Privacy policy

At this stage the website only serves to announce the opening of the SOOS clinic. We process:

• technical data on every visit (server log files),
• the data you give us on the waitlist: e-mail address, selected city, date and wording of your consent,
• information about your cookie choices,
• the content of your message if you e-mail us.

We do not collect health data through this website. Please do not send such information by e-mail.

Hosting and server log files

The website is hosted on the Webflow platform (Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA). On every visit your browser automatically transmits data: IP address, date and time of the request, the page requested, the referring page, browser type and version, operating system and the server response code. This data is stored in server log files.

We process it to deliver the website, keep it stable and secure, and detect misuse. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We cannot identify you from this data (Art. 11 GDPR).

Fonts and images are served from Webflow's servers. We do not use Google Fonts or other external font libraries.

Waitlist

If you join the waitlist, we process your e-mail address and selected city to send you one message about the opening of the SOOS clinic in that city. We send no newsletter and no reminders. Providing your data is voluntary, but without an e-mail address we cannot notify you.

The legal basis is your consent (Art. 6(1)(a) GDPR) and your consent to receive information by electronic means (Art. 398 of the Polish Electronic Communications Law of 12 July 2024).

To be able to prove your consent, we record the date and time of sign-up, the wording of the consent and the language of the form. The legal basis is our legal obligation (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

You can withdraw your consent at any time via the link in the e-mail or by writing to kontakt@soosclinic.pl. Withdrawal does not affect the lawfulness of processing carried out before it.

Form submissions are stored in the Webflow platform (Webflow, Inc., USA), which acts as our processor. We do not create profiles or make automated decisions about you.

Consent management tool

We use Usercentrics (Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany) to manage cookie consent. The banner lets you consent to selected services, refuse, or withdraw your consent later.

To document your choices, we store a consent ID, date and time, banner version, the choices made, and information about your browser and device. The legal basis is our legal obligation (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). Storing your choices in your browser is necessary for the banner to work and does not require consent.

Contact by e-mail

If you write to us, we process your e-mail address and the content of your message in order to reply. The legal basis is our legitimate interest in answering (Art. 6(1)(f) GDPR) or, where your message concerns entering into a contract, Art. 6(1)(b) GDPR.

We use processors that act only on our instructions and under data processing agreements (Art. 28 GDPR):

Data may also be received by providers of IT, accounting and legal services to us, and by public authorities where the law requires it.

Transfers outside the EEA. Webflow is based in the USA. Data may be transferred to the USA on the basis of the European Commission's adequacy decision for companies certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and otherwise on the basis of standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). You can obtain a copy of these safeguards by writing to kontakt@soosclinic.pl.

We keep data only for as long as needed for the purpose for which we collected it, or to meet our contractual and legal obligations. Retention obligations may arise in particular from tax and accounting rules.

• Server log files: up to 12 months. We keep them longer only if specific circumstances point to misuse of the website and the data is needed to investigate it.
• Waitlist: until the message about the opening of SOOS in your selected city has been sent, or until you withdraw your consent if that happens earlier. We then delete the data.
• Consent records and data related to complaints and claims: until the statutory limitation periods for claims expire.
• E-mail correspondence: until the matter is closed, then until the statutory limitation periods for claims expire.

If you withdraw your consent or object to processing for marketing purposes, we will delete the data stored for that purpose.

You have the right to:

• access your data (Art. 15 GDPR),
• have your data rectified (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw your consent at any time (Art. 7(3) GDPR),
• lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw, Poland (Art. 77 GDPR).

Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 6(1)(f) GDPR) (Art. 21 GDPR).

To exercise your rights, write to kontakt@soosclinic.pl. We process the data you provide for this only to handle your request and to prove that we did so (Art. 6(1)(c) GDPR).