PRIVACY POLICY of Rehasport Clinic Sp. z o.o.

It is our priority to ensure our Customers’ data confidentiality and privacy protection. Due to the above, in order to protect your data and following the current rules of law, Rehasport Clinic Sp. z o.o. has established a policy that lays out the rules for personal data collection, processing and use.

The purpose of this Privacy Policy of Rehasport Clinic Sp. z o.o. is to clarify how we proceed
with your information. The phrases and terms used in this Policy shall have the following meaning:

personal data – within the meaning of Article 4 (1) od the GDPR, this includes any information
about an identified or identifiable natural person (“data subject”); an identifiable natural person is a person that can be identified directly or indirectly;

processing – within the meaning of Article 4 (2) of the GDPR, this includes an operation or series of operations performed automatically or non-automatically on personal data or personal data sets, such as collection, recording, organisation, sorting, storage, adaptation or modification, downloading, browsing, use, disclosure by sending, dissemination or other type of provision, fitting or combining, limitation, deletion, destruction;
GDPR – Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to personal data protection
and on the free movement of such data, and repealing the Directive 95/46/EC (General Data Protection Regulation);

Administrator – within the meaning of Article 4 (7) of the GDPR, a data administrator, i.e. an entity that establishes the purposes and methods of personal data protection independently or in cooperation with others. Whenever this Policy refers to the Administrator, this shall be construed as Rehasport Clinic Sp. z o.o., which independently decides on the purposes and methods of personal data processing;

If you want to know the details of our processing and use of your personal data, we encourage you to read our Privacy Policy document.

What data can be process?

The range of personal data that we will process can differ depending on the service you use. We can obtain your personal data in the following manner:

when you use the services provided electronically, via the website and when making contact using the contact details provided on the website:

In order to use some of the functionalities offered by our sites, you will have to be logged in or registered.

Some functionalities and services do not require logging in, nevertheless access to them requires sending relevant forms.

We can also obtain your data when you contact us using the contact details provided on the website.

automatically, when you use the website:

When you visit our websites and use our sites, we automatically collect the data on your visit and activity, especially your IP address, domain name, browser type and operating system. More information is available in the cookies policy (see the Cookies Policy of Rehasport Clinic Sp. z o.o. ).

As part of its activity outside of the site, Rehasport Clinic Sp. z o.o. can also process other personal data. Below we present links containing detailed information concerning Rehasport Clinic Sp. z o.o.’s processing of your data.

Personal data processing by Rehasport Clinic Sp. z o.o. on social media:

Personal data processing by Rehasport Clinic Sp. z o.o. i in relation to the provision of health and healthcare services.

Personal data processing by Rehasport Clinic Sp. z o.o. in relation to marketing activities and communication.

Personal Data Processing

§ 1. Data Administrator and Personal Data Inspector

PERSONAL DATA ADMINISTRATOR

The Administrator of your personal data is Rehasport Clinic Sp. z o.o. with registered seat in Poznań,
ul. Górecka 30, 60-201 Poznań.

Data Protection Inspector

We have designated a Data Protection Inspector. It is a person that you can contact in any matter concerning personal data processing and exercising your rights related to data processing. You can contact the Inspector in the following manner:

by mail at: Joanna Wiese, Rehasport Clinic Sp. z o.o. , ul. Górecka 30, 60-201 Poznań
by e-mail: iod@rehasport.pl

§ 2. What data do we collect and how we use it?

Whenever we ask you to provide any personal data, we provide information on its processing conditions.

We can collect your personal data using forms or in connection with the functioning of your account on the site. We can also collect your personal data if you write to use or call us by using the contact data provided on the site or in this Privacy Policy.

Rehasport Clinic Sp. z o.o. can use your data, among others, for the following purposes:

in connection to the provision of services by Rehasport Clinic Sp. z o.o. to you, i.e. to take action aimed at concluding an agreement related to your request, including for the purpose of preparing a dedicated offer, and in the case of conclusion of an agreement between you
and Rehasport Clinic Sp. z o.o. also for the purpose of performing the agreement based on Article 6 paragraph 1 (b) of the GDPR until the completion of the agreement’s subject or until the agreement’s termination or expiration;
if you are using paid services or services financed from public funds as part of a refund, to meet the legal obligations imposed on Rehasport Clinic Sp. z o.o., including obligations derived from the accounting and tax acts based on Article 6 paragraph 1 (c) of the GDPR in connection to the wording of those acts for the period derived from their regulations;
to respond to your query sent to Rehasport Clinic Sp. z o.o. – based on the need to implement
our legitimate interest in the form of response to a query, i.e. based on Article 6 paragraph 1 (f) of the GDPR, until the provision of the response or until we receive an effective objection to the processing of your personal data;
to communicate with you, including using the Webpush technology – based on the need to implement our legitimate interest in the form of establishing and maintaining communication
with you as our customer or our sites’ user, i.e. based on Article 6 paragraph 1 (f) of the GDPR, wherein due to the need of using the Cookies technology to ensure the proper functioning of this manner of communication, pursuant to Article 173 of the Telecommunications Law Act, we require additional consent to use the Cookies technology. We can process data for this purpose until we receive an objection to its processing or withdrawal of the consent to use the Cookies technology (read our Cookies Policy of Rehasport Clinic Sp. z o.o.)
to conduct the marketing of own products and services – based on the implementation of our legitimate interest in the form of direct marketing of own products and services, i.e. based on Article 6 paragraph 1 (f) of the GDPR, wherein pursuant to the regulations of Article 10 of the Electronic Services Act and Article 172 of the Telecommunications Law Act, we require additional consent to use the specified communication channels to conduct marketing activities. We can process data for this purpose until we receive an objection to its processing or withdrawal of the consent to receive marketing and notification materials by e-mail;
to create statistics and lists to improve the effectiveness of our marketing activities and build our business strategy – such statistics are mostly created based on non-personal data or anonymised data. If personal data is used for this purpose, its processing will be based on the need to implement our legitimate interest in the form of conducting analytical and statistical activities aimed at our development, i.e. pursuant to Article 6 paragraph 1 (f) of the GDPR, until we receive an effective objection to the processing of your personal data.
Your data can also be processed to determine, pursue or defend against possible claims that can derive from the use of the services provided by Rehasport Clinic Sp. z o.o. In such a case, your data will be used based on the need to implement Rehasport Clinic Sp. z o.o.’s legitimate interest in the form of securing claims, i.e. pursuant to Article 6 paragraph 1 (f) of the GDPR, for the time provided by rules of law on the limitation of claims. After this period, your data will be irreversibly deleted from Rehasport Clinic Sp. z o.o.’s database.

§ 3. Who can access your data?

Your data can be provided to external entities in the scope required to implement the aforementioned processing purposes. These include entities cooperating with Rehasport Clinic
Sp. z o.o., i.e. law firms, tax firms, entities providing debt collection services and entities providing services to Rehasport Clinic Sp. z o.o. based on separate entrustment agreements (e.g. hosting provider, entities providing IT services, accounting services).

Your data can also be provided to entities authorised to access them pursuant to the current rules of law (e.g. the police).

In addition, if you provide a relevant consent or request. Rehasport Clinic Sp. z o.o. can provide your personal data to other entities authorised by you.

The data recipients can have their registered seat in a state located outside of the European Economic Area (EEA), however in such a case, Rehasport Clinic Sp. z o.o. will make sure an appropriate level of security is applied to protect the data subject. The transfer of data to states located outside the EEA can be related, e.g.

to actions taken on social media and using plug-ins and other tools derived from such media (Facebook, among others),
with the use of analytical tools and tools intended for anonymised user behaviour tracking, especially Google Analytics, Hotjar, SALESmanago.

§ 4. Other Information

The provision of personal data is voluntary, however it is a condition for concluding an agreement
with Rehasport Clinic or can be required by the rules of law – depending on the service and range of services provided by Rehasport Clinic Sp. z o.o. We provide information on the voluntary or
required disclosure of personal data to Rehasport Clinic Sp. z o.o. on a case-by-case basis.

Your personal data will be subject to decision-making processes, including profiling. This means that based on the personal data in our possession and information on the products you purchase or the services you use, or cookies saved on your device, we will request your preferences and interests that can be used by us to create your marketing profile, our marketing strategy and build further development. Based on the profiles created, we will be able to adapt our feed to your expectations, which means that you will receive less useless information and product offers from us.

Your Rights

You are entitled to the following rights related to personal data processing:

right to object to data processing for marketing purposes – as we process your data for marketing purposes based on legitimate interest,
right to object to data processing because of a particular situation – if we process your personal data on the basis of our legitimate interest,
right to withdraw consent,
right to access your personal data,
right to request personal data correction,
right to request the removal of your personal data if we are not obliged by law to process it,
right to request the limitation of your personal data’s processing,
right to transfer your personal data, i.e. right to receive your personal data from us in a structured, commonly used machine-readable format. You can send this data to another data administrator or request us to send your data to another administrator. However, this will only be done if technically possible.

Right to Withdraw Consent

Your personal data can also be processed based on a consent. Due to the above, you are entitled to withdraw the consent for data processing at any time. The withdrawal of consent does not affect the compliance with law of processing done based on the consent prior to its withdrawal. You can withdraw the consent by contacting the Marketing Department at + 48/ 616 281 181 or by sending an e-mail to the following e-mail address: marketing@rehasport.pl

In order to exercise your rights, contact us or our Data Protection Inspector.

You also have the right to lodge a complaint with the personal data protection supervisory authority, i.e. the President of the Personal Data Protection Office.

Data Security

We are obliged to protect your personal data pursuant to the current rules of law,
especially not to disclose them to third parties and to process them only for the purposes specified in this Privacy Policy.

Your personal data are secured against accidental or illegal disclosure to unauthorised persons, seizing by unauthorised persons, destruction, loss, damage or change and processing in discordance with the current rules of law. We use adequate security measures to protect your personal data. These include internal collected data controls, storage and processing procedures as well as physical and IT security measures intended to ensure protection against unauthorised access to systems
used to store personal data. Sending personal data and communication with our servers are encrypted and take place with the use of the SSL (Secure Socket Layer) protocol. The personal data processed by Rehasport Clinic Sp. z o.o. is secured against access of unauthorised personnel.

Rehasport Clinic Sp. z o.o. restricts the right to make amendments to this Privacy Policy in case of amendments to the Polish law or the introduction of new technological and IT solutions.