Hello! If you have landed on this page, it means that the protection of your personal data is important to you. We want to assure you that we care about your privacy and it is important to us. For this purpose, we have implemented not only legal but also technical measures to further enhance its protection. In accordance with the GDPR, below we present the principles of processing your personal data by us. Please familiarize yourself with the key questions regarding your personal data, and if you have any doubts regarding the Privacy Policy, please feel free to contact us at sperzewska@gmail.com.

§1 Who is the Controller of your personal data?

The Controller of the data is Sylwia Perzewska, conducting business under the name of Psychoterapia Latawiec, VAT: 5862103539, address: ul. Słowackiego 48/8, Gdynia. You can contact the Controller by writing to the email address: sperzewska@gmail.com.

§2 For what purpose do we collect your data and how long do we store it?

We may process your data for the following purposes:

1. Communication with you, including responding to inquiries submitted through the contact form, email messages, etc.

The data will be processed based on the legitimate interest of the Controller, in the form of communication with Users of the Website (Art. 6(1)(f) of the GDPR). Your data will be processed no longer than until you object or the business purpose ceases. Providing this data is voluntary but necessary for communication with you. The data may also be processed during the archiving process for internal purposes, based on the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR), until you object or the business purpose ceases.

2. Contract conclusion and performance (placing an order);

3. Establishing, defending, and pursuing claims;

4. Fulfilling legal obligations imposed on the Controller (including tax and archiving obligations)

Data necessary for the conclusion and performance of the contract will be processed for the duration of the contract, including the period of exercising rights arising from the contract, such as the right to warranty claims (Art. 6(1)(b) and (f) of the GDPR). Providing this data is voluntary but necessary for the conclusion and performance of the contract.

Additional data provided to improve the performance of the contract will be processed no longer than until you object or the business purpose ceases, based on the legitimate interest of providing customer service (Art. 6(1)(f) of the GDPR).

After this time, the data will be processed for the period of limitation of claims, based on the legitimate interest of the Controller for defense against claims and to establish and pursue claims (Art. 6(1)(f) of the GDPR).

If the data is necessary for the fulfillment of legal obligations imposed on the Controller (such as issuing and storing invoices), the data will be processed for this purpose for no longer than 6 years (archiving obligations concerning accounting documents), unless the law requires a longer period (Art. 6(1)(c) of the GDPR).

The data may also be archived for internal and statistical purposes until you object or the business purpose ceases, based on the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR).

5. Providing marketing information (including sending newsletters and information about services, products, promotions, free content using other tools, e.g., chatbot, telephone)

The data will be processed based on the legitimate interest of the Controller, in the form of marketing the Controller's products and services (Art. 6(1)(f) of the GDPR). The data will be processed no longer than until you object or the business purpose ceases, depending on which occurs earlier. Providing the data is voluntary but necessary to receive marketing/commercial information. According to the Act on Providing Services by Electronic Means, for the purposes of maintaining commercial communication, I need your consent. You can withdraw it at any time by clicking the link in the email footer or by contacting me at the address provided above.

6. Administration and management of pages and groups on social media platforms (including Facebook (Meta), Instagram, LinkedIn), in the case of processing data on social media platforms, including communication and directing marketing content.

This data will only be processed when you choose to like the page/join the group/select the "Follow" option or in any other way provide your data on the platform managed by me, such as posting a comment or post. The data will be processed for the duration of the existence of the page/group or until you object, which can be done by unliking, unfollowing, deleting a comment/post, or in any other way provided within the platform/page or by contacting me. Please note that the rules regarding the page/fan page/group are determined by the Controller, while the rules for using the social media platform on which the page/fan page/group is posted are determined by the entity managing those platforms.

7. Analytical and statistical purposes;

Processing data for analytical and statistical purposes involves, in particular, analyzing data automatically obtained when using the website, including cookies. The data is processed based on the legitimate interest of the Controller, in the form of adapting the content of the website to user preferences and optimizing the use of the website, creating statistics to understand how users use the website, which allows for improving its structure and content (Art. 6(1)(f) of the GDPR). The data may also be archived for internal and statistical purposes based on the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR), until you object or the business purpose ceases.

8. Recovering abandoned carts;

In the event that you do not complete an order, you will receive a reminder about the started but unfinished order. The data will be processed based on the legitimate interest of the Controller, in the form of serving potential and actual customers (Art. 6(1)(f) of the GDPR). This data will be processed for the time necessary to achieve business goals or until you object.

9. Posting comments;

Data visible on our Website in relation to posted comments is processed by us for the purpose of administering and servicing the Website and for communicating with you, based on the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR), for the duration necessary to achieve business goals or until you object.

10. Promotion and marketing;

In the event that you provide us with your data, particularly in the form of opinions regarding a product or service, including data related to images, they will be processed based on the legitimate interest of the Controller, in the form of marketing, for the purpose of improving the quality of services and products and promoting the services and products of the Controller. This data will be processed for the necessary duration to achieve business goals or until you object. Providing the data is voluntary.

11. Collection of sensitive data;

Sensitive data is collected for the purpose of fulfilling the contract and properly executing it, based on your informed and voluntary consent (Art. 9(2)(a) of the GDPR), until the business purpose ceases or the consent is withdrawn. Providing the data is voluntary but necessary for the proper performance of the contract.

§3 To whom may we disclose your data?

We only disclose your data to other entities when it is necessary to achieve the processing purposes mentioned in §2 and only to the extent necessary to achieve these purposes. As a rule, we collect and process only the data that you provide to us, with the exception of data collected automatically (cookies). More information about cookies can be found in §7.

If necessary, your data may be transferred to entities with which we cooperate in the fulfillment of the aforementioned purposes, particularly to a hosting company, an IT company/website manager, an accounting services company, an invoice software provider, a newsletter service provider, a cloud services provider, marketing service providers, administrative service providers, consulting service providers, subcontractors, lawyers, couriers or postal operators, training platforms, social media platforms, customer support platforms, appointment scheduling platforms, product-sharing platforms, or service providers that support the Controller in the fulfillment of processing purposes.

As a rule, the data will not be transferred outside the EEA, except in the cases described below. In other cases, if the data is transferred outside the EEA, it will be done based on your consent, standard contractual clauses, or other safeguards provided for in the GDPR, after fulfilling, among others, the information obligation.

Services provided by Google or Facebook (META) are generally performed by entities headquartered in the European Union. However, due to the global nature of the activities of these entities, your data may be transferred to the USA, as they are stored on American servers (in whole or in part). Regardless, Google and Facebook have implemented safeguards compliant with the requirements of the GDPR to protect personal data through the use of standard contractual clauses. More information about the processing of data by these providers can be found in the Privacy Policies of each entity.

Your data (if it results from the processing purpose) may also be transferred outside the EEA to the following entities:

1) Active Campaign LLC 1 N Dearborn St., 5th Floor, Chicago, Illinois 60602

2) Asana, Inc., 1550 Bryant Street, 2nd Floor San Francisco, California 94103,

3) ...

§4 What are your rights?

In accordance with the GDPR, you have the right to access your personal data, rectify your personal data, erase your personal data, restrict the processing of your personal data, object to the processing of your personal data, data portability, withdraw consent to the processing of your data; withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Detailed information regarding these rights can be found in the GDPR regulation, namely in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the President of the Office for Personal Data Protection. However, I encourage you to contact me beforehand to clarify your doubts.

§5 Is your data subject to profiling?

The Controller analyzes personal data in an automated manner using software tools (e.g., statistics, history) only to the extent that does not have any legal effects on you or significantly affect your situation, including your guaranteed rights and freedoms. The purpose of processing data in an automated manner is to understand user preferences (more information about analysis can be found in §7 Cookie Policy).

§6 Applicable personal data laws

In matters not regulated, relevant provisions of law, including European law (including the GDPR), apply.

§7 Cookie Policy

The Website does not automatically collect any information except for information contained in cookies. This data is collected in a way that does not allow the identification of the User, i.e., anonymous data.

Cookies are computer data, particularly text files, that are stored in the User's end device and are intended for using the Website. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.

Cookies are used for the purpose of adapting the content of the Website to the User's preferences, optimizing the use of the Website, and creating statistics that help understand how Users use the Website, allowing for the improvement of its structure and content.

You can independently make changes to the settings regarding cookies. In many cases, web browsers allow the storage of cookies in the end device by default. Detailed information about the possibilities and methods of handling cookies is available in the software settings (web browser). Refusing to consent to cookies may limit the functionality of certain features on the Website. The Controller uses technologies to observe the actionsof the User within the Website:

Facebook Conversion Pixel (Meta) provided by Meta Platforms Ireland Limited: This is used for managing advertisements on Meta and conducting remarketing activities. The Facebook Pixel is a piece of code placed on the website that allows targeting a specific audience based on the data of users who have visited the website. The purpose of the Facebook Pixel is to display relevant ads on Meta platforms to users who have shown interest in products, services, or share common characteristics with those individuals. This data is processed based on the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR). More detailed information about the Facebook Pixel can be found in the Privacy Policy of Facebook (Meta).

Google tools, including Google Analytics provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA: The data obtained through these tools is used for the analysis of website statistics. Google Analytics uses its own cookies to analyze user actions and behaviors on the Website. These cookies are used to store information such as the website from which the user accessed the current website. They help improve the Website. This data is processed based on the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR). More detailed information about Google Analytics can be found on the Google Tools Usage Policy.

§8 Social plugins

The Website uses social plugins, widgets, and other social media tools provided by platforms such as Facebook (Meta), Instagram, YouTube, and LinkedIn. The privacy policies regarding the processing of personal data are described directly on the pages of these Service Providers.

§9 Joint controllership

Data processed for statistical purposes collected within the Facebook (Meta) platform is jointly controlled by the Controller and Meta Platforms Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. Detailed information about joint controllership, including information about your rights, is described in the Privacy Policy.

Data processed within the LinkedIn platform is jointly controlled by the Controller and LinkedIn Ireland Unlimited Company, address: Legal Dept. (Privacy Policy and User Agreement), Wilton Place, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. Detailed information about joint controllership, including information about your rights, is described in the Privacy Policy.

The Controller processes data based on the legitimate interest of the Controller, which includes analyzing the activities and preferences of Users to improve the applied functionalities and services. Regarding personal data matters, you can contact both the Controller and the Joint Controller.