This is a translation provided for convenience. In the event of any discrepancy between the Polish and English versions, the Polish version prevails.

Draft version — this document requires further details and formal approval before publication

Privacy Policy

1. Data controller

The controller of personal data processed in connection with the use of the centrum-oddech.pl website (the "Site") is [TO BE COMPLETED: full name / legal form, e.g. "Karolina Zawrotniak, trading as Oddech — Psychological Centre for Children and Families"], NIP [TO BE COMPLETED], address: [TO BE COMPLETED], email: kontakt@centrum-oddech.pl (the "Controller").

2. Scope of this policy

This policy covers the data of people visiting the Site. Processing of patient data in connection with the provision of psychological services (including health data, Article 9 GDPR) is carried out under a separate information clause provided at the first appointment, and is not covered by this policy.

3. What data we collect, for what purpose, and on what basis

Email contact. If you write to us at the address given on the Site, we process your email address and the content of your message in order to respond and handle your enquiry. Basis: Article 6(1)(b) and (f) GDPR (responding to an enquiry, legitimate interest). Please do not include health details in your message — we discuss those during your appointment.

Server logs. Our hosting provider automatically records technical data (including IP address, browser type, request time) to ensure the security and correct operation of the Site. Basis: Article 6(1)(f) GDPR (legitimate interest).

Online booking (ZnanyLekarz widget). With your consent, we load a booking widget provided by ZnanyLekarz on the Site, which may set its own cookies and process data (including IP address). Basis: Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law (consent). See the "Cookies" section for details.

Blog. Blog content is fetched from a CMS. These are requests needed to display articles and are not used for tracking.

We do not use analytics, marketing or advertising tools (e.g. Google Analytics, the Meta pixel).

4. Recipients of data / processors

In connection with running the Site, your data may be entrusted to the following entities:

Netlify, Inc. — hosting and delivery of the Site (server logs, including IP addresses).
home.pl S.A. — domain and DNS management.
Google Workspace — email hosting. [TO BE COMPLETED: confirm the relevant Google legal entity providing the service].
Sanity — blog content management system.
ZnanyLekarz sp. z o.o. (DocPlanner group) — operates the online booking widget, only once you've given consent. ZnanyLekarz is a separate controller of its own data in this respect; its own patient privacy policy (in Polish) describes its rules.
[TO BE COMPLETED: accounting firm / other entities, if applicable.]

5. Transfers of data outside the EEA

Some providers (including [TO BE COMPLETED: Netlify — USA; also verify Sanity's processing region]) may process data outside the European Economic Area. This takes place on the basis of the safeguards required under GDPR (standard contractual clauses and/or an adequacy decision / the Data Privacy Framework). [TO BE COMPLETED / verify the basis with each provider.]

6. Retention period

Email correspondence — until the matter is resolved, then for the statutory limitation period for any claims.
Server logs — for the period set by the hosting provider's configuration, for security purposes.
Record of your ZnanyLekarz consent decision — until you change your decision or clear your browser data; data held by ZnanyLekarz is subject to its own policy.

7. Your rights

You have the right to: access your data, rectification, erasure, restriction of processing, data portability, objection, and — where processing is based on consent — to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). You can change your ZnanyLekarz cookie consent via "Cookie settings" in the Site footer. For any questions about your data, contact us at kontakt@centrum-oddech.pl.

8. Right to complain

You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe our processing breaches the law.

9. Cookies and similar technologies

Cookies are small text files saved on your device. We also use browser local storage (localStorage). Below are the categories we use.

9.1. Essential (no consent required)

Needed for the Site to work and to remember your decisions. These don't require consent.

Name	Type	Purpose	Duration
`oddech-consent-v1`	localStorage (first-party)	Remembers your cookie consent decision	Until you clear your browser data or change your decision

We don't use our own analytics, marketing or advertising cookies.

9.2. Third party — ZnanyLekarz online booking (requires consent)

Third-party embeds are switched off by default. To let you book appointments directly on the Site, we only load the widget provided by ZnanyLekarz sp. z o.o. (DocPlanner group) once you've given consent. The widget loads a script and elements from the platform.docplanner.com domain, which may set their own cookies and process data (including IP address) to handle bookings.

Basis: your consent (Article 399 of the Polish Electronic Communications Law and Article 6(1)(a) GDPR).
Scope and duration of cookies: set by the provider in its own cookie policy (in Polish).

If you don't consent, the widget won't load and no ZnanyLekarz cookies will be set — we'll show a message with a link to our ZnanyLekarz profile instead, where you can still book an appointment.

On your first visit, we show a banner where you can accept or decline third-party cookies. Declining is just as easy as accepting, and nothing loads by default until you decide.
You can change or withdraw your decision at any time via "Cookie settings" in the footer. Once you withdraw consent, the Site reverts to local messages and stops loading ZnanyLekarz embeds.
Withdrawing consent on the Site doesn't automatically delete cookies already set by the third party. You can remove and block these in your browser settings; restricting third-party cookies may prevent the widget from working.

10. Changes to this policy

We may update this policy. Last updated: [TO BE COMPLETED: publication date].