Privacy and Cookie Policy

Personal Data Administrator
IDENTA CENTRUM DENTYSTYCZNE Sp. z o.o.
ul. Adama Mickiewicza 31/16, 60-835 Poznań, Poland
Email: lodz@identa.com.pl
KRS: 0001141780
NIP (Tax ID): 7812080501
REGON: 540323512
Register of Medical Entities: Z-290759-20250604

Definition

Personal Data (Data) – any information relating to an identified or identifiable natural person, in particular on the basis of such identifiers as name, surname, telephone number, email address, device IP address, location data, online identifier, or information collected through cookies.
Special Category Data – personal data revealing racial or ethnic origin, religious or philosophical beliefs, health status, biometric or genetic data, as well as data concerning a natural person’s sex life or sexual orientation.
Ordinary Data – any personal data other than those belonging to the special category.
Policy – this Privacy and Cookie Policy.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Service – the website operated by the Administrator, available at: https://identa.com
User – any natural person visiting the Service or using its functionality (also referred to in the text as: You, Your).

How do we collect your Data while you use our Service?

In connection with your use of our Service at https://identa.com, we collect personal data necessary to provide specific services, as well as information about your activity on the website.
Some data are collected automatically when you visit the Service — through cookies or similar technologies placed on it. Other data are obtained when you enter them voluntarily via contact or registration forms.
You can manage your cookie settings in your browser or through a dedicated section on our website.
Below, we explain in detail the purposes and legal bases for processing your personal data, as well as your rights regarding them.

Registration in the Service and the use of telemedicine services

When completing the order form (e.g. for a telemedical consultation or an e-prescription), we ask you to provide the following data:

first and last name
address
PESEL number (if applicable)
telephone number
email address

Providing data marked as mandatory is necessary for accepting and processing your request. Without this information, we will not be able to provide the service.

Your personal data are processed for the following purposes:

🔹 For the conclusion and performance of a contract (telemedicine service)
– pursuant to Art. 6(1)(b) GDPR
– for the purpose of verifying eligibility for medical services, providing medical consultations, issuing electronic prescriptions, maintaining medical documentation, and communicating with you

🔹 For the fulfilment of legal obligations
– pursuant to Art. 6(1)(c) GDPR, in particular:
• the Pharmaceutical Law (prescription requirements)
• the Act on the Medical Profession (obligation to identify the patient)
• the Act on Patient Rights (e.g. right to access one’s medical documentation)

🔹 Processing of special categories of data (health-related information)
– pursuant to Art. 9(2)(h) GDPR — for the purposes of diagnosis, treatment, and maintaining medical documentation

🔹 For payment processing
– pursuant to Art. 6(1)(b) GDPR — we process only ordinary personal data

🔹 For accounting and tax obligations
– pursuant to Art. 6(1)(c) GDPR — in accordance with the Accounting Act

🔹 For handling complaints
– pursuant to Art. 6(1)(c) and (f) GDPR — for the protection of the clinic’s rights and compliance with applicable law
– special category data — pursuant to Art. 9(2)(h) GDPR

🔹 For legal protection, if necessary
– pursuant to Art. 6(1)(f) GDPR (legitimate interests)
– special category data — pursuant to Art. 9(2)(h) GDPR

Data Retention Period

Your personal data will be stored:

For the provision of medical services – throughout the term of the contract and thereafter for 20 years, in accordance with the Act on Patient Rights
For settlements and accounting purposes – until the expiry of the limitation period in accordance with the Civil Code and the Accounting Act
For complaint handling – until the limitation period for relevant claims expires
For evidential or legal protection purposes – until the expiry of the limitation period

3. Information about Your Rights Related to the Processing of Personal Data

In connection with our processing of your Personal Data, you have the following rights:

Right of access – to access the content of your Data;
Right to rectification – to request correction of your Data;
Right to erasure (“right to be forgotten”);
Right to restriction of processing;
Right to data portability;
Right to object to the processing of Data for marketing purposes –

You may object to the processing of your Personal Data for marketing purposes at any time, without having to provide justification for such objection.

Right to object to other purposes of Data processing – you may, at any time, object — for reasons related to your particular situation — to the processing of Personal Data carried out on the basis of our legitimate interests (e.g., for analytical or statistical purposes). An objection in this regard should include a justification.
Right not to be subject to a decision (including profiling) based solely on automated processing that produces legal effects concerning you or similarly significantly affects you;
Right to withdraw consent (where processing is based on consent) — at any time, without affecting the lawfulness of processing carried out before the withdrawal of consent;
Right to lodge a complaint with the supervisory authority responsible for personal data protection.

You may exercise your rights by submitting an appropriate request to the Administrator.

The request should, as precisely as possible, specify the nature of your demand. If we are unable to determine the content of your request or identify you, we will contact you for additional information. Providing such additional information is not obligatory; however, failure to do so will result in the refusal to fulfil your request.

A response to your request will be provided no later than within one month from the date of its receipt. If it is necessary to extend this period, we will inform you of the reasons for the extension.

The response will be sent to the email address from which the request was submitted. For requests sent by post or other means, the response will be delivered by regular mail to the address indicated by you, unless the content of the correspondence indicates your preference to receive the reply via email (in such a case, please include your email address). If the time required to process your request does not allow for a written reply and the scope of your Data enables contact by email, the response will be provided electronically.

We keep a record of the submitted requests and the individuals who submitted them to ensure compliance and accountability, as well as for the establishment, exercise, or defence of potential legal claims. The register of requests is maintained in a manner that ensures the integrity and confidentiality of the included Data.

The legal basis for the processing of these Data is our legitimate interest, consisting in ensuring accountability regarding the handling of submitted requests and in establishing or defending against legal claims. You have the right to object to this processing.

4. Data Recipients

In connection with the collection of Data necessary to provide specific services offered through the Service, as well as information about your activity within the Service, your Personal Data may be disclosed to external entities, including in particular, providers responsible for the maintenance of IT and hosting systems (for example, VERCEL Inc.).
Your Personal Data will also be transferred to public registers to the extent required by law, including to the Medical Information System (SIM), where electronic prescriptions are recorded. Public registers are maintained by data controllers separate from us, and the data included therein are processed in accordance with their own regulations — for instance, the data controller of SIM is the Minister of Health.
Your Personal Data may also be disclosed to other institutions, public authorities, and administrative bodies (for example, the Tax Office), as well as to other entities, to the extent necessary for the performance of the contract binding us with you and in accordance with applicable legal provisions. These entities remain separate data controllers of your Personal Data.
In the case of an electronic (telemedical) visit, your Data are processed by our partners — providers of telemedical service platforms, payment processors using fast payment systems (PayU S.A.), and, in the case of traditional bank transfers to our account, by banks participating in the transaction settlement process. These entities also remain separate data controllers of your Personal Data.
A detailed list of recipients of your Personal Data is available upon request.
Data may also be disclosed to relevant authorities or third parties that request such information on a valid legal basis and in accordance with applicable law.

5. Data Retention Period

The period for which Data are processed by the Administrator depends on the type of service provided and the purpose of the processing. In general, Data are processed for the duration of the service provision or order fulfilment, until the withdrawal of consent or the submission of an effective objection to the processing of Data — in cases where the legal basis for processing is the Administrator’s legitimate interest.
Your Data will be processed for the period necessary to achieve the purposes of processing indicated above, namely:
In the case of Data processed for the purpose of concluding and performing a service contract — for the period necessary to perform the Service, and thereafter for the period required by law, in particular under the Act on Patient Rights and the Patient Ombudsman, which stipulates that medical documentation must be retained for 20 years, counted from the end of the calendar year in which the last entry was made;
For the purpose of settling payments for the Service — until the end of the limitation period specified in the Civil Code, as well as for the period required under the Accounting Act;
For the fulfilment of legal obligations imposed on us — for the period specified by the relevant legal provisions, necessary to confirm the proper performance of these obligations.
The Data retention period may be extended if processing is necessary for the establishment, exercise, or defence of potential legal claims, and thereafter only to the extent required by law.
After the expiry of the retention period, the Data will be irreversibly deleted or anonymized.

6. Data Processing in Connection with the Use of the Service

In connection with your use of our Service, we collect Data to the extent necessary to provide the individual services offered, as well as information about your activity within the Service.
Your activity in the Service, including Personal Data, is recorded in system logs and processed primarily for purposes related to the provision of services through the Service. We also process this Data for technical and administrative purposes, to ensure the security and proper management of the information system, and for analytical and statistical purposes — in this respect, the legal basis for processing is our legitimate interest. You have the right to object.
Your Personal Data (including IP address or other identifiers, as well as information collected through cookies or other similar technologies) are also processed for the following purposes:
To provide electronic services — to the extent of the content made available to you through the Service.
Legal basis: necessity of processing for the performance of a contract.
To establish, exercise, or defend against legal claims — based on our legitimate interests. You have the right to object.

7. Traditional Correspondence, Email Communication, and Telephone Contact

If you contact us by email or traditional post regarding matters not related to the services provided to you or any other contract concluded with you, the Personal Data contained in such correspondence will be processed solely for the purpose of communication and handling the matter to which the correspondence relates.
If you contact us by telephone regarding matters not related to an existing contract or the services provided, we may request the provision of Personal Data only when it is necessary to handle the matter to which the contact relates.
The legal basis for processing is our legitimate interest, consisting in maintaining correspondence related to our business activity, and — in the case of telephone contact — in addressing matters connected with our business operations. You have the right to object.
We process only the Personal Data that are relevant to the given matter.
Please note that we transfer your Data outside the European Economic Area (EEA).
Your Data will be processed for the period necessary to achieve the purposes of processing indicated above, or until you submit an effective objection to the processing of Data, in cases where the legal basis for processing is our legitimate interest.

8. Your Data and Our Social Media Accounts

Please note: the following information does not apply to the processing of Data by the administrators of the Facebook, Instagram, or Viber platforms. Information on how your Data are processed by those service providers can be found on their respective websites.

We maintain public profiles on Facebook, Instagram, and are also available for contact via Viber. In connection with this, we process the Data of individuals who visit our profiles, post comments, likes, or engage in any other activity within these profiles.

The Data obtained are processed solely in connection with the management of our profiles, in particular for the following purposes:

to maintain activity on these profiles;
to actively and effectively manage the profiles, including informing users about our activities, promoting various events, services, and products, as well as communicating through functions available within the profiles;
for statistical and analytical purposes;
for the establishment, exercise, or defence of legal claims.

The legal basis for the processing of Data is our legitimate interest, consisting in promoting our organization’s activities and building and maintaining a community associated with our brand; and, in the case of the establishment, investigation, or defence of claims — in pursuing or protecting against such claims. You have the right to object.

9. Cookies and Similar Technologies

Cookies and Similar Technologies

Our Service uses cookies and other similar technologies. In connection with the above, we and other entities providing us with analytical, statistical, or marketing services use cookies to store or gain access to information already stored on the telecommunications end device that you use to browse the Service.
The use of cookies within the Service is not intended to identify you personally.

We use four types of cookies: Necessary cookies, Statistical cookies, and Marketing cookies.
The use of third-party cookies involves the transfer of Data collected by these cookies outside the European Economic Area (EEA).

⚠️ Important!
Detailed information about the cookies used in the Service — their type, name, provider (through which you can access its Privacy Policy), purpose of processing, and expiry date — is available in our cookie management panel.
This panel allows you to manage your cookie preferences and appears when you first access the Service.
The panel saves your choices and can be re-opened at any time via the following link:
👉 https://zdrowomed.com/cookies
You can use it to review your settings or modify them (including withdrawing consent).

Necessary Cookies

We use Necessary cookies to provide you with the services and functionality of the Service that you wish to use.
They ensure the proper operation of the Service and enable access to available features. Without these cookies, the Service cannot function correctly.
Necessary cookies are always active on our Service.

Legal basis for processing: the necessity of processing for the performance of a contract.

Statistical Cookies

Statistical cookies help us understand how different Users interact with the Service by collecting and reporting anonymous information.
They allow us to obtain data such as the number of visits and traffic sources on the Service.
These cookies are used to determine which features of the Service are more or less popular and to understand how Users navigate the Service by compiling statistics on traffic and usage.
The Data are processed to improve the performance and usability of the Service.
The information collected through these cookies is aggregated and is not intended to identify you personally.
Statistical cookies may be set by us or by our partners through the Service.

Legal basis for processing: your consent, expressed through the cookie management panel.
You can withdraw this consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal) in the same panel, available at:
👉 https://zdrowomed.com/cookies

Marketing Cookies

The purpose of Marketing cookies is to display personalized advertisements that are relevant and interesting to you (behavioural advertising), both within and outside our Service.
Based on the information collected by these cookies and your activity on other websites, a profile of your interests is created.
Advertising cookies may be set by us and by our partners through our Service.

In this way, we aim to tailor your interaction with us to your needs and interests.
If you do not consent to such tracking, you will still see our advertisements — however, they will be displayed randomly on other platforms (contextual advertising).

10. Analytical and Marketing Tools Used by the Administrator’s Partners

Clicking on these links or activating these connections may allow third parties to collect or share data about you.
At the same time, if you have consented to Statistical or Marketing cookies, third parties may track your behaviour while browsing the Service and after you leave it.
You can manage your cookie settings through the cookie panel: https://zdrowomed.com/cookies
We do not control third-party websites and are not responsible for their privacy statements.
In addition to the above, the Administrator and its Partners use various solutions and tools for analytical and marketing purposes. Below is an overview of these tools. Detailed information can be found in each partner’s respective privacy policy.
GOOGLE ANALYTICS
Google Analytics cookies are used by Google to analyse how Users use the Service, to create statistics and reports on the functioning of the Service.
Google does not use the collected data to identify the User and does not combine this information to enable identification.
Detailed information on the scope and principles of data collection in connection with this service can be found here:
👉 https://www.google.com/intl/pl/policies/privacy/partners
GOOGLE ADWORDS
Google AdWords is a tool that allows measuring the effectiveness of advertising campaigns implemented by the Administrator by analysing data such as keywords or the number of unique users.
The Google AdWords platform also allows displaying our ads to users who have previously visited the Service.
Information about Google’s data processing within this service is available at:
👉 https://policies.google.com/technologies/ads?hl=pl
GOOGLE TAG MANAGER
The Administrator uses Google Tag Manager. This service allows managing page tags via an interface.
Google Tag Manager only implements tags — it does not use cookies and does not collect any personal data.
It activates other tags which, under certain circumstances, may collect data. However, Google Tag Manager itself does not have access to this data.
If deactivation has been performed at the domain or cookie level, it remains valid for all tracking tags implemented through Google Tag Manager.
Using Google Tag Manager, we monitor our marketing campaigns and how users interact with our website.
HOTJAR
Hotjar is a tool that allows the Administrator to analyse User activity within the Service, for example, through surveys or satisfaction studies, and by anonymously collecting information about clicks in different areas of the Service.
The tool does not allow identification of the User.
Detailed information about the data collected through Hotjar and how to disable user tracking can be found here:
👉 https://www.hotjar.com/privacy
GOOGLE SEARCH CONSOLE INSIGHTS
Search Console Insights is a tool that enables the Administrator to analyse the popularity of content within the Service.
It provides information on which parts of the Service attract the most attention, how users find the Service on the internet, and what search queries they use in Google before visiting the Service.

11. Transfer of Data Outside the European Economic Area

In connection with the use of cookies or similar technologies within the Service, as well as the use of technical solutions (including messengers) and other functionalities in the data processing process, your personal data processed by us may be transferred to a third country, i.e., a country outside the European Economic Area (EEA).
We always inform you about any intention to transfer personal data outside the EEA at the time of their collection. The level of data protection outside the EEA differs from that ensured under European law. For this reason, we transfer personal data outside the EEA only when it is necessary and when an appropriate level of protection is guaranteed.
Additionally, we inform you that, in connection with the use of the above-mentioned tools, your Data may be transferred to the United States of America or other countries outside the EEA.
For every transfer, we ensure an adequate level of protection of Personal Data (data security) based on legal mechanisms provided for in the GDPR, in particular ensuring that the transfer is based on one of the following:
a European Commission adequacy decision confirming an appropriate level of data protection (for countries for which such a decision has been issued);
binding corporate rules (BCRs) approved by the competent supervisory authority;
standard contractual clauses (SCCs) approved by the European Commission.
Data transfers may also take place in the absence of legal mechanisms ensuring personal data processing outside the EEA.
Detailed information on the transfer of personal data outside the European Economic Area, including copies of safeguards, can be obtained by contacting us.

12. Security of Processed Personal Data

The Administrator continuously conducts risk assessments to ensure that Personal Data are processed securely — in particular, to guarantee that access to the data is granted only to authorised persons and only to the extent necessary for the performance of their duties.
The Administrator ensures that all operations involving Personal Data are recorded and carried out exclusively by authorised staff and employees.
The Administrator takes all necessary measures to ensure that its subcontractors and other cooperating entities also provide adequate guarantees of applying appropriate security measures in every case where they process Personal Data on behalf of the Administrator.

13. Changes to the Privacy and Cookie Policy

We reserve the right to make changes to this Policy. In the event of significant changes, we will inform you by means of a notice published on the Website.
Such notice will appear with appropriate prior notice.
Changes may be made, for example, due to:
amendments to applicable legislation,
updates to current privacy standards,
expansion of our service offerings.
In the case of substantial modifications, we will provide a notice on the Website that will:
be displayed in a visible form,
inform you about the content of the introduced changes,
explain their implications for you.
The notice about the change will appear in advance, allowing you to:
review the content of the notice,
assess the impact of the changes on the processing of your data,
exercise your rights under the GDPR (e.g. withdraw consent or object to processing).
This Policy is regularly reviewed and updated as necessary.