Privacy Policy

1. General information

This Privacy Policy describes the rules governing the processing of personal data of persons using the PRO LUCRUM website and contacting us via the contact form, telephone, email or appointment booking system.

We process personal data in accordance with applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).

2. What data may we process?

Depending on how you contact us or use the website, we may process in particular:

• first name and surname,
• email address,
• telephone number,
• the content of messages sent via the contact form,
• data provided when booking an appointment,
• technical data related to the use of the website, if automatically processed by the server, website platform or services used by the website.

Please do not provide information concerning your health or other special categories of personal data through the standard contact form unless this is necessary to handle your enquiry.

3. Contact form and email communication

Data provided through the contact form or sent directly to our email address is used to respond to your enquiry, contact you and, where applicable, arrange or organise an assessment appointment.

Providing personal data is voluntary. However, failure to provide the information necessary to contact you may prevent us from responding to or handling your enquiry.

Depending on the nature of the enquiry, the legal basis for processing may be taking steps at the request of the data subject prior to entering into a contract or performance of a contract (Article 6(1)(b) GDPR), or, in other cases, the controller's legitimate interest in handling correspondence and enquiries (Article 6(1)(f) GDPR).

4. Online appointment booking

The website may contain a link allowing users to book an assessment appointment using a Google service.

When making a booking, information such as your first name, surname, email address and telephone number may be required. This information is used to manage the booking, contact you regarding the appointment and organise the assessment.

The legal basis for processing this data is taking steps at the request of the data subject prior to entering into a contract or performance of a contract (Article 6(1)(b) GDPR).

5. Google Maps

We use Google Maps on the website to display the location of our practice and make it easier for users to find the correct address.

When the map is displayed, Google may process certain technical information relating to your device or use of the service. The scope and rules governing Google's processing of this data are determined by the provider's privacy policy.

Information about Google's privacy practices is available at: Google Privacy Policy .

6. Cookies and technical data

The website may use cookies and similar technologies necessary for its proper and secure operation.

When using third-party services such as Google Maps, their providers may also use cookies or similar technologies in accordance with their own privacy policies and the user's settings.

Users can manage cookies through their browser settings. Restricting certain technologies may affect the operation of selected website features.

We currently do not use Google Analytics or Meta Pixel on the website for analytics or marketing purposes. If such tools are implemented in the future, this Privacy Policy will be updated accordingly and, where required by law, an appropriate consent mechanism will be introduced.

7. Recipients of personal data

Personal data may be disclosed or entrusted to entities that support us in operating the website and handling communications, solely to the extent necessary for the relevant purposes.

These may include in particular:

• the website platform and hosting provider,
• email service providers,
• Google – in connection with the use of the booking system and Google Maps,
• IT service providers supporting the website or systems,
• entities authorised to obtain data under applicable law.

8. Transfers of data outside the European Economic Area

The use of services provided by global providers, particularly Google services, may in certain cases involve the processing of data outside the European Economic Area.

In such cases, service providers use legal mechanisms provided for under data protection laws governing international transfers of personal data.

Detailed information about the rules applied by Google can be found in the provider's privacy policy.

9. How long do we retain personal data?

Data processed in connection with an enquiry or correspondence is retained for the period necessary to handle the matter, and subsequently for a period justified by the need to establish, pursue or defend possible claims and to comply with legal obligations.

Data related to a booking or the provision of a service may be retained for the period necessary to provide the service, and subsequently for the period required by applicable law or justified by limitation periods for claims.

10. Rights of data subjects

Subject to the conditions set out in the GDPR, data subjects may have, in particular, the following rights:

• the right to access their personal data,
• the right to rectify their personal data,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability – where applicable,
• the right to object to processing – where processing is based on the controller's legitimate interests,
• the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn.

The scope of individual rights depends on the legal basis and circumstances of the specific processing activity.

To exercise your rights, please contact us at: kontakt@prolucrum.waw.pl .

11. Right to lodge a complaint

If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

More information is available on the official website of the: Personal Data Protection Office .

12. Automated decision-making

Data provided through the contact form and in connection with appointment bookings is not used by us to make decisions concerning users based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.

13. Data security

We use appropriate organisational and technical measures designed to protect the personal data we process against unauthorised access, loss, alteration or unauthorised disclosure, taking into account the nature of the data processed and the associated risks.

14. Changes to this Privacy Policy

This Privacy Policy may be updated in the event of changes to the operation of the website, the implementation of new services or tools, or changes to legal requirements.

The current version of the Privacy Policy will be published on this page.