Privacy Policy
Last updated: 22 July 2026
This Privacy Policy explains how Gizeru Clinic (Niemierzyńska 7, Szczecin, Poland, "the Clinic", "we") processes personal data of website visitors and patients, in accordance with Regulation (EU) 2016/679 (RODO/GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data, together with the Act of 6 November 2008 on Patient Rights and the Patient Rights Ombudsman where medical records are concerned.
1. Data Controller
The data controller for information collected through this website and in connection with clinical services is Gizeru Clinic, located at Niemierzyńska 7, Szczecin, Poland. Enquiries regarding data processing can be directed to [email protected] or +48 720 030 609.
2. Categories of Data We Process
The table below summarises the main categories of data processed through this website and general clinic operations, along with the purpose of each category.
| Category of Data | Examples | Purpose of Processing |
|---|---|---|
| Contact details | Name, email address | Responding to enquiries submitted via the contact form |
| Message content | Text entered into the contact form | Understanding and addressing the nature of the enquiry |
| Appointment data | Booking date, service requested, language preference | Scheduling and preparing for a visit |
| Health data (special category) | Medical history, test results, consultation notes | Providing clinical care and maintaining medical records as required by law |
| Technical data | Cookie identifiers, browser type, general usage patterns | Operating the website and, where consent is given, understanding site usage |
3. Legal Basis for Processing
Contact form submissions are processed on the basis of consent (Article 6(1)(a) RODO) given when the required checkbox is ticked. Medical record data is processed on the basis of necessity for the provision of healthcare (Article 9(2)(h) RODO) and in accordance with Polish medical documentation requirements, which mandate specific retention periods regardless of a patient's later request for deletion. Website technical data is processed on the basis of consent for non-essential cookies, as described in our separate Cookie Policy.
4. Retention Periods
Medical documentation is retained for the period required under Polish law governing medical records, generally 20 years from the last entry, with certain categories such as records concerning minors or cases involving death subject to different statutory periods. Contact form correspondence not related to an ongoing patient file is retained for as long as necessary to resolve the enquiry, typically no longer than 12 months.
5. Recipients of Data
Personal data may be shared with external diagnostic laboratories where a test cannot be processed on-site, with IT service providers operating under data processing agreements, and with public authorities where disclosure is required by law. Data is not sold or shared for marketing purposes with third parties.
6. International Transfers
Data is processed within the European Economic Area. Where a service provider is located outside the EEA, transfers rely on the European Commission's standard contractual clauses or an applicable adequacy decision.
7. Rights of Data Subjects
Under RODO, individuals have the right to request access to their data, rectification of inaccurate data, erasure where no overriding legal obligation requires retention, restriction of processing, data portability where technically feasible, and the right to object to processing based on legitimate interest. Requests can be submitted to [email protected]. Where processing relies on consent, that consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
8. Right to Lodge a Complaint
Individuals who believe their data has been processed unlawfully may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
9. Automated Decision-Making
No automated decision-making or profiling producing legal effects is applied to personal data collected through this website.
10. Changes to This Policy
This policy may be updated periodically to reflect changes in processing activities or legal requirements. The date at the top of this page indicates the most recent revision.