Privacy policy

Privacy policy

The purpose of this Privacy Policy is to explain the rules on which ARTROSKOP Centrum Medyczne Bogdan Wziętek collects, uses and protects your personal data, as well as to present your rights in connection with the processing of personal data by the Administrator.

Please read the information below.

Personal data administrator

The administrator of personal data obtained via the website available at https://www.wzietek.pl is ARTROSKOP Centrum Medyczne Bogdan Wziętek, 32-540 Trzebinia, ul. Bartosza Głowackiego 32, NIP 6331117377, e-mail: dr@wzietek. pl, phone: 32 223-61-77.

The administrator selects and applies appropriate technical and organizational measures to protect the processed data with due diligence, including protecting data against disclosure to unauthorized persons, as well as other cases of their disclosure or loss, and against destruction or unauthorized modification of the indicated data, as well as against their processing with violation of applicable law. The administrator exercises constant control over the course of data processing and limits access to data as much as possible, granting appropriate authorizations only when necessary.

If you have any questions regarding the processing of personal data, please contact us at the following e-mail address: dr@wzietek.pl with the note “RODO”.

Purpose and basis for data processing

We collect personal data in the following cases:

  • Contact form – the purpose of data processing (name, surname, telephone number, e-mail) is to provide an answer to your inquiry by electronic means (via an e-mail address) or by phone (including via SMS). Legal basis: GDPR art. 6 sec. 1 lit. b (handling inquiries) or art. 6 sec. 1 lit. a (ensuring proper handling of other queries);

  • Recruitment using forms or e-mails – the purpose of data processing (CVs, cover letters, additional information) is to consider your application in the recruitment process. Legal basis: GDPR art. 6 sec. 1 lit. b (in the case of recruitment in progress) or art. 6 sec. 1 lit. a (consent expressed in the content of the CV and cover letter; if you want your application to be used in other recruitments, write about it in the clause);

  • marketing of own services and sending commercial information regarding the Administrator’s activities – the purpose of data processing is for the Administrator to send commercial information regarding its offer and promotional materials. Legal basis: GDPR art. 6 sec. 1 lit. a and f;

  • fulfillment of legal obligations imposed on the Administrator of personal data. Legal basis: GDPR art. 6 sec. 1 lit. c;

  • arising from legitimate interests pursued by the Administrator or a third party, in particular for the purpose of investigating, determining and defending against claims, ensuring ICT security, for archival and statistical purposes, as well as for analytical purposes of data collected automatically when using the website, including cookies, e.g. Google Analytics cookies, Facebook pixel, Salesmanago.pl, Microsoft Bing Ads, as well as for profiling for marketing purposes, Legal basis: GDPR art. 6 sec. 1 lit. f.

As part of the website, the Administrator processes personal data that you have provided. Personal data may also be collected automatically in some situations using cookies, as described in the cookie policy available below.

Remember that providing personal data is voluntary, but it is required to achieve the purposes of processing described above. Without providing them, we cannot implement the above-mentioned goals.

The processing of data provided by you that is not mandatory or excess is based on your decision. Thus, the basis for the processing of this data by the Administrator is your consent (GDPR art. 6 sec. 1 lit. a.).

Data processing period

Personal data may be processed for the following period of time, respectively:

  • with regard to the purpose of processing defined in point 1 – for the period necessary to clarify the matter in connection with the receipt of the inquiry via the contact form on the website, and in the case of consent to receive commercial information – for the period necessary due to the Administrator’s business needs. The data will not be processed for longer than 1 year or until the consent to the processing of personal data is withdrawn;

  • in relation to the purpose of processing defined in point 2 – for the period necessary to carry out the ongoing recruitment process, and if the candidate has consented to the processing of data in the future recruitment processes, also later, but for a period not longer than 1 year;

  • with regard to the purpose of processing defined in point 3 – for the period necessary due to the Administrator’s business needs, but no longer than for 2 years or until the consent to the processing of personal data is withdrawn;

  • with regard to the purpose of processing defined in points 5 and 6 – for the period necessary to achieve the indicated purpose of processing, but not longer than for the period resulting from the provisions on archiving and limitation of claims and the provisions of tax law.

After the indicated periods, the data will be deleted.

Your rights

You have the following rights:

  • request access to your personal data, rectification, deletion or limitation of processing;

  • object to the processing of your personal data, including profiling;

  • transferring your personal data;

  • in the event that the processing is based on consent – to withdraw consent to data processing at any time, with the withdrawal of consent not affecting the lawfulness of processing based on consent before its withdrawal;

  • lodge a complaint with the supervisory body (personal data protection authority) when you decide that the processing of your personal data violates the provisions of the GDPR.

Data recipients

The recipient of personal data may be authorized employees of the Data Administrator, entities providing legal services, external service providers (e.g. entities providing IT services, entities handling mailing, entities providing accounting and tax services, other entities processing data on behalf of the Administrator on the basis of a data processing agreement personal data), as well as entities authorized under applicable law (in particular courts and state authorities).

Personal data will not be transferred to third countries and international organizations.

Due to the Administrator’s use of Facebook, Instagram and Microsoft services, your personal data may be transferred to the United States of America (USA). Portals use approved contractual clauses or apply security mechanisms indicated in the GDPR, where applicable, in the transfer of data from the European Economic Area to the United States and other countries.

The administrator may also use Google services, which maintains servers around the world, so personal data may be processed on servers located outside the European Economic Area. Google uses the security mechanisms provided for by the GDPR.

Detailed information on the processing of personal data is available in the privacy policy of each of these entities:

Meta Platforms Ireland Limited (i.e. Facebook, Instagram): https://www.facebook.com/privacy/explanation

Google LLC: https://policies.google.com/privacy?hl=pl

Microsoft: https://privacy.microsoft.com/en-us/privacystatement

Social media

The administrator of personal data on the fanpage (profile) on the social networking site Facebook and Instagram is Artroskop Centrum Medyczne Bogdan Wziętek.

The Administrator processes the data of Users who:

  • subscribed to a fanpage or other profile on a social network by clicking the “Like” or “Follow” icon,

  • posted their comment or clicked the “Like” icon or the same icon under any of the posts posted on the fanpage (profile).

The administrator may process the following data:

  • basic identification data (name and surname) to the extent published by Users on their own profiles on a social networking site,

  • data published by Users on a profile on a social networking site;

Users’ personal data may be processed for the following purposes:

  • running a fanpage under the name Artroskop Centrum Medyczne Bogdan Wziętek – a higher level of marketing on the Facebook social network, including for the purpose of administering and managing the fanpage and communicating with Users, on the terms and conditions set out by Facebook Inc., pursuant to art. 6 sec. 1 point a and f GDPR;

  • running a profile under the name artroskop_centrum_medyczne on the Instagram social network, including for the purpose of administering and managing the profile and communicating with Users, on the terms and conditions set out by Facebook Inc., pursuant to art. 6 sec. 1 point a and f GDPR;

  • possible determination, investigation or defense against claims, pursuant to art. 6 sec. 1 point f GDPR,

  • customer satisfaction surveys and determining the quality of products offered by the administrator, pursuant to art. 6 sec. 1 point f GDPR.

The recipient of Users’ personal data processed in connection with activity on a social networking site may be:

  • authorized employees of the Data Administrator,

  • entities related to the Administrator with a contract for the provision of services to ensure the functioning of a fanpage or other profile on Facebook, Instagram

  • the owner of the Facebook and Instagram social network to the extent resulting from ensuring the functioning of the fan page on Facebook and Instagram – in accordance with the regulations of this portal.

User data was obtained from Facebook, Instagram and from public profiles of Users on the indicated internet platforms.

Users’ personal data will be stored for the period necessary due to the Administrator’s business needs, for the period of running the fanpage (profile) or until the User objects to their processing, withdraws consent – if the data was processed on the basis of consent, or the Administrator himself finds that that the data is outdated.

The User has the rights listed in this Privacy Policy.

Profiling

The administrator does not make decisions that have legal effect or that affect you in a similar way. Your personal data may be processed in the form of profiling in order to carry out marketing activities by the Administrator. Automated data processing allows you to evaluate selected behaviors, create forecasts of behavior for the future and display marketing content. However, this does not affect your legal position. You have the right to object to profiling if it would have a negative impact on your rights and obligations.

Changing the privacy policy

The Data Administrator reserves the right to change the Privacy Policy, if it is required by applicable law, the technological conditions for the functioning of the Website change, or the change introduces a higher standard than the minimum required by law.

Cookies policy

Cookie files (so-called cookies) are IT data, in particular small text files sent by the visited website to the Internet user’s device. This means that if you use the Website available at: https://www.wzietek.pl/ (hereinafter: the Website), cookies will be saved on the User’s end device.

The entity placing cookies on the Website User’s end device and accessing them is the Website operator: ARTROSKOP Centrum Medyczne Bogdan Wziętek, 32-540 Trzebinia, ul. Bartosza Głowackiego 32, NIP 6331117377.

Cookies are used to:

  • enabling the use of services available as part of the website (e.g. authentication);

  • creating statistics that help to understand how Website Users use the website, which allows adjusting the content of the website to the User’s preferences and optimizing the use of the website; in particular, these files allow to recognize the Website User’s device and properly display the website, tailored to his individual needs;

  • remembering the settings selected by the User and personalizing the interface;

  • collecting information on how the website is used, observing Users’ preferences (including through the built-in code of Google Analytics, Salesmanago, Yandex.Metrika);

  • managing Facebook ads and conducting remarketing activities (Facebook pixel);

  • providing the User with advertising content more tailored to the interests;

  • enabling referral to the website of an external provider, including the owner of the social network Facebook, Instagram.

The Website uses two basic types of cookies: “session” (session cookies) and “permanent” (persistent cookies). Session cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or turning off the software (web browser). “Permanent” cookies are stored on the User’s end device for the time specified in the cookie file parameters or until they are deleted by the User.

The following types of cookies are used on the Website:

  • “necessary” cookies, enabling the use of services available on the Website, e.g. authentication cookies used for services requiring authentication on the Website;

  • cookies used to ensure security, e.g. used to detect fraud in the field of authentication within the Website;

  • “performance” cookies, enabling the collection of information on how to use the Website’s pages;

  • “functional” cookies, enabling “remembering” the settings selected by the User and personalizing the User’s interface, e.g. in terms of the selected language or region from which the User comes from, font size, website appearance, etc.;

  • “advertising” cookies, enabling the provision of advertising content to Users more tailored to their interests.

User can reject all or some cookies. At any time, the User may also change the browser settings for cookies. In most web browsers, you can delete cookies from your computer’s hard drive, block sent cookies, or set a warning before saving them on your hard drive. Detailed information on the possibilities and ways of handling cookies are available in the web browser settings. The method of changing cookie settings may differ depending on the web browser used.

Please note that limiting or disabling the use of cookies may affect some of the functionalities available on the Website. If you do not change these settings and use the Website, you accept the use of cookies.

Third-party cookies

The Administrator on the Website uses web components and javascript scripts of partners who can place their own cookies on the user’s device. Web browser settings give you the ability to make independent decisions about allowed cookies used by individual websites. Below is a list of partners or their services implemented on our website that may place cookies:

keeping statistics:

  • Google Analytics

  • Google TagManager

The administrator has no control over the services provided by third parties, which may change the terms of their services, privacy policy, the purpose of data processing and the use of cookies at any time.

More about how Google uses data from websites can be found HERE