AestePool Clinic
Privacy Policy
AestePool Clinic
Privacy Policy
- For the owner of this website, the protection of users' personal data is a matter of the utmost importance. They make every effort to ensure that users feel secure when entrusting their personal data while using the website.
- A User is a natural person, a legal person, or an organizational unit without legal personality—to which the law grants legal capacity—using electronic services available via the website.
- This privacy policy explains the principles and scope of the processing of the user's personal data, the rights available to the user, the obligations of the data controller, and also provides information regarding the use of cookies.
- The controller employs state-of-the-art technical measures and organizational solutions that ensure a high level of protection for the personal data being processed, as well as safeguards against access by unauthorized persons.
I. PERSONAL DATA CONTROLLER
The controller of personal data is AESTEPOOL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office at Z. Modzelewskiego 35/U8, 02-699 Warsaw, entered in the Register of Entrepreneurs maintained by the District Court for the capital city of Warsaw, Commercial Division, under KRS number 0001098014, NIP (Tax Identification Number): 5214064425 (hereinafter referred to as the "Owner").
II.PURPOSE OF PERSONAL DATA PROCESSING
1. The Controller processes the User's personal data for the purpose of:
a. properly executing a reservation for a service provided outside the EU.
a. properly executing a reservation for a service provided outside the EU.
b. consulting on the feasibility of providing a service on behalf of the user
c. preparation of a service proposal.
d. answers to questions by the user
c. preparation of a service proposal.
d. answers to questions by the user
2. This means that this data is needed, in particular, for:
a.conclusion of a contract;
b. settling accounts;
c. delivery of the goods ordered by the User or performance of services;
d.the exercise by the User of any consumer rights (e.g., withdrawal from the contract, statutory warranty).
3. The user may also consent to receiving information about new offerings and promotions; in such a case, the administrator will process the user's personal data for the purpose of sending the user commercial information, including details regarding new products or services, promotions, or sales.
4. Personal data are also processed in order to fulfill legal obligations incumbent upon the data controller, as well as to carry out tasks in the public interest—for instance, tasks related to security and defense, or the retention of tax records.
5.Personal data may also be processed for the purposes of direct marketing of products, securing and pursuing claims or defending against claims made by the User or a third party, as well as for the marketing of services and products of third parties or for own marketing that does not constitute direct marketing.
III. DATA TYPE
1. The controller processes the following personal data, which must be provided in order to perform the service offered:
- first name and surname;
- photos related to the question;
- phone number;
- e-mail;
2. When a service is booked through the Data Controller, the following personal data is processed for the purpose of properly providing the service:
- date and place of birth,
- correspondence/residential address.
- date and place of birth,
- correspondence/residential address.
IV. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
1. Personal data are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of the European Union L 119, 4.5.2016, pp. 1–88, hereinafter referred to as the "GDPR".
2. The Controller processes personal data solely upon obtaining the User’s prior consent, at the time the User confirms their acceptance on the website.
3. Providing consent for the processing of personal data is entirely voluntary; however, failure to provide such consent makes it impossible to consult on services via the website.
V. RIGHTS OF THE USER
1. The user may at any time request information from the controller regarding the scope of personal data processing.
2. The user may at any time request the correction or rectification of their personal data.
3. The User may withdraw their consent to the processing of their personal data at any time, without providing a reason. A request to cease data processing may relate to a specific purpose indicated by the User—for example, withdrawing consent to receive commercial communications—or it may apply to all purposes for which the data is processed. Withdrawing consent for all processing purposes will result in the deletion of the User’s account from the website, along with all of the User’s personal data previously processed by the controller. The withdrawal of consent shall not affect actions already taken.
4. The User may, at any time and without providing a reason, request that the administrator delete their data. A request for data deletion shall not affect actions already taken. The deletion of data entails the simultaneous removal of the User’s account, along with all personal data previously stored and processed by the administrator.
5. The User may, at any time, object to the processing of their personal data—either in relation to all personal data processed by the controller or within a limited scope, such as regarding the processing of data for a specific purpose. Such an objection will not affect actions already taken. Filing an objection will result in the deletion of the User’s account, along with all personal data previously stored and processed by the controller.
6. The user may request a restriction on the processing of their personal data—either for a specific period or indefinitely, but within a defined scope—and the controller shall be obliged to comply with such a request. This request shall not affect any actions taken prior to its submission.
7. The User may request that the controller transfer the User’s personal data to another entity. To do so, the User should submit a request to the controller, specifying the entity (by name and address) to which the personal data should be transferred, as well as the specific data the User wishes to have transferred. Once the User has confirmed their request, the controller will transfer the User’s personal data to the designated entity in an electronic format. This confirmation by the User is necessary to ensure the security of the User’s personal data and to verify that the request originates from an authorized person.
8. The Administrator shall inform the User of the actions taken within one month of receiving any of the requests mentioned in the preceding points.
RETENTION PERIOD FOR PERSONAL DATA
1. In principle, personal data is stored only for as long as is necessary to fulfill the contractual or legal obligations for which it was collected. Such data will be deleted as soon as its storage is no longer required for evidentiary purposes under civil law or in connection with a statutory obligation to retain data.
2. Information regarding the contract is retained for evidentiary purposes for a period of three years, starting from the end of the year in which the business relationship with the User concluded. The data will be deleted once the statutory limitation period for pursuing contractual claims has expired.
3. Furthermore, the controller may retain archival information regarding completed transactions, as the storage of such data is relevant to potential claims the User may have—for example, claims arising from the statutory warranty (rękojmia).
4. If no agreement has been concluded between the User and the Owner, the User’s personal data shall be stored until the User submits a notification to the Data Controller.
VII. ENTRUSTING DATA PROCESSING TO OTHER ENTITIES.
1. The controller may entrust the processing of personal data to entities cooperating with the controller, to the extent necessary for the provision of the service—for example, for the purpose of consulting on the execution of the service or transmitting commercial information originating from the controller (the latter applies to Users who have consented to receive such commercial information).
2. Apart from the purposes specified in this Privacy Policy, Users' personal data will not be shared with third parties in any way, nor will they be transferred to other entities for the purpose of sending marketing materials on behalf of such third parties.
3. Personal data of website users may be transferred outside the European Union (to Türkiye) for the purpose of properly providing the service.
4. This Privacy Policy complies with the provisions set out in Article 13(1) and (2) of the GDPR.
VIII. COOKIES
1. The website uses cookies or similar technology (hereinafter collectively referred to as "cookies") to collect information about the User's access to the website (e.g., via a computer or smartphone) and their preferences. These are used, among other things, for advertising and statistical purposes, as well as to tailor the website to the User's individual needs.
2. Cookies are pieces of information containing a unique reference code that a website sends to the User's device to store—and sometimes track—information regarding the device being used. They generally do not allow for the identification of the User. Their primary purpose is to better tailor the website to the User.
3. Some of the cookies used on the website are available only for the duration of a given web session and expire when the browser is closed. Other cookies serve to remember the User, allowing them to be recognized upon returning to the website; these are stored for a longer period.
4. The cookies used on this website are:
FACEBOOK for marketing purposes (cookie administrator: Facebook Ireland Ltd., based in Ireland),
GOOGLE AdWords for marketing purposes (cookie administrator: Google Ireland Limited, based in Ireland),
GOOGLE reCAPTCHA for functional purposes (cookie administrator: Google Inc., based in the USA),
GOOGLE Analytics for statistical purposes (cookie administrator: Google Inc., based in the USA),
JotForm for functional purposes (cookie administrator: Jotform LTD, based in England),
WordPress for functional purposes
FACEBOOK for marketing purposes (cookie administrator: Facebook Ireland Ltd., based in Ireland),
GOOGLE AdWords for marketing purposes (cookie administrator: Google Ireland Limited, based in Ireland),
GOOGLE reCAPTCHA for functional purposes (cookie administrator: Google Inc., based in the USA),
GOOGLE Analytics for statistical purposes (cookie administrator: Google Inc., based in the USA),
JotForm for functional purposes (cookie administrator: Jotform LTD, based in England),
WordPress for functional purposes
5. All cookies present on the website are set by the administrator.
6. All cookies used by this website are in compliance with applicable European Union law.
7. Most users and certain mobile browsers automatically accept cookies. Unless the user changes their settings, cookies will be stored in the device's memory.
8. The user may change their preferences regarding the acceptance of cookies or modify their browser settings to receive a notification whenever a cookie is being set. To change cookie acceptance preferences, please adjust the settings in your browser.
9. It is worth remembering that blocking or deleting cookies may prevent you from making full use of the website.
