Privacy Policy

We care about your privacy and about the information you share with me when using the services of my Clinic, which is why I want you to understand how I use and protect the information I collect about you. I respect the right to privacy and apply best practices in accordance with applicable privacy laws and regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

This Privacy Policy sets out the rules for the collection and processing of personal data of current and prospective clients of the Clinic and the Antenatal School, including visitors to the website zaufajpoloznej.pl.

This Policy concerns the processing of your personal data within various services, tools, applications, websites, (online) sales promotions, marketing campaigns, sponsored social media platforms, etc., which are provided or operated by me or on my behalf. This Policy contains general rules and explanations.

It is supplemented by separate information clauses relating to the specific services, tools, applications, websites, (online) sales promotions, marketing activities, sponsored social media platforms, etc. referred to above. Information clauses will be provided to you when your personal data is processed within the aforementioned activities (for example via websites, individual communication services, newsletters, reminders, surveys, offers, events, etc.).

I. GENERAL PROVISIONS

1. This Privacy Policy sets out the rules for processing personal data obtained by the Antenatal School and the Lactation Clinic via the website zaufajpołożnej.com.
2. The Owner of the Website and, at the same time, the Controller of Personal Data is Anna Bulczak, conducting business under the name Anna Bulczak I. Zaufaj Położnej II. ZP MED (partner in a civil-law partnership), with its registered office in Gdynia at ul. Robotnicza 23, 81-180 Gdynia, NIP (Tax ID) 9581672905, REGON 364085773, hereinafter referred to as the Clinic or the Antenatal School.
3. Personal data collected by the Clinic via the Website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
4. The Clinic takes particular care to respect the privacy of Clients visiting the website zaufajpoloznej.com.
5. Wherever the following terms and definitions are used in this Policy, they shall be understood as follows: a) Controller or Clinic – Anna Bulczak, conducting business under the name Anna Bulczak I. Zaufaj Położnej II. ZP MED (partner in a civil-law partnership), with its registered office in Gdynia at ul. Robotnicza 23, 81-180 Gdynia, NIP 9581672905, REGON 364085773, email address: kontakt@zaufajpoloznej.pl. b) Cookies – means IT data, in particular small text files, saved and stored on devices through which the User accesses the zaufajpoloznej websites. c) Controller’s Cookies – means Cookies placed by the Controller, related to the provision of electronic services by the Controller via the Website. d) Third-Party Cookies – means Cookies placed by the Controller’s partners via the website zaufajpoloznej.com. e) Personal data – all information about an identified or identifiable natural person, identifiable through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, an online identifier, and information collected via cookies and other similar technology. f) Policy – this Privacy Policy. g) Device – means an electronic device through which the User accesses the e-learning Platform. h) GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. i) Website – the website operating at zaufajpoloznej.com, made available by the Clinic, used to provide advice online, including conducting training, lessons, lectures, multimedia presentations, tests, etc. related to the activity conducted by the Clinic. j) Client – any natural person visiting the Website or using one or more of the services or functionalities described in the Privacy Policy.

II. PURPOSES AND LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA

1. A Data Protection Specialist has been appointed at the Clinic, who can be contacted at the following email address: kontakt@zaufajpoloznej.pl
2. The Clinic collects and processes personal data to the extent necessary to achieve the purpose for which it was collected.
3. As a rule, most personal data is provided to us by you yourself.
4. Depending on the purpose and legal basis for collecting and processing personal data indicated below, Zaufaj Położnej may collect and process, among others, the following data about you: a) identification data, including but not limited to: first name, surname, PESEL (national identification number), date of birth; b) contact data, including but not limited to: address, telephone number, email address; c) data collected and processed for the purpose of making a diagnosis and providing lactation advice, in particular data concerning your state of health.
5. Below we present the purpose, legal basis and period of processing of your personal data:

6. Providing your data is voluntary; however, failure to provide it will result in the Clinic being unable to perform lactation advisory services and training services.
7. Granting marketing consent is voluntary, which means that refusing to grant it does not prevent you from using our services. You have the right to withdraw the marketing consent granted to the Clinic at any time.
8. The Clinic will not apply automated decision-making, including profiling, in relation to you.

III. TO WHOM DATA IS DISCLOSED OR ENTRUSTED

1. The Client’s personal data is transferred to service providers used by the Clinic in operating the Website, providing lactation advice and training services. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either follow the Clinic’s instructions as to the purposes and means of processing this data (processors) or independently determine the purposes and means of processing it (controllers).
2. Personal data of Service Recipients and Clients of the Website may be transferred to the following recipients or categories of recipients: a) entities handling electronic or payment card payments – in the case of a Client who uses electronic or payment card payment methods on the Website, the Controller makes the Client’s collected personal data available to the selected entity handling the above payments on the Platform on the Controller’s instructions, to the extent necessary to handle the payment made by the Client. b) service providers supplying the Controller with technical, IT and organisational solutions enabling the Controller to conduct business activity, including the Website and the electronic services provided through it (in particular providers of computer software for operating the Website, email and hosting providers, and providers of business management software and technical support to the Controller) – the Controller makes the Client’s collected personal data available to the selected provider acting on its instructions only in the case and to the extent necessary to achieve the given purpose of data processing consistent with this privacy policy. c) providers of accounting, legal and advisory services providing the Controller with accounting, legal or advisory support (in particular an accounting office, law firm or debt collection company) – the Controller makes the Client’s collected personal data available to the selected provider acting on its instructions only in the case and to the extent necessary to achieve the given purpose of data processing consistent with this privacy policy. d) Facebook Ireland Ltd. – Where the Controller uses Facebook social plugins on the Website (e.g. the Like button, Share, or logging in with Facebook credentials), it accordingly collects and shares the personal data of the Client using the e-learning Platform page with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) to the extent and in accordance with the privacy rules available here: https://www.facebook.com/about/privacy/ (this data includes information about activities on the Website – including information about the device, websites visited, purchases, ads displayed and the manner of using services – regardless of whether the Service Recipient has a Facebook account and whether they are logged in to Facebook). e) Chat support available in the store – Smartsupp.com, s.r.o., ID No.: 036 68 681, with its registered office at ul. Šumavská 31, 602 00 Brno. Providing appropriate customer service is in our legitimate interest. This entails the necessity of processing cookies or other data provided by customers in the chat window. Personal data in the chat window is processed automatically. Advanced functions are enabled only where customers have consented to this, which also includes the use of analytical and/or marketing cookies.
3. Navigation data may be used to provide Clients with better service, analyse statistical data and adapt the Website to Clients’ preferences, as well as to administer the Website.
4. Where a Client subscribes to the newsletter, the Clinic will send electronic messages to their email address containing commercial information about promotions and new products available on the Website.
5. Upon receipt of a request, the Clinic discloses personal data to authorised state authorities, in particular organisational units of the Public Prosecutor’s Office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.

IV. RIGHTS OF THE DATA SUBJECT

1. You have the right to access your data, rectify it, request its erasure, the right to restrict processing, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal – where processing takes place on the basis of Art. 6(1)(a) GDPR, i.e. on the basis of the consent you have granted. a) Right of access, rectification, restriction, erasure or portability – the data subject has the right to request from the Controller access to their personal data, its rectification, erasure (“right to be forgotten”) or restriction of processing, and has the right to object to processing, as well as the right to data portability. Detailed conditions for exercising the rights indicated above are set out in Articles 15–21 of the GDPR. b) Right to withdraw consent at any time – a person whose data is processed by the Controller on the basis of consent granted (pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR) has the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. c) Right to lodge a complaint with a supervisory authority – a person whose data is processed by the Controller has the right to lodge a complaint with a supervisory authority in the manner and mode specified in the provisions of the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office. d) Right to object – the data subject has the right to object at any time – on grounds relating to their particular situation – to the processing of personal data concerning them based on Art. 6(1)(e) (public interest or public tasks) or (f) (legitimate interest of the controller), including profiling based on those provisions. In such a case, the Controller may no longer process this personal data unless it demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims. e) Right to object concerning direct marketing – where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing, including profiling, to the extent that the processing is related to such direct marketing.
2. In order to exercise the rights referred to in this section of the privacy policy, you may contact the Controller by sending an appropriate message in writing or by email to the Controller’s address indicated at the beginning of the Privacy Policy, or by using the contact form available on the Website.

V. COOKIES, OPERATIONAL DATA AND ANALYTICS

1. Cookies are small text-based pieces of information in the form of text files, sent by the server and saved on the side of the person visiting the Clinic’s Website (e.g. on the hard drive of a computer or laptop, or on a smartphone’s memory card – depending on which device the visitor to our Website uses). Detailed information on Cookies, as well as the history of their creation, can be found, among others, here: http://pl.wikipedia.org/wiki/Ciasteczko.
2. The Controller may process data contained in Cookies while visitors use the Website for the following purposes: a) identifying Service Recipients as logged in on the Website and showing that they are logged in; b) remembering data from completed Order Forms, surveys or login details for the Online Store; c) adapting the content of the Website to the individual preferences of the Service Recipient (e.g. regarding colours, font size, page layout) and optimising the use of the Website’s pages; d) maintaining anonymous statistics showing how the Website is used; e) remarketing, i.e. examining the behavioural characteristics of Website visitors through anonymous analysis of their activities (e.g. repeated visits to specific pages, keywords, etc.) in order to create their profile and deliver advertisements tailored to their anticipated interests, also when they visit other websites in the advertising network of Google Ireland Ltd. and Facebook Ireland Ltd. f) remembering data entered in the store’s chat service window.
3. By default, most web browsers available on the market accept the saving of Cookies. Everyone has the option to define the conditions for using Cookies via their own browser settings. This means that you can, for example, partially restrict (e.g. temporarily) or completely disable the ability to save Cookies – in the latter case, however, this may affect certain functionalities of the Website.
4. Browser settings regarding Cookies are significant from the point of view of consent to the use of Cookies by our Online Store – under applicable regulations, such consent may also be expressed through browser settings. In the absence of such consent, browser settings regarding Cookies should be changed accordingly.
5. Detailed information on changing Cookie settings and deleting them yourself in the most popular web browsers is available in the browser’s help section and on the following pages (just click the relevant link): a) in the Chrome browser b) in the Firefox browser c) in the Internet Explorer browser d) in the Opera browser e) in the Safari browser f) in the Microsoft Edge browser
6. The cookies used on the Website are not harmful either to the visitor or to the computer/end device used by them, which is why we recommend not disabling their handling in browsers.
7. Two types of cookies are used in the Online Store belonging to the Controller: a) session (temporary) cookies: stored on Visitors’ devices until the end of the given browser session. After the session ends, the information is permanently deleted from the Visitors’ device. b) persistent cookies: are not deleted after the browser is closed and may be used by the Controller in the future.
8. Depending primarily on the purposes and legal basis for processing personal data collected via cookies, they may be stored for the period indicated in section II of the Policy.
9. Personal data collected via cookies concerning a visitor who is not a Client will be stored until an objection is raised. The Controller may delete personal data if it is not used for marketing purposes for 3 years, unless legal provisions oblige the Controller to process the personal data for longer.
10. Some personal data may be stored longer in case the visitor has any claims against the Controller, or for the purpose of pursuing claims by the Controller or defending against claims (including those of third parties), for the limitation period specified by law, in particular the Civil Code. In each case, the longer personal data retention period prevails.
11. The Controller may use Google Analytics and Universal Analytics services in the Online Store, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). These services help the Controller maintain statistics and analyse traffic. Data collected is processed within the above services to generate statistics helpful in administering the Website and analysing traffic. This data is aggregate in nature. Using the above services in the Online Store, the Controller collects data such as the sources and medium of acquisition of Online Store visitors and their behaviour on the Online Store’s pages, information about the devices and browsers from which they visit the site, IP and domain, geographic data as well as demographic data (age, gender) and interests.
12. It is possible for a person to easily block the sharing of information about their activity on the Website with Google Analytics – for this purpose, one can, for example, install the browser add-on provided by Google Ireland Ltd., available here: https://tools.google.com/dlpage/gaoptout?hl=pl.
13. The Controller may use the Facebook Pixel service on the Website, provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). This service helps the Controller measure the effectiveness of advertisements and find out what actions Website visitors take, as well as display tailored advertisements to those persons. Detailed information about how the Facebook Pixel works can be found at the following web address: https://www.facebook.com/business/help/742478679120153?helpref=page_content.
14. Managing the operation of the Facebook Pixel is possible through the advertising settings in your account on Facebook.com: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

VI. USE OF SOCIAL MEDIA PLUGINS

1. Plugins (so-called plug-ins) of the social networking sites facebook.com, Instagram and others may be present on our Website. The associated services are provided respectively by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. To view Facebook plugins, go to: https://developers.facebook.com/docs/plugins
2. The plugin transmits to its provider only information about which of our websites you accessed and at what time. If, while viewing our site or being on it, the user is logged in to their account on, for example, Facebook or Instagram, the provider is able to link your interests, information preferences and other data obtained, for example, by clicking the Like button, leaving a comment, or entering a profile name in searches. Such information will also be transmitted by the browser directly to the provider.
3. More detailed information about the collection and use of data by Facebook and about privacy protection can be found on Facebook’s pages: http://www.facebook.com/policy.php
4. To avoid Facebook recording a visit to a selected user account on our website, you must log out of your account before you begin browsing our websites.

VII. CHANGES AND UPDATES TO THE PRIVACY POLICY

1. I reserve the right to change this Policy in the event of changes in legal provisions, guidelines of authorities responsible for supervising personal data protection processes, or the technology used to process personal data (insofar as the change affects the wording of this document), as well as in the event of changes to the methods, purposes or legal bases of our processing of personal data.
2. I will inform you of any changes or additions by posting relevant information on our website www.trustedmidwife.com, and in the case of significant changes we may also send you separate notifications to the email address you have provided.
3. The law applicable to all legal relationships arising from this Policy is Polish law.
4. The Policy enters into force as of 16.08.2026.