Політика конфіденційності

I. Introduction

This Privacy Policy describes the principles of processing personal data of users using the website Blisko Siebie Aleksandra Paniak (hereinafter: "Website"). We attach great importance to protecting the privacy of users and compliance with applicable laws, including the General Data Protection Regulation (GDPR), the Personal Data Protection Act and other relevant regulations.

II. Personal data administrator

The administrator of personal data is Blisko Siebie Aleksandra Paniak, with its registered office at ul. Nowy Świat 33/13, 00-029 Warsaw, NIP: 5243055073, REGON: 543159852, hereinafter referred to as the "Administrator". In matters related to the protection of personal data, please contact:

• e-mail: aleksandrapaniak@bliskosiebieap.pl
• Phone number: +48 789 782 767
• Correspondence address: ul. Nowy Świat 33/13, 00-029 Warsaw

III. Scope of collected personal data

Through the Website we collect only the data you enter in the contact form yourself, plus the technical data needed for the form to work. The Website does not sell anything, does not take payments and does not create user accounts.

1. Data entered in the form: e-mail address, message content and, if you fill those fields in, your name and the subject of your enquiry.
2. Technical data: IP address, the session identifier protecting the form, the language version of the Website, cookie identifiers and basic browser information.
3. Statistical data: anonymous information about the pages visited, only after consent to analytics cookies.

Please do not describe symptoms, diagnoses or any other health information in the form. What brings you here is for the session itself, not for a message sent over the internet. The same note appears next to the message field.

IV. Purposes of data processing

1. Replying to your enquiry: getting back to you and arranging an appointment.
2. Providing psychological care: consultations, assessment and support, together with the records kept in connection with that care. This applies to people who have arranged an appointment.
3. Website security: protecting the form against abuse and automated mass messaging.
4. Statistics: aggregate traffic analysis to improve the Website, with consent only.
5. Legal obligations: in particular tax settlement and record retention.

We do not carry out direct marketing, we do not send a newsletter and we do not pass data to advertising partners.

V. Legal basis for processing

1. Art. 6(1)(a) GDPR: your consent: handling the contact form enquiry and non-essential cookies.
2. Art. 6(1)(b) GDPR: performance of an agreement for psychological care, or steps taken before entering into it.
3. Art. 6(1)(c) GDPR: obligations arising from law, including tax law.
4. Art. 6(1)(f) GDPR: legitimate interest: protecting the Website and the form against abuse.

VI. Health data and professional confidentiality

Information about mental state and health belongs to the special categories of personal data within the meaning of Article 9 GDPR and is subject to enhanced protection.

If you use consultations, assessment or psychological support, this data is processed on the basis of Article 9(2)(h) GDPR: processing necessary for the purposes of medical diagnosis and the provision of health care, in conjunction with the obligation of professional confidentiality.

A psychologist is bound by professional confidentiality under the Polish Act of 8 June 2001 on the profession of psychologist and the professional self-government of psychologists. Information obtained in the course of practising the profession remains confidential; the exceptions are set out in law and are explained at the first meeting.

Records relating to the care provided are kept only to the extent necessary, stored so that unauthorised persons cannot access them, and are not passed to anyone without your explicit consent, other than in cases arising directly from the law.

VII. Recipients of personal data

1. Hosting and e-mail provider: for the technical storage of the Website and of messages sent through the form.
2. Analytics provider: only after consent to analytics cookies; details in the Cookie Policy.
3. Accountancy office: for settlement documents.
4. Public authorities: only where the obligation to disclose arises from law.

Data is neither sold nor shared for marketing purposes. The content of sessions and the records of psychological care are not shared with any of the above.

VIII. Transfer of data to third countries

In some cases, personal data may be transferred outside the European Economic Area (EEA). In such situations, we ensure that the data is adequately protected, for example by:

1. Use of European Commission decisions establishing an adequate level of protection.
2. Use of standard contractual clauses approved by the European Commission.
3. Other mechanisms as permitted by law.

IX. Data retention period

1. Messages from the form: for as long as needed to reply and, where relevant, arrange an appointment, then deleted unless they have become part of the records.
2. Records of psychological care: for the period required by law and by the rules governing the practice of the profession.
3. Settlement documents: 5 years counted from the end of the calendar year in which the tax payment deadline fell, in accordance with the Polish Tax Ordinance.
4. Data processed on the basis of consent: until it is withdrawn.
5. Technical and statistical data: for the period indicated in the Cookie Policy.

X. Whether providing data is required

Providing data in the contact form is voluntary, but without an e-mail address there is no way to reply. Providing the data necessary for psychological care is a condition of that care being provided.

We do not make automated decisions about users and we do not carry out profiling within the meaning of Article 22 GDPR.

XI. User rights

Every user has the following rights:

1. Right of access: the ability to obtain information about the data being processed.
2. Right to rectification: the ability to have incorrect data corrected.
3. The right to delete data ("right to be forgotten"): in cases provided for by law.
4. Right to restrict processing: the ability to request the restriction of data operations.
5. The right to data portability: obtaining a copy of your data in a structured format.
6. Right to object: the possibility of objecting to the processing of data based on legitimate interest.
7. Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
8. The right to lodge a complaint: to the supervisory authority (e.g. the President of the Personal Data Protection Office).

XII. Cookies

The Website uses cookies and browser local storage to remember your consent decision, to remember your choice of light or dark mode, to protect the contact form and, only after consent, to keep aggregate visit statistics.

A full list of the files used, with names and retention periods, is in the Cookie Policy. We use no advertising cookies and no remarketing.

XIII. Data security

1. The connection to the Website is encrypted with TLS (HTTPS), enforced for all addresses.
2. The form is protected against automated mass messaging: a single-use token, submission limits and a content filter.
3. Mailbox credentials are stored outside the server's public directory.
4. Access to data is restricted to authorised persons.
5. Backups are kept by the hosting provider.

XIV. Changes to the Privacy Policy

The Administrator reserves the right to change this Privacy Policy in the event of changes in legal regulations or data processing methods. The current version of the Privacy Policy will always be available on the Website.

XV. Contact

If you have any questions or concerns regarding the processing of your personal data, please contact us:

• Email address: aleksandrapaniak@bliskosiebieap.pl
• Phone: +48 789 782 767