Skip to content
    This is a translation provided for convenience. In the event of any discrepancy between the Polish and English versions, the Polish version prevails.
    Draft version — this document requires further details and formal approval before publication

    Privacy Policy

    1. Data controller

    The controller of personal data processed in connection with the use of the centrum-oddech.pl website (the "Site") is Gabinet Psychologiczny Karolina Zawrotniak (registered Polish sole trader), NIP 7773439339, address: ul. Romana Abrahama 18, 61-615 Poznań, Poland, email: kontakt@centrum-oddech.pl (the "Controller").

    2. Scope of this policy

    This policy covers the data of people visiting the Site. Processing of patient data in connection with the provision of psychological services (including health data, Article 9 GDPR) is carried out under a separate information clause provided at the first appointment, and is not covered by this policy.

    3. What data we collect, for what purpose, and on what basis

    Email contact. If you write to us at the address given on the Site, we process your email address and the content of your message in order to respond and handle your enquiry. Basis: Article 6(1)(b) and (f) GDPR (responding to an enquiry, legitimate interest). Please do not include health details in your message — we discuss those during your appointment.

    Contact form. If you use the form on a specialist's profile, we process the name you provide, at least one contact channel (email address or phone number), and the optional message so that we can respond and arrange contact. Basis: Article 6(1)(b) and (f) GDPR (steps taken at your request and handling your enquiry). The submission is sent to and stored by Netlify Forms. Do not include a diagnosis, treatment history or other health data in the message.

    Server logs. Our hosting provider automatically records technical data (including IP address, browser type, request time) to ensure the security and correct operation of the Site. Basis: Article 6(1)(f) GDPR (legitimate interest).

    Online booking (ZnanyLekarz and Twój Psycholog widgets). With your consent, we load booking widgets provided by ZnanyLekarz and by TwójPsycholog on the Site, which may set their own cookies and process data (including IP address). These are two separate consents: giving one does not give the other. Basis: Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law (consent). See the "Cookies" section for details.

    Blog. Blog content is fetched from a CMS. These are requests needed to display articles and are not used for tracking.

    We do not use analytics, marketing or advertising tools (e.g. Google Analytics, the Meta pixel).

    4. Recipients of data / processors

    In connection with running the Site, your data may be entrusted to the following entities:

    • Netlify, Inc. — hosting and delivery of the Site, server logs (including IP addresses), and receipt and storage of contact-form submissions.
    • home.pl S.A. — domain and DNS management.
    • Google Ireland Limited (Google Workspace) — email hosting.
    • Sanity — blog content management system.
    • ZnanyLekarz sp. z o.o. (DocPlanner group) — operates the online booking widget, only once you've given consent. ZnanyLekarz is a separate controller of its own data in this respect; its own patient privacy policy (in Polish) describes its rules.
    • TwójPsycholog sp. z o.o. (ul. Głogowska 12/4, 80-320 Gdańsk, Poland, KRS 0000905171) — operates the booking calendar embedded on specialist pages, only once you've given consent. TwójPsycholog is a separate controller in this respect; its own privacy policy (in Polish) describes its rules.
    • Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — provider of the embedded map on the contact page. Once you've given consent, your browser connects to Google's servers, which may set cookies and process technical data, including your IP address. Basis: Article 6(1)(a) GDPR.

    5. Transfers of data outside the EEA

    Netlify, Inc. is based in the United States and may process data outside the European Economic Area. This takes place on the basis of the standard contractual clauses referred to in Article 46(2)(c) GDPR, incorporated into our data processing agreement with that provider. [TO BE COMPLETED: the processing region of the Sanity project — check at manage.sanity.io (project 5hs2jpik) and add a sentence if the dataset sits outside the EEA]

    6. Retention period

    • Email correspondence — until the matter is resolved, then for the statutory limitation period for any claims.
    • Contact-form submissions stored in Netlify Forms — until the enquiry is handled, then for the period needed to establish or defend any claims, or deleted earlier if there is no basis for further storage.
    • Server logs — for the period set by the hosting provider's configuration, for security purposes.
    • Record of your ZnanyLekarz, Twój Psycholog and Google Maps consent decisions — until you change your decision or clear your browser data; data held by ZnanyLekarz, TwójPsycholog and Google is subject to their own policies.

    7. Your rights

    You have the right to: access your data, rectification, erasure, restriction of processing, data portability, objection, and — where processing is based on consent — to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). You can change your third-party cookie consents — ZnanyLekarz, Twój Psycholog and the Google map — via "Cookie settings" in the Site footer, each one separately. For any questions about your data, contact us at kontakt@centrum-oddech.pl.

    8. Right to complain

    You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe our processing breaches the law.

    9. Cookies and similar technologies

    Cookies are small text files saved on your device. We also use browser local storage (localStorage). Below are the categories we use.

    9.1. Essential (no consent required)

    Needed for the Site to work and to remember your decisions. These don't require consent.

    NameTypePurposeDuration
    oddech-consent-v1localStorage (first-party)Remembers your cookie consent decisionUntil you clear your browser data or change your decision

    We don't use our own analytics, marketing or advertising cookies.

    9.2. Third party — ZnanyLekarz online booking (requires consent)

    Third-party embeds are switched off by default. To let you book appointments directly on the Site, we only load the widget provided by ZnanyLekarz sp. z o.o. (DocPlanner group) once you've given consent. The widget loads a script and elements from the platform.docplanner.com domain, which may set their own cookies and process data (including IP address) to handle bookings.

    • Basis: your consent (Article 399 of the Polish Electronic Communications Law and Article 6(1)(a) GDPR).
    • Scope and duration of cookies: set by the provider in its own cookie policy (in Polish).

    If you don't consent (or you withdraw consent), the widget won't load and no ZnanyLekarz cookies will be set — we'll show a message with a button you can use to give consent. You can also book without the widget, using the contact form or the details on our contact page.

    9.3. Third party — Google map on the contact page (requires consent)

    On the contact page we embed a map showing our practice's location, provided by Google Ireland Limited. The map doesn't load by default — only once you've given consent does your browser connect to the www.google.com domain, which may set its own cookies and process technical data, including your IP address.

    If you don't consent (or you withdraw consent), we'll show a message in place of the map with a link to our Google Maps listing, which opens manually in a new tab.

    9.4. Third party — Twój Psycholog booking calendar (requires consent)

    On some specialist pages we embed a booking calendar provided by TwójPsycholog sp. z o.o. The calendar does not load by default — only once you've given consent does your browser fetch the script, styles and appointment data from twojpsycholog.pl, which may set its own cookies and process technical data, including your IP address. This consent is separate from the ZnanyLekarz one: giving one does not give the other.

    • Basis: your consent (Article 399 of the Polish Electronic Communications Law and Article 6(1)(a) GDPR).
    • Cookie scope and duration: set by the provider in its own privacy policy (in Polish, "Pliki cookies" section).

    If you don't consent (or you withdraw consent), the calendar won't load and no TwójPsycholog cookies will be set — we'll show a message with a button you can use to give consent. You can also book without the calendar, using the contact form on the specialist's page.

    9.5. Managing consent

    • On your first visit, we show a banner where you can accept or decline third-party cookies. Declining is just as easy as accepting, and nothing loads by default until you decide.
    • You can change or withdraw your decision at any time via "Cookie settings" in the footer. Once you withdraw consent, the Site reverts to local messages and stops loading ZnanyLekarz embeds, the Twój Psycholog booking calendar and the Google map. You give and withdraw each of these three consents separately.
    • Withdrawing consent on the Site doesn't automatically delete cookies already set by the third party. You can remove and block these in your browser settings; restricting third-party cookies may prevent the widget or map from working.

    10. Changes to this policy

    We may update this policy. Last updated: 10 September 2026.