permanently deleted. However, the controller may retain a limited portion of your data to demonstrate compliance with applicable regulations.

Your Rights
As a data subject, you have the right to:
a) Access your personal data – you are entitled to receive confirmation of whether your personal data is being processed and, if so, to access that data. A copy of your personal data will be provided upon request. A reasonable fee may be charged for additional copies.

b) Rectify your personal data – you have the right to request correction of inaccurate or incomplete data.

c) Delete your personal data (“right to be forgotten”) – you may request the immediate erasure of your data where legally applicable.

d) Restrict processing – your data may be limited to specific purposes upon your request.

e) Data portability – under certain conditions, you have the right to receive your data in a structured, commonly used format and transmit it to another controller.

f) Object to processing – you may object to the processing of your personal data on grounds related to your particular situation.

g) Withdraw consent at any time – without affecting the lawfulness of processing based on consent before its withdrawal.

All rights can be exercised by contacting the Data Controller via the provided email address.

You also have the right to file a complaint with the President of the Personal Data Protection Office (PUODO) if you believe your data is being processed unlawfully.

 

Automated Decision-Making

Your personal data will not be used as the basis for automated decision-making.

 

Data Protection Measures
The controller and data processors implement appropriate technological, physical, administrative, and procedural safeguards in accordance with market standards to ensure confidentiality, integrity, and availability of personal data, and to protect it from unauthorized use, access, or data breaches.

 

Personal data may be disclosed to competent authorities if required by applicable law.

 

Data Retention Periods
Limitation periods: Data may be retained for the duration of the limitation period for potential claims, if necessary for legal defense or enforcement by the controller.

 

Event registration: If data is collected for event registration (Art. 6(1)(a) GDPR), it will be stored from the time of consent until the event takes place.

 

Legal obligations/public interest: Data collected to fulfill legal obligations or tasks in the public interest (Art. 6(1)(c) and (e) GDPR) will be stored for the duration of those tasks or obligations.

Legitimate interest: If data is processed under legitimate interests (Art. 6(1)(f) GDPR), it will be stored no longer than 5 years after termination of the contract or until an objection is raised.

Marketing purposes: For data collected based on consent or legitimate interest (Art. 6(1)(a) or (f) GDPR), data will be stored from the moment of consent until its withdrawal or until an objection is recorded.

 

Outside of these cases, data may be stored during periods of restricted processing upon user request or the request of a supervisory authority, as provided under Articles 18 and 58 of the GDPR.