Privacy Policy and Cookies

Privacy Policy and Cookies at Dr Szychta www.chirurgiaplastyczna.pl web services.

Dr Paweł Szychta of Gdańsk, Żabi Kruk 10 (NIP: 796 271 47 81) is the Administrator of your personal details ('the Administrator' below). The Administrator is also available at the address: kontakt@chirurgiaplastyczna.pl and the phone number 887700700.

Personal data will be processed in accordance with provisions of the REGULATION OF THE PARLIAMENT AND COUNCIL OF EUROPE (UE) 2016/679 of 27 April 2016 ('the GDPR'), and the Personal Data Protection Act.

The data protection Inspector at the Administrator's undertaking is available at the business mailing address of Dr Paweł Szychta, 80-822 Gdańsk, Żabi Kruk 10 , as well as the e-mail address kontakt@chirurgiaplastyczna.pl and the phone number 887700700.

In execution of the GDPR obligations, the Administrator hereby provides the following information about processing of your personal data:

1. The following categories of your IP personal data will be processed for the following purposes arising from legally reasonable interests of the Administrator (Article 6 Section 1 letetr f of the GDPR): website development.
2. The following categories of your IP personal data will be will be supplied to other entities as necessay for the processing thereof in line with the purpose of the processing as declared by the Administrator or as dispositioned by yourself. Your data will be supplied to Google.
3. The Administrator intends to supply the following categories of your IP personal data to the USA. This is related to a European Commission decision acknowledging that the standard of personal data security offered by the current US legislation is sufficient and adequate in the context of the GDPR regulations.
4. The Administrator will process your personal data specified in point 1 above for 12 months. This is an optimum period of time for an administrator to evaluate the way you use the website.
5. You have the right to demand access to personal data concerning you, to correct, remove them or to restrict their processing, to raise objections to the processing, and to transfer your data.
   
6. You have the right to complain against the Administrator or processing of your personal data to a supervisory authority, in particular, to a European Union member state of your usual residence, location of employment or place of an alleged breach if you believe the processing of your personal data violates the GDPR's provisions. In Poland, this authority is the President of the Personal Data Protection Office.
   
7. Provision of personal data is voluntary.
   
8. None of your personal data is used for the purposes of automated decision-making.
   

(read more about your rights at the end of this document)

You have the right to object at any time, for reasons of your special situation, against the processing of your personal data based on your consent or on legally reasonable interests of the Administrator (see above), including the profiling. Following such objection, the Administrator is no longer allowed to process your personal data, unless the Administrator proves some important, legally reasonable grounds for the processing that supersede your interests, rights and liberties or if they demonstrate grounds for establishing, seeking or defence of any claims.

If you data is processed as set out above for the purposes of direct marketing, you have the right to object at any time to such processing for the purposes of direct marketing including profiling insofar as such processing is connected with such direct marketing. In case of such an objection, the Administrator is no longer allowed to processes you data for these purposes.

The objections described above can be submitted in any manner, in writing, by email or phone, using the Administrator's data set out in the introductino to this document.

You as the data subject have the following rights in relation to the PDA ('the Administrator'):

The right of access to data: Article of the GDPR. You have the right to access your data being processed by the Administrator (the Administrator will provide you with a copy of personal data being processed, possibly subject to payment under the GDPR) and to the information concerning: purpose of the processing; categories of relevant personal data; recipients or recipient categories to whom the data have been or will be disclosed, including if they are provided to non-EU states or international organisations; security measures associated with such provision ; if possible, planned time of personal data storage and, if not possible, criteria of determining such a period of time; the right to require the Administrator to correct, remove or limit processing of personal data and to object to such processing; right to complaint to a supervisory authority; if personal data has not been collected from you, information about their source; automated decision making including profiling and rules of such decision-making, as well as significance and anticipated consequences of such processing for yourself.

Right to correct the data: Article 16 of the GDPR. You have the right to require the Administrator to promptly correct any incorrect personal data concerning you. Subject to the purposes of the processing, you have the right to supplement incomplete personal data, including by means of additional statements.

The right to remove the data, i.e. to be forgotten: Article 17 of the GDPR. You have the right to require the Administrator to promptly remove your personal data if one of the following circumstances obtains: the personal data is no longer necessary for the purposes for which it has been collected or otherwise processed; the data holder has withdrawn their consent on which the processing is based and there are no other legal grounds for the processing; you object to the processing and there are no prevailing, legally reasonable grounds for the processing other than direct marketing; personal data is processed against the law; personal data must be removed to meet a legal obligation provided for by laws of the European Union or of a member state governing the Administrator; personal data has been collected for the purposes of information society services. The foregoing right does not apply, however, insofar as the processing is necessary: in exercise of the right to freedom of speech and information; for meeting a legal obligation that requires the processing by force of the laws of the European Union or of a member state governing the Administrator; or for performance of tasks in public interest or as part of exercise of public powers entrusted to the Administrator; for reasons of public interest in the area of public health; for archival purposes in the public interest, for scientific or historical research, or for statistical purposes, if the above right of the data owner is likely to prevent or seriously obstruct the realisation of the purposes of such processing; or for establishment, seeking or defence of any claims. 

The right to restrict the processing of data: Article 18 of the GDPR. You have the right to require the Administrator to restrict the processing in the following cases: you question the accuracy of personal data – for as long as the Administrator needs to check their accuracy; the processing of data is against the law and you object to a removal of processing data, demanding restrictions to their use instead; the Administrator no longer needs the data for the processing purposes but you need them to establish, seek or defend some claims; the data ownet has raised an objection to the processing – until it is determined whether the legally reasonable grounds of the Administrator prevail over the grounds of the objection of those these data concern, except for processing for the purposes of direct marketing. If the processing has been restricted, such personal data may be processed, except for storage, only with your consent or for the purpose of establishing, seeking or defending some claims, or for protection of rights of another natural person or legal entity, or for reasons of major public interest of the European Union or a member state.

The right to transfer data: Article 20 of the GDPR. You have the right to obtain your personal data the Administrator has received forom you in a structured, commonly used format suitable for machine reading and to send these personal data to another administrator without obstruction from the Administrator if: the processing is based on consent or an agreement and is automated. You have the right to require the Administrator to send the personal data directly to another administrator, if feasible technically.

The right to object to the processing of data: the Administrator has placed the information about these rights in the box below the key information, above.

You can exercise these rights in any manner including by emailing to kontakt@chirurgiaplastyczna.pl, mailing to the Administrator's address given at the start of this document or by phone at 887700700.

Cookies:

Our websites may use cookies to identify user sessions when using our services. These files assure corerct operation of the Website.

Cookies are text files stored on the website User's end device. They normally contain the name of their original website, time of storage on the end device, and a unique number.

Cookies used in Dr Paweł Szychta services don't store any personal data or other information from users. 

Data collection:

According to the common practice of most WWW services, we store HTTP queries to our server. This means we know the public IP addresses from which users view information contents of our service. The contents viewed are identified by means of URL addresses. We also know:

• Time of query arrival,
• Time of response dispatch,
• URL address of a website previously visited by a user (referrer link) – if Dr Paweł Szychta has been visited by reference,
• Information about the user's browser.

These data are not associated with specific individuals viewing Dr Paweł Szychta pages. To ensure the best possible quality of the service, we occasionally analyse log files to determine which websites are visited most often, which web browsers are used, whether a site structure has any errors, etc.

Use of data:

The data collected are the materia serving to administer the service. Information contained therein are not disclosed ty anyone other than persons authorised to administer our server and Dr Paweł Szychta network. Based on the log files, statistics to help the administration may be generated. Summaries of these statistics contain no features identifying visitors to our service.

Cookie types:

We use the following cookie types for the respective services:

The Service uses two types of cookies: session cookies and persistent cookies. The former are temporary files stored on the User's end device until log-out, leaving a site or browser. The latter are stored on the User's end device for a time set in cookie parameters or until the User deletes them.

Blocking of the cookies:

In order to block sending of such cookies, you need to change the settings of your browser so that it rejects or deletes certain cookie files. The links below contain the information on setting adjustments in the commonly used browsers:

Internet Explorer (http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies)

Safari (https://support.apple.com/kb/index?page=search&fac=all&q=cookies%20safari)

Google Chrome (https://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647)

Note: some website functions may not work on the blocking of cookies.

Changes

If the prevailing policy is amended, the foregoing statements will be modified as appropriate.