I. Personal Data

We publish this document to explain the reasons why we collect and process personal data as part of our business activities:

1. What is personal data?

Personal data means any information that makes it possible, without excessive effort, to distinguish one person from others. It may relate directly to that person (such as their name and surname, identification number, and sometimes even an e-mail address or online account), as well as information that does not describe them directly. For example, it may concern their characteristics, health condition, views, place of residence, addictions, race or religion.

2. What personal data do we refer to in our case?

We process data provided to us by our Clients, Contractors and Employees in connection with the use of our services, cooperation with us or employment.

3. What does data processing mean?

Processing means any operations that we may perform on personal data — both those involving active use, such as collecting, obtaining, recording, combining, modifying or disclosing data, and passive operations, such as storing, restricting, deleting or destroying data.

4. Who is the Data Controller (i.e. who has influence over the processing and security of the data)?

The controller of your data is Centrum Zdrowia Mentala Sp. z o.o., with its registered office at ul. ks. Norberta Bonczyka 44/1, 51-138 Wrocław, NIP: 895 225 84 83, KRS: 0001042814

5. On what legal basis and for what purpose do we process your data?

Each processing of your data must be based on an appropriate legal basis compliant with applicable regulations. Such a basis may be your consent to data processing or other legal provisions permitting such processing, included in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (referred to as the “GDPR”), or in various national legal acts, such as acts or regulations.

Your data may be processed by us for several different purposes, for example:

• You may provide us with your data by sending an e-mail. In such a case, we process your data on the basis of the consent you give, which you express automatically when you send us your data (e.g. your e-mail address). Your consent is voluntary — please remember that you may withdraw it at any time. In such a case, we will immediately delete all information provided by you, provided that you have not become our Client.
• If you are our Client or a person interested in using the services we provide, we process your data in connection with the agreement concluded with you or as part of preparations to conclude such an agreement. This always takes place with your knowledge and will. By expressing your intention to enter into an agreement, you know what personal data will be required to sign it, and after signing it, you know what data you have provided or will provide for this purpose at a later stage,
• We may also process your data in connection with the need to ensure the security of our IT network and information. This will occur when you use or connect to our IT infrastructure, for example by visiting our website or sending us messages. This is our legitimate interest.
• If you are interested in working with us, your data is processed in the form of the application or CV you submit. This takes place with your knowledge and written consent, which you may withdraw at any time. In such a case, your candidacy will not be considered by us and we will immediately delete all data provided by you. However, once you are employed by us, further rules for data processing, as well as the mandatory scope of data submission and storage, are determined by labour law provisions.

6. To whom do we transfer your data?

In accordance with applicable law, we may transfer your data to entities that process it on our behalf, such as: a postal operator, accounting office, IT service providers or other subcontractors of our services indicated in the agreement concluded with you. We are also obliged to disclose it upon request to entities authorised to do so under other legal provisions (e.g. courts or law enforcement authorities). However, such disclosure will take place only if they submit a request to us in this matter, indicating the legal basis that authorises them to make such a request.

We do not intend to transfer your data to third countries or international organisations, i.e. outside the economic area of the European Union. Within the European Union, thanks to the GDPR, you are guaranteed an identical level of protection of your data in all Member States. The text of the GDPR is available at:

http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC

7. How long will we process your data?

We attach great importance to limiting the scope of data we collect, as well as the period of its processing, to the necessary minimum. For this purpose, we systematically review the paper and electronic documents we hold, deleting unnecessary documents whose retention period has expired. Please remember that the period for which your data is processed, depending on the basis on which we obtained it, may be determined by separate legal provisions independent of us, which may impose on us an obligation to store your data regardless of your will or wishes. Examples include labour law, social security law or accounting regulations.

If you have personally used our services and we have concluded an agreement in this regard, in accordance with accounting regulations, we will hold your data in the financial and accounting documentation created in connection with this and process it for a period of 5 consecutive calendar years, counted from the date of purchase/conclusion of the agreement.

If the data we hold were to be used for a purpose other than the one for which it was obtained, you will always be informed of this by us and will be able to object to it.

8. What rights do you have in relation to your data?

If we process your personal data, you always have the right to:

• request access to the data — within the limits of Art. 15 GDPR,
• rectify it — within the limits of Art. 16 GDPR,
• request deletion — within the limits of Art. 17 GDPR,
• or restrict processing activities — within the limits of Art. 18 GDPR,
• object to data processing — within the limits of Art. 21 GDPR,
• data portability, including obtaining a copy of the data — within the limits of Art. 20 GDPR.

All these rights are discussed in detail in Articles 15 to 21 of the GDPR, the text of which is available at:

http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC

You may also withdraw your consent to the processing of personal data. In such a case, we will immediately delete your personal data, provided that there is no legal obligation requiring us to continue processing it. For example, if you request deletion of your e-mail address in connection with unsubscribing from the newsletter, we will immediately delete it from the mailing database.

If you believe that in any way — which, of course, we do not intend — we have violated your rights or failed to ensure the security of your personal data, you have the right to lodge a complaint with the supervisory authority, which is currently the President of the Personal Data Protection Office.

9. Automated decision-making and information about profiling.

No decisions based on your data are made by us in an automated manner, i.e. without human involvement. We also do not take any actions aimed at profiling you.

10. How do we protect your data?

In order to ensure the security of your data, we apply organisational and technical measures required by law. At our registered office, we have installed the necessary physical safeguards to prevent unauthorised persons from accessing the data. Our employees hold the required authorisations and may process data only to a limited extent, i.e. only to the extent necessary for the proper performance of their official duties.

11. Privacy protection of minors

Our website does not monitor or verify information about the age of users, senders or recipients of messages. Contact information from visitors (such as telephone numbers and e-mail addresses of users) is used to fulfil orders or send information about our company.

Minors should not send any information, place orders or subscribe to services provided by our company without the consent of their parents or legal guardians. We will require such consent whenever we become aware that a user is a minor (“child”) within the meaning of national data protection regulations.

II. Cookies

1. What are cookies and what are they used for?

Cookies are text files that are stored on your device and used by the server to recognise that device when it reconnects. Cookies are downloaded each time you “enter” and “leave” the website. Cookies are not used to determine your identity, but only your device — among other things, so that after recognising the browser you use, the displayed image can be adjusted as well as possible to the technical capabilities of the equipment (e.g. its resolution) or its type (desktop or mobile version).

Cookies are most commonly used for counters, surveys, online stores, websites requiring login, advertising and monitoring visitor activity. Cookies also make it possible, among other things, to remember your interests and adapt websites to them in terms of displayed content and advertising.

Cookies are currently used by practically all websites operating on the Internet — search engines, news websites, blogs, online stores, official websites, magazines and newspapers, etc. Our website also uses them.

More information about cookies can be found at: www.wszystkoociasteczkach.pl

2. What do cookies do?

In general, they work according to the following principles:

• they identify data of the computer and browser used to browse websites — for example, they make it possible to determine whether a given computer has already visited the website,
• data obtained from “cookies” is not combined in any way with users’ personal data obtained, for example, during registration on websites,
• they are not harmful to you or to your computers or smartphones — they do not affect how they operate,
• they do not cause configuration changes in end devices or in the software installed on those devices,
• the default parameters of “cookies” allow the information contained in them to be read only by the server that created them,
• based on your behaviour on the websites you visit, they transmit information to servers that allows the displayed website to be better adapted to individual preferences.

3. What types of cookies are there?

There are the following types of cookies:

• “Session cookies” are temporary files stored in the browser’s memory until the end of the browser session (i.e. until the browser is closed). These files are necessary for certain applications or functionalities to work properly. After closing the browser, they should be automatically deleted from the device on which you viewed the website,
• “Persistent cookies” make it easier to use frequently visited websites (e.g. they remember your favourite colour layout or menu layout on your favourite websites). These files are stored in the appropriate folder for a longer period of time, which you can control in the settings of the browser you use. Each time you visit the website, data from these cookies is transferred to the server. This type of cookie is sometimes referred to in English as “tracking cookies”,
• “Third-party cookies” are files usually originating from advertising servers, search servers, etc., cooperating with the owner of a given website. Thanks to them, displayed advertisements are tailored to your preferences and habits, which in return often allows free access to part of the website content. They are also used to count “clicks” on advertisements, user preferences, etc.,

4. Do you have to consent to our use of cookies?

Please remember that you can manage “cookies” yourself. This is possible, for example, through the web browsers you use (usually the mechanism is enabled by default). In the most popular browsers, you can:

• accept “cookies”, which will allow you to fully use the options offered by websites,
• manage cookies at the level of individual websites selected by you,
• define settings for different types of “cookies”, for example accepting persistent cookies as session cookies, etc.,
• block or delete cookies.

Information on how to enable and disable cookies in the most popular browsers can be found at the following links:

1) Google Chrome

2) Internet Explorer

3) Mozilla Firefox

4) Opera

5) Safari

Leaving your browser settings unchanged means that you consent to our use of cookies. Blocking or disabling certain types of cookies may, however, prevent you from using the full functionality of the website or disrupt its proper operation.

5. What do we use cookies for?

Both session cookies and persistent cookies are used within the website. We use them for the following purposes:

• creating statistics, which makes it possible to improve the content, structure and content of the website pages,
• maintaining the Website User’s session.

In order to display the website correctly, the following information is collected: name and version of the web browser, language settings, date and time of sending the request to the server, IP address from which the request was sent, and the requested URL. This data is collected to enable proper operation of the website.

For the purpose of creating statistics, we use a web analytics tool — Google Analytics, which collects data and uses its own cookies in accordance with Google’s Privacy Policy available at https://www.google.com/intl/pl/policies/privacy/

Google stores on its servers data obtained from placing cookies on devices and uses this information to create reports and provide other services related to website traffic and Internet use. Google may also transfer this information to third parties if required to do so by law or where such third parties process such information on behalf of Google.

Data collected by our website is not disclosed or made available to third parties, except for competent law enforcement authorities authorised to conduct criminal proceedings in connection with their initiation upon our request. This will only occur if you take any unlawful actions or actions harmful to us.