Privacy Policy

1. GENERAL PROVISIONS

1. The administrator of personal data collected through the website is Dominik Boligłowa plastic surgeon, with its registered office in Kraków at Krakowska 39 Street, registered under the tax identification number NIP: 6772334000, REGON: 382022770, hereinafter referred to as the "Administrator".
2. Contact with the Administrator regarding personal data protection matters is possible via e-mail at: kontakt@dominikboliglowa.com.
3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 24 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as GDPR.
4. The Administrator exercises special care to protect the interests of data subjects and, in particular, ensures that the data collected is processed lawfully.

2. PURPOSE AND LEGAL BASIS OF DATA PROCESSING

The website contains exclusively a contact form. The personal data of users (such as: name, surname, e-mail address, telephone number, and any other information voluntarily entered into the message content) is processed for the following purposes:

1. Handling correspondence and responding to the submitted inquiry – the legal basis for processing is the legitimate interest of the Administrator consisting in building and maintaining relationships with users/patients and answering their questions (Art. 6(1)(f) GDPR) or taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
2. Establishment, exercise, or defense of potential claims – the legal basis is the legitimate interest of the Administrator consisting in protecting their rights (Art. 6(1)(f) GDPR).

3. PERIOD OF PERSONAL DATA STORAGE

Users' personal data will be stored for a period:

1. Necessary to handle the submitted inquiry and complete communication with the user.
2. Until an objection is raised by the user – in cases where the processing is based on the legitimate interest of the Administrator.
3. After this time, the data may be stored for the period of limitation of potential claims provided for by law.

4. DATA RECIPIENTS

Users' personal data may be transferred only to trusted third-party entities that support the operation of the website on the basis of data processing agreements (so-called Processors). These include:

1. The hosting/server service provider where the website and the Administrator's mailbox are maintained.
2. IT tool providers operating the contact form system. Data is not transferred to third countries (outside the European Economic Area) nor is it subject to automated decision-making processes, including profiling.

5. RIGHTS OF DATA SUBJECTS

Every person whose data is processed has the right to:

1. Access their personal data and receive a copy of it.
2. Rectify (correct) data if it is incorrect or outdated.
3. Erase data ("the right to be forgotten") if there are no legal grounds for its further processing.
4. Restrict the processing of data.
5. Object to data processing based on the legitimate interest of the Administrator.
6. Lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office (UODO, 2 Stawki Street, 00-193 Warsaw, Poland), if the user considers that the processing of their data violates the provisions of the GDPR.

In order to exercise your rights, please contact the Administrator at the e-mail address specified in point 1.2.

6. COOKIES

1. The website uses technical cookies which are necessary for the proper display and operation of the site, as well as the secure submission of the contact form.
2. These files are not used for tracking the user, or for marketing or analytical purposes.
3. The user can change the settings regarding cookies directly in their web browser at any time (completely block or delete them), however, this may affect the proper functionality of certain features of the website (e.g., submitting the form).

7. FINAL PROVISIONS

1. Providing personal data in the contact form is completely voluntary, but it constitutes a necessary condition to send a message and receive a response from the Administrator.
2. The Privacy Policy may be updated in the event of technological updates or changes in the law. The current version of the document is always available on this subpage.