Privacy policy
Last updated: 17 July 2026
1. Data controller
The controller of personal data processed in connection with the use of klinikanowejsylwetki.pl is Klinika Nowej Sylwetki, ul. Domaniewska 48, 02-672 Warsaw, Poland. Data protection contact: e-mail kontakt@klinikanowejsylwetki.pl, tel. +48 22 602 00 40.
2. What data we process and why
- Telephone and e-mail contact - data you provide when contacting us (name, phone number, e-mail address, message content) is processed to respond, arrange an appointment and handle your enquiry (Article 6(1)(b) and (f) GDPR).
- Medical data - health data is processed only in connection with the provision of healthcare services, under Article 9(2)(h) GDPR and Polish patient rights and medical records regulations.
- Technical data - the hosting server records standard logs (IP address, date, browser) to ensure security and proper operation of the website (Article 6(1)(f) GDPR).
The website contains no contact forms. We do not conduct electronic marketing without separate consent and we do not carry out automated decision making, including profiling.
3. Recipients of data
Data may be entrusted to entities supporting the operation of the website and the clinic (hosting provider, IT service providers, accounting services), only under data processing agreements and to the extent necessary. Data is not transferred outside the European Economic Area.
4. Retention period
Contact data is stored for the duration of correspondence and handling of the matter, and then for the limitation period of possible claims. Medical records are stored for the periods required by law (as a rule, 20 years). Server logs are stored in accordance with the hosting provider's policy.
5. Your rights
You have the right to access your data, rectify it, erase it or restrict its processing, the right to object to processing and the right to data portability. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
6. Cookies
The use of cookies and browser storage is described in a separate Cookie policy.
7. Security
The website is served exclusively over an encrypted HTTPS connection. We apply technical and organisational measures appropriate to the risk, including server security and restricted access to data.