Privacy policy
Last updated: 18 August 2026
The legally binding version of this document is the Polish one. This text is a translation for convenience; in case of any discrepancy the Polish version prevails.
1. Who processes your data
The controller of your personal data is the medical practice seeing patients at ul. Głębocka 9, 03-287 Warszawa.
For data protection matters: kontakt@ginekolog-med.pl, phone +48 787 060 707.
2. What data we collect
Through the booking form we collect only what is needed to arrange an appointment time:
- your name and surname,
- your phone number,
- optionally, your messenger handle (Telegram, Viber, WhatsApp),
- the service you selected and your message, if you write one,
- the address of the page the request was sent from.
The server additionally records the IP address and the date and time of the request, which is needed to protect the form from abuse.
The form does not ask about your health. Please do not describe symptoms or diagnoses in the request — we will discuss them at the appointment or by phone. If you do write them, we process that information on the basis of your explicit consent.
Medical records created during the appointment are kept separately, under the Polish law on patients’ rights.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to you and booking the appointment | Art. 6(1)(b) GDPR — steps prior to entering into a contract | up to 12 months from the last contact |
| Health data, if you provided it yourself | Art. 9(2)(a) GDPR — explicit consent; when care is provided — Art. 9(2)(h) | until consent is withdrawn, no longer than 12 months |
| Protecting the form from spam | Art. 6(1)(f) GDPR — legitimate interest | up to 90 days |
| Visit statistics | Art. 6(1)(a) GDPR — consent given in the cookie banner | up to 14 months, or until consent is withdrawn |
| Establishing and defending legal claims | Art. 6(1)(f) GDPR | until the limitation period expires |
Providing your name and phone number is voluntary, but without them an appointment cannot be booked.
4. Who the data is shared with
| Recipient | Role | Outside the EEA |
|---|---|---|
| Website hosting provider | website hosting and mail server | no |
| Telegram Messenger Inc. | a notification of a new request reaches the doctor’s chat | yes |
| Google Ireland Ltd. | visit statistics, only after consent | possibly, under standard contractual clauses |
| DocPlanner S.A. (ZnanyLekarz) | online booking, if you use it | no |
| MyDr | reserving an appointment slot | no |
Only your name, phone number and message go to Telegram — the form does not ask about health. If you would rather your request did not pass through a messenger, call: +48 787 060 707.
We do not sell data and do not use it for profiling or automated decision-making.
5. Your rights
- access to your data and a copy of it (Art. 15 GDPR),
- rectification of your data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- objection to processing based on legitimate interest (Art. 21 GDPR),
- withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR).
Write to kontakt@ginekolog-med.pl — we reply within one month.
The right to erasure does not extend to medical records: their retention period is set by law and is normally 20 years.
6. Complaint to the supervisory authority
If you believe we are breaching data protection rules, you may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
7. Cookies and analytics
- Essential — they remember your choice in the consent banner.
- Analytics — Google Analytics; enabled only after you press “Accept”.
Until consent is given, analytics runs in a restricted mode (Google Consent Mode) and records no identifiers. You can withdraw consent by clearing this site’s data in your browser.
Advertising cookies and remarketing are not used.
8. Security
The site runs over HTTPS only. Requests are transmitted over an encrypted connection and are accessible only to the doctor and the booking administrator. The form is protected against automated submission and rate-limited.
9. Changes to this policy
We may update this policy. The date of the last change is shown at the top of the page.
