Privacy Policy

Last updated: May 17, 2026

1. Data controller

The controller of your personal data is Private Dental Practice Magdalena Iwan, registered at ul. Zygmunta Glogera 43e lok. 21, 31-222 Kraków, NIP: 6572712503. The dental clinic is located at ul. Stanisławy Daneckiej 4 lok. U05, 32-200 Miechów. Contact for data matters: ···.

2. Purposes and legal bases for processing

Personal data is processed for the following purposes:

  • responding to inquiries sent via the contact form (Art. 6(1)(f) GDPR — legitimate interest),
  • performing a contract for dental services, including maintaining medical records (Art. 6(1)(b) GDPR, Art. 9(2)(h) GDPR),
  • website traffic analysis using Google Analytics — only after consent (Art. 6(1)(a) GDPR).

3. Scope of collected data

Depending on the purpose of processing, we collect: name and surname, phone number (contact form), medical data (patient medical records), anonymous statistical data (Google Analytics, with consent).

4. Data recipients

Personal data may be transferred to entities processing data on behalf of the controller:

  • hosting service providers — Netlify, Inc. (under a data processing agreement compliant with Art. 28 GDPR),
  • analytics service provider — Google LLC — only after consent to cookies.

5. Data retention period

Contact form data is stored for the period necessary to respond and potentially establish cooperation, no longer than 12 months. Medical records are kept for the period required by law (Art. 29 of the Patient Rights Act — 20 years).

6. Rights of data subjects

You have the following rights:

  • right of access (Art. 15 GDPR),
  • right to rectification (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object (Art. 21 GDPR),
  • right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
  • right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

Requests for deletion or restriction of processing should be sent to: ···.

7. Cookies

The website uses cookies only after the user gives voluntary consent. We use Google Analytics (_ga, _gid, _gat cookies) for anonymous traffic analysis. You can withdraw consent at any time by clicking "Decline" in the cookie banner or deleting cookies in your browser settings.

8. Data transfers outside the EEA

Google LLC is based in the USA. Data is transferred on the basis of standard contractual clauses approved by the European Commission. More information: https://policies.google.com/privacy.

9. Changes to the privacy policy

The controller reserves the right to make changes to this privacy policy. Users will be informed of any changes by updating the content on this page.