Privacy Policy

1. Data controller

The controller of your personal data is Book Clinic sp. z o.o., with its registered office in Lublin, ul. Gospodarcza 26, 20-231 Lublin, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001255413, NIP (tax ID) 9462770398, REGON 545289910 (the “Controller” or “BookClinic”).

For any matter concerning the processing of personal data or the exercise of your rights, you can contact us by email at hello@book.clinic, or by post at: Book Clinic sp. z o.o., ul. Gospodarcza 26, 20-231 Lublin, Poland.

2. Data we process

Depending on how you use the website, we may process the following data:

• data provided in the contact form or when booking a consultation: first and last name, phone number, email address and, optionally, the name of your clinic;
• if you consent to analytics cookies: data about your use of the website collected by Google Analytics (including pages visited, the source of your visit, button clicks, approximate location and device type), linked to a random identifier stored in a cookie;
• technical data recorded in standard server logs (including IP address and browser type), to the extent necessary to keep the website secure and working properly.

3. Purposes and legal bases of processing

We process your data for the following purposes and on the following legal bases (GDPR):

• handling your enquiry and arranging and holding a consultation: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract);
• sending confirmations and reminders about the consultation by email and SMS: Article 6(1)(b) and (f) GDPR (our legitimate interest in running the arranged meeting smoothly);
• marketing our own products and services, including sending commercial information, if you consent to it: Article 6(1)(a) GDPR (consent);
• statistics on the use of the website (Google Analytics), only if you consent to it: Article 6(1)(a) GDPR (consent);
• keeping the website secure and working properly: Article 6(1)(f) GDPR (legitimate interest);
• establishing, exercising or defending legal claims: Article 6(1)(f) GDPR (the Controller’s legitimate interest).

4. Recipients of data

Your data may be entrusted to trusted service providers who process it on our behalf, only to the extent necessary to provide their service and under data processing agreements (Article 28 GDPR):

• Vercel Inc.: website hosting and server logs;
• Calendly LLC: the booking calendar in which you book a call, together with email confirmations and reminders;
• Google Ireland Limited / Google LLC: website usage statistics (Google Analytics), only with your consent;
• Supabase: hosting of the database in which enquiries and consultations are stored;
• Resend: sending emails (confirmations, notifications);
• SMSAPI (LINK Mobility Poland sp. z o.o.): sending SMS messages.

5. Transfers of data outside the European Economic Area

Some of our providers (including Vercel, Calendly, Google, Supabase and Resend) may process data on servers located outside the European Economic Area, including in the United States. In that case, data is transferred on the basis of appropriate safeguards provided for in the GDPR, in particular the European Commission’s adequacy decision under the EU-U.S. Data Privacy Framework (Article 45 GDPR) for providers certified under it, and standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR). You can obtain a copy of these safeguards by contacting us at hello@book.clinic.

6. How long we keep data

We keep data for as long as necessary for the purposes for which it was collected, namely:

• data processed on the basis of consent: until the consent is withdrawn;
• data related to handling an enquiry or a consultation: for the time needed to handle it, and then until any claims become time-barred;
• data processed on the basis of legitimate interest: until an objection is successfully raised or the interest ceases to exist.

7. Your rights

In connection with the processing of your data, you have the right to:

• access your data and receive a copy of it (Article 15 GDPR);
• rectification (correction) of your data (Article 16 GDPR);
• erasure of your data, the “right to be forgotten” (Article 17 GDPR);
• restriction of processing (Article 18 GDPR);
• data portability (Article 20 GDPR);
• object to processing based on legitimate interest (Article 21 GDPR);
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR).

To exercise these rights, contact us at hello@book.clinic.

8. Right to lodge a complaint

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland (Article 77 GDPR).

9. Whether providing data is required

Providing data is voluntary, but necessary to handle an enquiry or book a consultation. If you do not provide the data marked as required, we will not be able to do so.

10. Automated decision-making

Your data is not used for automated decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

11. Cookies

The website uses two types of cookies:

• necessary: the bc_consent cookie remembers your cookie choice (for 12 months), and the bc_lang cookie remembers the language version of the website you chose (for 12 months, set only once you choose a language). They do not require consent;
• analytics: the _ga and _ga_* cookies (Google Analytics, kept for up to 14 months) let us count visits and see traffic sources and which buttons are used. We set them and load Google Analytics only after you give your consent.

On your first visit, we ask for your consent. Making no choice means no consent. If your browser sends a Global Privacy Control signal, we treat it as a refusal. You can change or withdraw your consent at any time by clicking “Cookie settings” in the website footer; withdrawing consent does not affect the lawfulness of processing before the withdrawal.

The booking calendar on the “Book a call” page is provided by Calendly and may set its own cookies necessary for it to work. Their use is described in Calendly’s privacy policy. We do not use marketing cookies or advertising pixels. You can also delete and block cookies in your browser settings.

12. Changes to this Privacy Policy

This policy may be updated from time to time, in particular following changes in the law or in the scope of the services provided. The current version is always published on this website together with the date of its last update.