Privacy policy

Data controller

The controller of data related to this website and enquiries to the clinic is Andrzej Lesiewicz, trading as Slim&Smile Aesthetic Clinic Andrzej Lesiewicz. Clinic contact address: ul. Matejki 59, 66-400 Gorzów Wielkopolski.

For privacy matters, contact us at kontakt@slimsmileclinic.pl, by telephone: +48 511 052 656 or in writing at the clinic address.

Browsing the website

Displaying the website requires connection data such as your IP address, request time, the address of the page visited and browser information. These are handled by the hosting infrastructure to deliver content, maintain security and diagnose errors. The basis is our legitimate interest in maintaining a secure, functioning website (Article 6(1)(f) GDPR).

We do not make automated decisions about you that produce legal effects. We serve photographs and fonts from the same domain. We do not embed maps or social media. The Booksy form loads only after you choose to book a treatment. We describe optional advertising measurement below.

Optional advertising measurement: Meta Pixel

If you consent to marketing cookies, Meta Pixel transmits general information about a homepage visit (PageView), a click on a booking button (BookingClick), telephone or email (Contact), and acceptance of a form for sending after confirmation by the API (Lead), the Pixel identifier, event time, technical connection data and browser identifiers. Contact contains only the contact method (telephone or email) and the general button location: header, mobile menu, footer, contact section, form or other part of the website. Lead contains only an identifier for the contact form. The purpose is to assess the effectiveness of Slim & Smile advertising on Facebook and Instagram. The legal basis for processing is consent (Article 6(1)(a) GDPR); without it, measurement is disabled.

The recipient is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta may associate the data with your account and use it for measurement and advertising personalisation in accordance with the Meta privacy policy. W zakresie wspólnego zbierania i przekazywania danych obowiązują Meta joint controllership terms. Dalsze przetwarzanie przez Meta podlega jej zasadom i może obejmować przetwarzanie poza EOG, m.in. w USA; informacje o stosowanych mechanizmach przekazywania i okresach retencji są dostępne w polityce Meta.

We do not send Meta message contents, contact details, bookings, health information or the names of treatments viewed. On public pages, measurement operates in a separate technical document without the address of the subpage being viewed, parameters, selected option or forms. BookingClick means a button click, not a confirmed booking. Contact means an attempt to get in touch, not a completed conversation or sent email. Lead confirms acceptance of a form for sending, not delivery to an inbox or a booked appointment. We do not send purchase or confirmed-booking events; we do not activate our Pixel in the Booksy form. We do not activate automatic data matching or automatic click measurement. We do not transmit the previous page address. We do not replay contacts from before consent after it is given. Changing consent while a form is being sent disables measurement for that message.

Cookie settings. Tutaj możesz odmówić marketingu albo wycofać zgodę ze skutkiem na przyszłość. Wycofanie nie wpływa na zgodność przetwarzania sprzed wycofania. Ważność wyboru i czas zapisu cookies opisuje cookie policy.

Optional advertising measurement: Google Ads

After consent to marketing, we load Google Ads tag AW-18478950350, provided by Google Ireland Limited. The purpose is to measure Google advertising; the legal basis for processing is consent (Article 6(1)(a) GDPR). Google receives general information about a visit, technical connection data and cookie identifiers. The tag operates in a separate technical document without transmitting the treatment subpage address, URL parameters, previous page address, treatment names or form data. Google Ads personalisation and enhanced conversions are disabled. We do not send Google customer data, purchases or confirmed bookings. Without consent, the Google script is not downloaded. You can withdraw consent through the cookie settings in the footer; further measurement will stop. Information about Google’s processing, including transfers outside the EEA and retention periods, is available in the Google privacy policy. Rodzaje cookies i czas zapisu opisujemy w cookie policy.

Form and messages

After you click “Send message”, the form sends data over an encrypted connection to the website server and then to the Viperhost email service and kontakt@slimsmileclinic.pl inbox. It does not require you to open your email program. The application does not create an additional database of enquiry contents. The message is stored in the clinic’s email system.

We ask for your first name, email address and question. Your surname and telephone number are optional. We use data sent by email to reply and, if you enquire about entering into a contract or booking, to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). We handle ordinary correspondence in our legitimate interest in maintaining contact (Article 6(1)(f) GDPR).

Providing data is voluntary, but without your enquiry and a way to contact you, we cannot reply. Sending an enquiry does not subscribe you to a newsletter or constitute consent to advertising. Do not send health data, medical photographs or your PESEL number through this form. Agree with the clinic on an appropriate way to provide information needed for a consultation.

To limit spam and repeat sending of the same enquiry, the server stores security identifiers, the time and sending status, without the message contents. Only after separate consent to marketing cookies do we send Meta general information about a form being accepted for sending (Lead). We do not transmit the data entered in the form or the enquiry identifier.

Data recipients

Authorised clinic staff and email, hosting and IT support providers may access messages to the extent necessary to provide their services. Data may be disclosed to authorised bodies where required by law.

Using global infrastructure may involve processing data outside the European Economic Area. You can obtain information about the safeguards applicable to a particular transfer and how to obtain a copy by contacting the controller.

Retention period

The website form does not retain its contents after you leave or refresh the view. After a message is sent, correspondence is stored for the time needed to deal with the matter and its agreed subsequent stages. If it concerns a contract, legal obligation or dispute, relevant information may be retained until the obligation is fulfilled or the applicable limitation period for claims expires.

Connection data is subject to the retention periods used by infrastructure providers for service delivery and security. We describe the storage duration of settings in the cookie policy.

Your rights

You may request access to your data, rectification, erasure or restriction of processing. In the circumstances provided for by the GDPR, you also have the right to data portability. You may object to processing based on legitimate interests by explaining your particular situation.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You can change consent for Meta Pixel and Google Ads in the cookie settings in the footer. Send requests using the controller’s contact details. As a rule, we will respond within one month.

You have the right to lodge a complaint with the President of the Polish Personal Data Protection Office. Current contact details and ways to lodge a complaint can be found at uodo.gov.pl.

Bookings and external websites

When you choose to book a specific treatment, we open a view containing a form provided directly by Booksy. Only in this view does your browser connect to Booksy, which may use its own cookies and applies its own privacy rules. Other Booksy, Instagram and Facebook links lead to separate services. Data entered in Booksy is handled as part of the booking in accordance with the information provided there.

This policy describes the website; it does not replace information provided when a treatment is performed or medical records are maintained.