ENWebsite privacy policy
This document explains what data this website collects, why, on what basis and how long we keep it. It covers the information website only - the clinic application - PDF, opens in a new tab and the online booking system - PDF, opens in a new tab have their own documents.
1. Data controller
The controller of the personal data collected through this website is:
GIT - Grzegorz Waletko
ul. gen. Mariusza Zaruskiego 29D/2, 81-577 Gdynia, Poland
NIP (Polish tax identification number): 641 214 83 99
Email: admin@tricho-assist.pl
For any matter concerning the protection of personal data, please write to the email address above.
2. What this document covers
This policy covers the Tricho-Assist information website - the site you are reading now. Separate documents cover:
- The clinic application and the university environment - access to them is granted under a separate agreement and their own terms - PDF, opens in a new tab.
- The online booking system - its own terms - PDF, opens in a new tab and the documents presented to the patient during booking and payment.
- Patient records kept in the clinic - the controller for these is the trichology clinic, not the owner of the website.
3. What data we collect
| Category | Scope | Source |
|---|---|---|
| Contact form data | Full name, email address, telephone number, name of the clinic, university or company, content of the message | Provided by you |
| Technical data | IP address, browser and operating system type, date and time of the visit, address of the referring page | Server logs, collected automatically |
| Cookie data | Saved consent choices, selected colour theme, visit statistics | Your browser |
The website does not collect health data or any other special category data. Please do not enter patient data in the contact form.
4. Purposes and legal bases for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to an enquiry sent through the form, by email or by telephone | Article 6(1)(b) of the GDPR (Regulation (EU) 2016/679) - steps taken prior to entering into a contract, and Article 6(1)(f) - the legitimate interest in conducting correspondence |
| Keeping the website working correctly and securely, and detecting abuse | Article 6(1)(f) - the legitimate interest of the controller |
| Website visit statistics | Article 6(1)(a) - your consent given in the consent banner |
| Marketing activity and measuring its effectiveness | Article 6(1)(a) - your consent given in the consent banner |
| Establishing, pursuing or defending against claims | Article 6(1)(f) - the legitimate interest of the controller |
5. Cookies
The website uses cookies and similar technologies that store data in your browser. We divide them into three groups:
- Essential - required for the website to work. They remember your consent choices and whether you have chosen the light or the dark theme. They are set without your consent, because without them the site cannot work correctly.
- Analytics - anonymous visit statistics, with no profiling. Set only after you have given consent.
- Marketing - tailoring content and measuring the effectiveness of promotional activity. Set only after you have given consent.
You can withdraw your consent at any time - withdrawal does not affect the lawfulness of the processing carried out before it was withdrawn. You can change the settings with the button below or with the ‘Cookie settings’ link in the footer of every page. You can also delete and block cookies in your browser settings - some features of the website may then behave differently.
6. Data recipients
Data may be accessed by the providers that handle technical services for us, only to the extent necessary to carry out the tasks entrusted to them:
- the website hosting provider,
- the email provider,
- the analytics tool provider - only after you have consented to visit statistics.
Data is not transferred outside the European Economic Area. If we introduce a tool in future that involves such a transfer, information about it and about the basis for the transfer will be added to this policy before the tool goes live.
7. How long we keep data
| Data | Retention period |
|---|---|
| Form and email correspondence | Up to 12 months after the matter is closed and, in the event of a dispute, until any claims become time-barred |
| Server logs | Up to 12 months |
| Saved consent choices | Up to 12 months or until the browser data is cleared |
| Statistical data | For as long as the cookies used remain valid, and no longer than 24 months |
8. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy of it (Article 15 GDPR),
- have your data rectified (Article 16 GDPR),
- have your data erased (Article 17 GDPR),
- restrict processing (Article 18 GDPR),
- transfer your data to another controller (Article 20 GDPR),
- object to processing based on legitimate interest (Article 21 GDPR),
- withdraw your consent at any time, where the processing is based on it.
To exercise these rights, write to admin@tricho-assist.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), the Polish supervisory authority (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
9. Providing your data is voluntary
Providing data in the contact form is voluntary, but it is necessary for us to reply. Without an email address or a telephone number we have no way of answering your enquiry.
10. Profiling and automated decisions
The website does not take automated decisions about you and does not use profiling that produces legal effects.
11. Security
Data is transmitted between your browser and the server over an encrypted HTTPS connection. Data is stored on servers located in Poland or within the European Economic Area, protected by technical and organisational measures appropriate to the risks involved.
12. Changes to this policy
We update this policy when the scope of the data, the purpose of the processing or the tools we use change. The current version and the date of the last update are always given at the top of this document.