Privacy policy

The controller of personal data is Mateusz Nawrocki, physician, contact: Show e-mail address.

Scope, purpose and legal basis

• Server logs (IP address, request time, browser data) — operation and security of the website.
• E-mail correspondence (address, message content) — replying.

The legal basis is the controller’s legitimate interest (Art. 6(1)(f) GDPR). Providing data is voluntary. Visit statistics (Cloudflare Web Analytics) are aggregate and do not identify visitors. The website does not use cookies.

Recipients

Cloudflare, Inc. (hosting, statistics) and OVH SAS (e-mail) as processors. Data are transferred to the USA on the basis of Commission Implementing Decision (EU) 2023/1795 or standard contractual clauses.

Retention

Server logs — for as long as necessary to keep the website secure. Correspondence — until it is concluded, unless further storage is necessary for the establishment, exercise or defence of legal claims.

Rights

Data subjects have the right of access, rectification, erasure, restriction of processing and objection (Arts. 15–18 and 21 GDPR), and the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, Poland).