Privacy Policy
Last updated: 4 October 2026
This policy explains what personal information International Clinic Silesia collects through this website, why we collect it, who sees it and what your rights are under the General Data Protection Regulation (GDPR). We have tried to keep it short and in plain language.
1. Who is responsible for your data
The controller of your personal data is Katarzyna Stefanicka, trading as International Clinic Silesia, based in Wrocław, Lower Silesia, Poland.
Privacy contact: Katarzyna Stefanicka, International Clinic Silesia, admin@ics-psycholog.pl
Please use this contact for any question about this policy or about how your data is handled.
2. What we collect, and why
| Where | What you give us | Why we use it | Legal basis |
|---|---|---|---|
| “Book Your Free Consultation” form | Name, email, telephone number, your chosen day and time | To arrange and confirm your free 10 minute phone consultation | Your consent (Art. 6(1)(a)); steps you ask us to take before a contract (Art. 6(1)(b)) |
| “Book your appointment” form | Name, email, telephone number (optional), your message including your general availability | To reply to you and arrange an appointment | Your consent (Art. 6(1)(a)); steps you ask us to take before a contract (Art. 6(1)(b)); explicit consent for any health information (Art. 9(2)(a)) |
| Contact forms (home page and Contact page) | Name, email, subject and message | To answer your question | Your consent (Art. 6(1)(a)); our legitimate interest in replying to enquiries (Art. 6(1)(f)) |
| Emails and calls you send us directly | Whatever you choose to tell us | To respond and, if you become a client, to provide our services | As above |
| Visiting the website | IP address, browser type, pages requested and time of visit, recorded in our hosting provider’s server logs | To keep the site secure and working | Our legitimate interest (Art. 6(1)(f)) |
| Cookie notice | Your choice, saved in a small first-party cookie | To remember your choice so we do not ask again on every page | Strictly necessary for the notice to work |
Health information
What brings you to us may be sensitive. Information about your health is “special category” data under the GDPR. You never need to give detail in a form: a short line is enough, and we can talk through the rest when we speak. By ticking the consent box on the booking forms you agree that we may use whatever you choose to write to respond to you. You can withdraw that consent at any time.
What we do not do
- We do not use advertising, tracking or analytics cookies on this website.
- We do not sell or rent your data, and we do not use it for automated decision-making or profiling.
- We do not send marketing emails unless you have separately asked us to.
3. How your messages reach us
When you submit a form, the website sends its contents to our email inbox. The website itself does not keep a copy of form submissions in its database. Your details therefore live in our email account and, if you become a client, in our client records.
4. Who we share data with
Only the service providers we need to run the website and our email, acting on our instructions:
- Hostinger – hosts this website and its server logs.
- Our email provider – receives the messages and form notifications sent to us.
- Google – only if you accept third-party content in our cookie notice and a page shows a Google Map. Google then receives your IP address and may set cookies.
We may also disclose information where the law requires it or where there is a serious risk to someone’s safety.
5. Transfers outside the EEA
Some of our providers may process data outside the European Economic Area. Where that happens we rely on safeguards recognised by the GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
6. How long we keep it
We keep enquiry details only as long as needed to respond to you and arrange an appointment. If you do not go on to become a client, we delete them within a reasonable time. If you do become a client, records are kept for the period required by professional standards and law. Server logs are kept by our host for a short, limited period.
7. Your rights under the GDPR
You have the right to:
- ask for a copy of the personal data we hold about you (access);
- have inaccurate data corrected (rectification);
- have your data deleted (erasure, sometimes called “the right to be forgotten”);
- ask us to restrict how we use your data;
- receive your data in a portable format, or have it sent to another provider;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, contact us using the privacy contact above. We will answer within one month. We may need to confirm who you are first.
You also have the right to complain to a data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. If you live elsewhere you may contact your local authority; if you are in the United Kingdom, that is the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to put things right first.
8. Children
This website is intended for adults. If you are contacting us on behalf of a child, please tell us in your message so that we can handle it appropriately.
9. Security
The website is served over an encrypted (HTTPS) connection and access to our inbox is restricted. No system is completely secure, so please avoid putting highly sensitive details in a web form.
10. Cookies
See our Cookie Policy for the cookies this site uses and how to change your choice.
11. Changes to this policy
If we change how we use your data we will update this page and the date at the top.