Privacy Policy

Last updated: 22 September 2026

This policy explains what personal data is processed when you use annapaszekpsychoterapia.pl and its contact form, why and for how long, and what rights you have.

Data controller

The controller of your personal data is Anna Paszek, running a psychotherapy practice at Pod Fortem 2c/5, 31-209 Kraków, Poland (tax ID/NIP 6381496862). For any matter relating to your personal data you can contact me by e-mail (anna.paszek@icloud.com), by phone (+48 503 744 140) or by post at the practice address.

Contact form and e-mail correspondence

If you send a message through the form, I process the data you enter: first name, last name, e-mail address and the content of the message. I use it only to reply to your enquiry and to arrange a consultation if you wish.

  • legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract), and otherwise Art. 6(1)(f) GDPR (legitimate interest in replying to your message),
  • the message is delivered to my e-mail inbox, and an automatic confirmation of receipt is sent to the address you provide,
  • a copy of the message is kept in the form's database for 3 months and then deleted automatically; it exists only so that no message is lost if sending fails,
  • I keep e-mail correspondence for as long as needed to handle your enquiry and any further contact,
  • providing the data is voluntary, but without it I cannot reply to your message.

Please do not describe details of your health in the form – we can talk about them during the consultation. If you include such information anyway, it will be used only to reply to your message (Art. 9(2)(a) GDPR – your explicit consent given by sending it).

Protecting the form from abuse

To protect the form from spam, the server counts how many messages are sent from each IP address. The IP address is stored only as a hash that cannot be turned back into the address, and it is deleted automatically within a day. Technical logs of the form's server, which include the IP address, are kept for 30 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping the website secure).

Cookies and Google Analytics

The website uses Google Analytics to see general visit statistics (for example the number of visits and the most-read pages). Google Analytics runs only after you give consent in the banner shown on your first visit. Without consent the website stores no analytics cookies on your device.

  • after you consent, Google Analytics sets the cookies _ga and _ga_*, which expire after 2 years,
  • statistics are kept in Google Analytics for no longer than 14 months,
  • legal basis: your consent (Art. 6(1)(a) GDPR and the Polish Electronic Communications Law),
  • you can withdraw consent at any time by clicking “Cookie settings” in the footer; withdrawal does not affect the lawfulness of processing before it.

Your choice (accept or reject) is saved in your browser's storage (localStorage) so the banner does not appear on every visit. This is necessary for the website to work and does not require consent.

Google Maps

The contact page shows a static map image loaded from Google's servers, which means your IP address is sent to Google. The interactive Google Maps map, which may set Google cookies, loads only after you click “Show interactive map”.

Recipients of data

Data is processed with the help of trusted service providers acting on my behalf:

  • Google Ireland Limited – website hosting, the form's server and database (servers in Warsaw), sending e-mails (Gmail), Google Analytics and Google Maps,
  • Apple Distribution International Ltd. – the e-mail inbox (iCloud) where messages are delivered.

These providers may transfer data to the United States. Google LLC and Apple Inc. participate in the EU-U.S. Data Privacy Framework, under which the European Commission has found an adequate level of data protection. I do not sell or share your data with anyone else.

Your rights

You have the right to:

  • access your data and receive a copy of it,
  • rectify your data,
  • have your data erased,
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest,
  • withdraw consent at any time,
  • lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

To exercise these rights, write to anna.paszek@icloud.com.

Your data is not used for automated decision-making or profiling.