Privacy Policy

Draft — this document requires legal review before publishing.

1. Data controller

The data controller for the personal data processed in connection with this website is [[COMPANY NAME / ADDRESS / TAX ID]] (the "Controller").

For any questions about the processing of your personal data, contact us at biuro@terapia-si.com.

2. Scope and purposes of processing

We process personal data in the following scope and for the following purposes:

Contact form (name, email address, message content) — to respond to your inquiry. The contact form is currently in development; until it ships, contact happens via an email sent directly to biuro@terapia-si.com, in which case we process whatever data you include in that message.
Server and CDN logs (e.g. IP address, timestamp, browser type) — collected automatically by our hosting/CDN provider (Cloudflare) to keep the site secure, stable, and running correctly.

3. Legal bases for processing (GDPR Art. 6)

We process personal data on the basis of:

GDPR Art. 6(1)(a) — your consent, given by sending us an inquiry (e.g. via the contact form or email);
GDPR Art. 6(1)(f) — our legitimate interest in keeping the site secure and detecting abuse (server/CDN logs).

4. Recipients and processors

The following categories of recipients may have access to personal data as processors:

Cloudflare, Inc. — the hosting and CDN provider this website runs on;
[[email provider — future phase]] — the email-sending provider planned alongside the contact form.

We do not share personal data with any other party without a valid legal basis.

5. Retention period

We keep personal data for no longer than necessary to fulfil the purposes described in this policy, i.e. for [[RETENTION PERIODS]] — set separately for email/contact-form correspondence and for server/CDN logs.

6. Your rights

In connection with the processing of your personal data, you have the right to:

access your data (GDPR Art. 15);
rectify your data (GDPR Art. 16);
erase your data, the so-called "right to be forgotten" (GDPR Art. 17);
restrict processing (GDPR Art. 18);
data portability (GDPR Art. 20);
object to processing (GDPR Art. 21).

To exercise any of these rights, contact us at biuro@terapia-si.com.

7. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw (GDPR Art. 77).

8. Cookies and analytics

This website does not use cookies or any other tracking technology. Visit analytics is disabled by default. If we decide to enable Cloudflare Web Analytics in the future (a cookie-free measurement that does not require tracking consent), this section will be updated to reflect that.

9. Transfers outside the European Economic Area (EEA)

[[if applicable — Cloudflare]] — to the extent our hosting/CDN provider processes data outside the EEA, this happens under the appropriate GDPR safeguards (e.g. standard contractual clauses).

10. Changes to this policy

This policy may be updated from time to time, in particular as the site evolves and new features ship (e.g. the contact form). Last updated: [[LAST UPDATED DATE]].