Cookiebeleid

I. Introduction

This Cookie Policy explains what cookies are, how they are used on the Blisko Siebie Aleksandra Paniak website (hereinafter referred to as the "Website"), exactly which files we use, how to manage them and what rights users have in this regard.

Cookies other than strictly necessary ones are stored only after you give consent in the banner shown on your first visit. Using the Website does not by itself constitute consent. Until consent is given, analytics and marketing tools run in a restricted mode (Google Consent Mode v2) and store no identifiers on your device.

Legal basis: Regulation (EU) 2016/679 (GDPR) and the Polish Act of 12 July 2024 on Electronic Communications Law, in force since 10 November 2024, which replaced the Telecommunications Law.

II. What are cookies and similar technologies?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you use the Website.

The Website also uses browser local storage (localStorage). It works much like cookies (the data stays on your device), but unlike cookies it is not sent to the server with every request. Local storage entries are listed below alongside cookies.

III. Purposes

1. Strictly necessary: remembering your consent decision, remembering your choice of light or dark mode, and protecting the contact form against abuse (CSRF token). The Website cannot work correctly without them, so they do not require consent.
2. Analytics: aggregate visit statistics: number of visits, most viewed pages, traffic sources. Used solely to improve the Website.
3. Marketing: measuring advertising performance and remarketing. Activated only after consent to this category.

The Website does not carry out profiling within the meaning of Article 22 GDPR and does not make automated decisions producing legal effects concerning users.

IV. List of cookies and local storage entries used

Name	Type	Provider	Category	Purpose	Retention
bsap-zgoda-cookies	local storage	Blisko Siebie	strictly necessary	records your consent decision for each category	12 months
bsap-theme	local storage	Blisko Siebie	strictly necessary	remembers your choice of light or dark mode	until deleted by the user
PHPSESSID	cookie	Blisko Siebie	strictly necessary	session identifier holding the token that protects the contact form (CSRF); set only when the form is opened	until the browser is closed
_ga	cookie	Google (Google Analytics 4)	analytics	distinguishes individual browsers for statistical purposes	2 years
_ga_0SP518S7EX	cookie	Google (Google Analytics 4)	analytics	maintains session state for this specific data stream	2 years
_fbp	cookie	Meta Platforms Ireland Limited	marketing	identifies the browser in order to measure advertising performance	3 months
_fbc	cookie	Meta Platforms Ireland Limited	marketing	records the advertisement click that led to the Website	3 months

Analytics files are stored only after consent to that category.

The Website runs the Meta pixel (identifier 1514181113362674), supplied by Meta Platforms Ireland Limited. The pixel script is fetched only after consent to the marketing category, which is separate from analytics consent. Without that consent the browser does not contact Meta's servers at all and stores no file of that category.

Separating the two consents is deliberate. The pixel can recognise the same person on other websites and across Meta's services, and visiting the site of a psychology practice may indicate data concerning health within the meaning of Article 9(1) GDPR. You may withdraw marketing consent at any time in the cookie settings; withdrawal does not affect the lawfulness of processing carried out beforehand (Article 7(3) GDPR).

V. Recipients and transfers outside the EEA

1. Google Ireland Limited: Google Analytics 4 and Google Tag Manager.
2. Meta Platforms Ireland Limited: the Meta pixel (only after marketing consent).
3. Hostinger International Ltd.: Website hosting (infrastructure provider; sets no cookies of its own on the Website).

Google and Meta may transfer data to the United States. Both companies appear on the EU–U.S. Data Privacy Framework list. The company is certified under the EU–U.S. Data Privacy Framework, recognised by the European Commission's adequacy decision of 10 July 2023 as providing an adequate level of protection (Article 45 GDPR). If you do not consent to the analytics category, no such transfer takes place.

VI. How to manage cookies

1. The banner and the "Cookie settings" button in the footer
   When you first visit the Website, a banner is displayed that allows you to:
   
   • Accept all cookies.
   • Reject all non-essential cookies, in a single click, exactly as easily as accepting them.
   • Choose individual categories. Non-essential categories are switched off by default.
   You can change your decision at any time using the "Cookie settings" button in the Website footer, which reopens the same banner with your previously saved choices.
2. Browser settings
   You can manage cookies using your web browser settings:
   
   • Google Chrome: Link to instructions
   • Mozilla Firefox: Link to instructions
   • Microsoft Edge: Link to instructions
   • Safari: Link to instructions
   Browser settings allow you to block cookies, delete files already saved or inform about their installation.
3. Withdrawal of consent
   If you have previously accepted cookies, you may withdraw your consent at any time using the tools available on the Site or by changing your browser settings.

VII. Retention

Retention periods for individual files are given in the list in section IV. In addition:

• Consent expires after 12 months: after that the banner is shown again and asks for a fresh decision.
• A change in the set of cookies used invalidates any earlier consent and likewise triggers a fresh request.
• Withdrawing consent takes effect for the future. Files stored earlier can be removed in your browser settings (section VI).

VIII. Consequences of refusing consent

Refusing the analytics and marketing categories does not restrict your use of the Website in any way: all content, subpages and the contact form work exactly the same. You will not see interest-based advertising, and your visit will not be counted in the statistics.

Blocking all cookies and local storage in your browser has a broader effect: the Website will not remember your choice of light or dark mode, it will ask about consent on every visit, and submitting the contact form may be rejected, because the security token cannot then be passed.

IX. Changes to the Cookie Policy

The Administrator reserves the right to change this Cookie Policy in the event of the introduction of new functions, technological or regulatory changes. The current version of the Policy will always be available on the Website.

X. Contact

If you have any questions regarding the use of cookies, please contact us:

• Email address: aleksandrapaniak@bliskosiebieap.pl
• Phone: +48 789 782 767