Privacy Policy

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other applicable data protection regulations. The use of our website is generally possible without providing personal data.

Data collection on this website is carried out by the website operator. The operator's contact details can be found in the impressum of this website. Your data is collected either by you providing it to us (e.g., via email or phone) or by being automatically collected by our IT systems when you visit the website (mainly technical data such as the internet browser, operating system, or time of page access). The automatic collection is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in ensuring the proper operation and security of our website.

The hosting provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, and time of the server request. This data cannot be assigned to specific persons. This data is processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient provision of our website). Server log files are stored for a maximum of 14 days and then automatically deleted, unless further retention is required for evidentiary purposes.

Our website uses cookies. Cookies are small text files that are stored on your device by your browser. Cookies do not cause any damage and do not contain viruses. We only use technically necessary cookies required for the proper functioning of the website, such as the language preference cookie. These cookies are processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). The language preference cookie is stored until it expires or you delete it manually.

If you contact us via email or phone, your inquiry including all personal data provided (name, email address, phone number, message content) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. The processing of this data is based on Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your inquiry). Your data will be deleted once the purpose of storage no longer applies and there are no statutory retention obligations.

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and a lock icon appears in the browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

You have the following rights with regard to your personal data: Right to information and access (Art. 15 GDPR) — you can request information about what data we store about you. Right to rectification (Art. 16 GDPR) — you can request the correction of inaccurate data. Right to erasure (Art. 17 GDPR) — you can request the deletion of your data, provided there are no statutory retention obligations. Right to restriction of processing (Art. 18 GDPR) — you can request the restriction of data processing under certain circumstances. Right to data portability (Art. 20 GDPR) — you can request to receive your data in a structured, commonly used, and machine-readable format. Right to object (Art. 21 GDPR) — you can object to data processing based on legitimate interest at any time for reasons arising from your particular situation. Right to withdraw consent (Art. 7 para. 3 GDPR) — if you have given consent to data processing, you can revoke this consent at any time with effect for the future.

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent supervisory authority for the data controller is: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland. Website: https://uodo.gov.pl/

Our website uses the following third-party services: YouTube (privacy-enhanced mode via youtube-nocookie.com, operated by Google Ireland Limited) — for embedded video content. When you view a page with an embedded YouTube video, a connection to YouTube servers is established and your IP address is transmitted. Spotify (Spotify AB, Sweden) — for embedded podcast content. When you view a page with an embedded Spotify player, a connection to Spotify servers is established and your IP address is transmitted. Cal.eu — for appointment booking. When you use the booking function, your data (name, email, appointment details) is processed by Cal.eu. These services may transfer data to servers outside the EU/EEA, including the United States. Such transfers are safeguarded by Standard Contractual Clauses (SCCs) pursuant to Art. 46 para. 2 lit. c GDPR. For further information, please refer to the privacy policies of each provider.

We store personal data only for as long as is necessary for the purposes for which it was collected or as required by law. Server log files are automatically deleted after 14 days. Contact inquiries are deleted once the purpose of storage no longer applies and no statutory retention obligations exist. Language preference cookies expire at the end of the browser session or upon manual deletion.

We reserve the right to update this privacy policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to periodically review this page for the latest information on our privacy practices.