Privacy Policy
Pracownia Terapii i Rozwoju HEFIO
§1. General provisions
- The controller of personal data is Pracownia Terapii i Rozwoju HEFIO Paulina Gorazdowska, ul. Śląska 66b, 80-387 Gdańsk, Poland, tax identification number (NIP): 9581624593. Data is protected in accordance with applicable law and stored on secured media and servers.
- Terms are interpreted according to the glossary of the Terms of Service or the meaning that follows directly from this Privacy Policy.
- For ease of reading:
- “User” means a person who uses the services or the website of HEFIO,
- “Controller” means Pracownia Terapii i Rozwoju HEFIO,
- “GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
- We respect your right to privacy and take care of the security of your data. To this end we use, among other things, the secure SSL encryption protocol (the padlock symbol in your browser’s address bar).
- Personal data submitted in contact forms or when booking a consultation is treated as confidential and is neither visible nor disclosed to unauthorised persons.
§2. Data controller
- Pracownia Terapii i Rozwoju HEFIO Paulina Gorazdowska is the controller of its clients’ personal data. This means that if you use the contact form or sign up for a consultation or workshop, data such as your first name, surname, e-mail address, phone number and IP address may be processed, and in the case of sessions also information necessary to provide the psychological service.
- Personal data is processed:
- in accordance with data protection law,
- to the extent necessary to get in touch, hold a session, issue a document or settle payment for a service,
- to the extent and for the purpose covered by the consent you have given – for example when booking an online consultation, taking part in a workshop or corresponding by e-mail,
- in the legitimate interest of the controller, for example to protect against claims or to keep necessary therapy records.
- Every data subject has the right to:
- access their data,
- rectify their data,
- have their data erased or its processing restricted,
- object to processing,
- lodge a complaint with the supervisory authority (the President of the Polish Personal Data Protection Office, UODO).
- Contact regarding the processing of personal data: e-mail: kontakt@hefio.pl, phone: 690 199 218.
- After services have ended, data may be kept only to the extent required by law or to secure possible claims.
- The controller may disclose personal data only to authorised public authorities where required by law.
- Data may be erased at your request, unless the law requires it to be kept longer (for example medical records).
- The controller does not transfer personal data to other parties for marketing or commercial purposes.
- Technical and organisational measures are used to protect data: encryption, access control and secure information storage systems.
- Data is processed only by persons authorised by the Controller who are bound by confidentiality.
§3. Cookies
- The website hefio.pl (or another related domain) may use cookies. Cookies are small text files stored in the user’s browser that allow the website to work properly and traffic to be analysed.
- The information collected may concern:
- IP address,
- browser type and operating system,
- language and location,
- the time of the visit and the pages viewed.
- Cookies are used to:
- ensure the website works properly,
- analyse traffic and statistics (for example with Google Analytics),
- adapt the content of the website to the user’s preferences.
- Types of cookies used:
- strictly necessary – enabling the basic functions of the website,
- analytical – helping to analyse how the website is used,
- functional – remembering settings chosen by the user (for example language or layout).
- Users can change their cookie settings in their browser at any time or disable cookies completely. Instructions are available at: www.allaboutcookies.org/manage-cookies
- Additional personal data, such as an e-mail address, is collected only when the user provides it voluntarily (for example in the contact form). This data is used only for the purpose for which it was provided.
This Privacy Policy applies from 1 January 2025 and remains in force until revoked.
