{"id":63983,"date":"2015-09-30T15:44:50","date_gmt":"2015-09-30T13:44:50","guid":{"rendered":"https:\/\/badamysie.pl\/privacy-policy-including-cookies\/"},"modified":"2026-10-10T22:58:00","modified_gmt":"2026-10-10T20:58:00","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/badamysie.pl\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy, including cookies"},"content":{"rendered":"
\n

The Polish version of this document is binding. This translation is provided for information purposes only.<\/strong><\/p>\n

Privacy Policy, including cookies, on the websites of BadamySie.pl sp. z o.o. <\/b><\/p>\n

The administrator of your personal data is BadamySie.pl sp. z o.o. with its registered office in Gda\u0144sk, at ul. \u017babi Kruk 10, KRS 0000844490, NIP: 5833398489, <\/strong>(hereinafter referred to as the Administrator<\/b>). The Administrator can also be reached at the email address administratordo@BadamySie.pl and by phone at 223797997.<\/p>\n

Personal data will be processed based on the provisions of REGULATION (EU) 2016\/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter referred to as GDPR<\/b>), as well as the Personal Data Protection Act. <\/p>\n

The Data Protection Officer at the Administrator’s company can be reached at the correspondence address BadamySie.pl sp. z o.o. 80-822 Gda\u0144sk, \u017babi Kruk 10, as well as at the email address administratordo@BadamySie.pl and by phone at 223797997.<\/p>\n

In fulfillment of the obligations imposed by the GDPR, the Administrator hereby provides the following information regarding the processing of your personal data<\/b>:<\/p>\n

    \n
  1. The following categories of personal data: email address, gender, and year of birth will be processed based on your separately granted consent (Art. 6(1)(a) GDPR) for the following purposes: email marketing, including email.<\/li>\n
  2. You have the right to withdraw any consent given to the Administrator for the processing of personal data, which will not affect the legality of processing carried out based on consent before its withdrawal. You can withdraw it by writing to the Administrator’s correspondence address, email address, or by calling (contact details provided above). <\/li>\n
  3. The processing of the following categories of your personal data: first name, last name, address, email address, year of birth, PESEL, gender, phone number, medical data is necessary for the performance of the contract for the provision of medical services and the use of the website, concluded between you and the Administrator (Art. 6(1)(b) GDPR);<\/li>\n
  4. The processing of the following categories of your personal data: first name, last name, address, email address, PESEL, type of service, is necessary to fulfill the following legal obligations (Art. 6(1)(c) GDPR) incumbent on the administrator \u2013 tax obligations, statistical obligations, and obligations arising from health protection regulations;<\/li>\n
  5. The following categories of your personal data: first name, last name, address, email address, year of birth, PESEL, gender, phone number, medical data will be transferred to other entities for purposes necessary for their processing in accordance with the processing purpose declared by the Administrator or in accordance with your instructions. The recipients to whom we transfer your data are the Administrator’s subcontractors providing medical and administrative services on your behalf. <\/li>\n
  6. The Administrator will process your personal data referred to in points: – 1 until consent is withdrawn, – 2 until the contract is performed, – 3 for a period of 6 years until tax and statistical obligations are fulfilled and for periods resulting from legal provisions for storing medical documentation.<\/li>\n
  7. The following categories of your personal data: IP<\/b> will be transferred to other entities for purposes necessary for their processing in accordance with the processing purpose declared by the Administrator or in accordance with your instructions. The recipients to whom we transfer your data are Google. <\/li>\n
  8. The Administrator intends to transfer the following categories of your personal data: IP to the USA. The following issues are associated with this \u2013 The European Commission has decided that the level of personal data protection offered by the current US legislation is sufficient and appropriate in the context of GDPR provisions. <\/li>\n
  9. You have the right to request from the Administrator access to your personal data, its rectification, erasure or restriction of processing, the right to object to processing, and the right to data portability.<\/li>\n
  10. You have the right to lodge a complaint against the Administrator or the processing activities of your personal data with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of your personal data violates the provisions of the GDPR. In Poland, this authority is the President of the Personal Data Protection Office. <\/li>\n
  11. The provision of personal data is voluntary.<\/li>\n
  12. No personal data is used for automated decision-making.<\/li>\n<\/ol>\n

    (more about your rights at the end of this document)<\/b><\/p>\n

    You have the right to object<\/b> at any time \u2013 on grounds relating to your particular situation \u2013 to the processing of personal data concerning you which is based on your consent or on the Administrator’s legitimate interest (see information above), including profiling. In the event of such an objection, the Administrator shall no longer process your personal data unless the Administrator demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. <\/p>\n

    If your data is processed in accordance with the information above for direct marketing purposes, you have the right to object<\/b> at any time to the processing of your personal data for such marketing, including profiling, to the extent that it is related to such direct marketing. In the event of such an objection, the Administrator shall no longer process your personal data for such purposes. <\/p>\n

    The objections<\/b> described above can be raised in any way, in writing, by email or by phone, using the Administrator’s contact details provided at the beginning of this document.<\/p>\n

    Your Rights regarding the Data Controller (hereinafter referred to as the Administrator) as a data subject are as follows:<\/b><\/p>\n

    Right of access to data<\/b>: Art. 15 GDPR. You have the right to obtain access to your data processed by the Administrator (the Administrator will provide you with a copy of the personal data undergoing processing, possibly for a fee regulated by the GDPR) and to information regarding: the purpose of processing; the categories of relevant personal data; the recipients or categories of recipients to whom the data has been or will be disclosed, including if transferred to a country outside the EU or to an international organization, regarding safeguards related to the transfer; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the right to request from the Administrator rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from you \u2013 their source; automated decision-making, including profiling, and information about the logic involved, as well as the significance and envisaged consequences of such processing for you. <\/p>\n

    Right to rectification of data<\/b>: Art. 16 GDPR. You have the right to obtain from the Administrator without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. <\/p>\n

    Right to erasure of data, also known as the right to be forgotten<\/b>: Art. 17 GDPR. You have the right to obtain from the Administrator the immediate erasure of your personal data if one of the following grounds applies: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; the data owner withdraws consent on which the processing is based and where there is no other legal ground for the processing; you object to the processing and there are no overriding legitimate grounds for the processing in matters other than direct marketing; the personal data have been unlawfully processed; the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the Administrator is subject; the personal data have been collected in relation to the offer of information society services. However, the aforementioned right is excluded to the extent that processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing by Union or Member State law to which the Administrator is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Administrator; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as the aforementioned right of the data owner is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise or defense of legal claims. <\/p>\n

    Right to restriction of data processing<\/b>: Art. 18 GDPR. You have the right to obtain from the Administrator restriction of processing where one of the following applies: you contest the accuracy of the personal data, for a period enabling the Administrator to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of their use; the Administrator no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; the data owner has objected to processing pending the verification whether the legitimate grounds of the Administrator override those of the data subject, except for processing for direct marketing purposes. Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. <\/p>\n

    Right to data portability<\/b>: Art. 20 GDPR. You have the right to receive the personal data concerning you, which you have provided to the Administrator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another administrator without hindrance from the Administrator, where: the processing is based on consent or on a contract, and the processing is carried out by automated means. You have the right to have the personal data transmitted directly from one administrator to another, where technically feasible. <\/p>\n

    Right to object<\/b> to data processing: Information about these rights has been included by the Administrator in the box below the main information, above.<\/p>\n

    You can exercise these rights in any way, including by email to administratordo@BadamySie.pl, by mail to the Administrator’s address indicated at the beginning of this document, or by phone at 223797997.<\/p>\n

    Cookies:<\/b><\/p>\n

    Our websites may use “cookies” which serve to identify the user’s session while using our services. These files ensure the proper functioning of the Website. <\/p>\n

    Cookies are text files stored on the user’s end device. They usually contain the name of the website they come from, the time they are stored on the end device, and a unique number. <\/p>\n

    Cookies used on BadamySie.pl sp. z o.o. websites do not store any personal data or other information collected from users. <\/p>\n

    Data Collection:<\/b><\/p>\n

    In accordance with the accepted practice of most websites, we store HTTP requests directed to our server. This means that we know the public IP addresses from which users browse the informational content of our service. The browsed content is identified by URL addresses. We also know, among other things: <\/p>\n