Privacy policy

1. General Information

1. This policy applies to the website operating at the following URL: pozytywnapsycholog.uk
2. The website operator and Data Controller is: Katarzyna Sierpińska
3. Contact email address for the operator: [email protected]
4. The operator is the Data Controller with respect to the personal data provided voluntarily on the website.
5. The website uses personal data for the following purposes:
   • Newsletter management
   • Handling inquiries via the contact form
   • Presentation of offers or information
6. The website collects information about users and their behavior in the following ways:
   1. Through data voluntarily entered in forms, which are then added to the Operator’s systems.
   2. By saving cookies on user devices.

2. Selected Data Protection Methods Used by the Operator

1. Login and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that personal and login data entered on the website are encrypted on the user’s computer and can only be read on the target server.
2. User passwords are stored in a hashed form. The hashing function is one-way, making it impossible to reverse its operation, which is a modern standard for storing user passwords.
3. The Operator periodically changes its administrative passwords.
4. To protect data, the Operator regularly performs backups.
5. An essential part of data protection is the regular update of all software used by the Operator for processing personal data, including updates of programming components.

3. Hosting

1. The website is hosted (technically maintained) on servers operated by: cyberFolks.pl
2. The hosting company, to ensure technical reliability, keeps server-level logs, which may include:
   • resources identified by URLs (addresses of requested resources – pages, files),
   • time of the request,
   • time of the response,
   • name of the client station – identified by the HTTP protocol,
   • information about errors that occurred during the execution of HTTP transactions,
   • URL of the previously visited page (referrer link) – if the user accessed the website via a hyperlink,
   • information about the user’s browser,
   • IP address information,
   • diagnostic information related to the self-service ordering process through forms on the website,
   • information related to email communication sent to and from the Operator.

4. Your Rights and Additional Information on How Data Is Used

1. In certain situations, the Data Controller has the right to transfer your personal data to other recipients if it is necessary to execute a contract with you or to fulfill obligations imposed on the Controller. This applies to the following groups of recipients:
   • the hosting company under entrustment agreements,
   • authorized employees and collaborators who use the data to achieve the website’s objectives,
   • companies providing marketing services for the Controller.
2. Your personal data processed by the Controller will not be retained longer than necessary for the specific activities detailed by separate regulations (e.g., accounting). Marketing data will not be processed longer than three years.
3. You have the right to request from the Controller:
   • access to your personal data,
   • rectification,
   • deletion,
   • restriction of processing,
   • data portability.
4. You have the right to object to the processing specified in section 3.2 regarding the processing of personal data for the purpose of legitimate interests pursued by the Controller, including profiling, except where compelling legitimate grounds for processing exist that override your interests, rights, and freedoms, particularly for the establishment, exercise, or defense of legal claims.
5. You have the right to lodge a complaint about the Controller’s actions with the President of the Personal Data Protection Office (Poland), ul. Stawki 2, 00-193 Warsaw.