About the clinic/Privacy Policy
Legal information

Privacy Policy

This document explains how personal data is processed for users of the clinic website, the contact form, reception contact channels, and external features used on the site.

1. Personal data controller

The controller of personal data is ATMOSFERA DENTAL CLINIC sp. z o.o., with its registered office at Aleja Wilanowska 9A / U2, 02-765 Warsaw, entered in the National Court Register under KRS number 0001189951, with NIP 9512628195 and REGON 542516480.

For matters related to personal data processing, you may contact the controller by e-mail at mickiewiczclinic@gmail.com or by phone at +48 664 242 142.

2. Scope and sources of data collection

Personal data is collected directly from the user in connection with the use of the website, in particular through the contact form, telephone contact, or e-mail contact.

The website is not used for marketing activities based on user profiling, does not use advertising tracking pixels, and does not include an analytics section for measuring user traffic for marketing purposes.

Data category | Scope

Identification data | first and last name

Contact data | phone number, e-mail address

Data provided in the message content | information entered by the user in the form or message

Technical data | information related to website operation, device, and cookie settings

3. Purposes and legal bases for data processing

Personal data is processed only to the extent necessary to handle user contact, enable appointment organisation, answer questions, and ensure the proper operation of the website.

Processing purpose | Scope of data | Legal basis

Handling a message sent via the contact form or any other contact channel | first and last name, phone number, e-mail address, message content | Article 6(1)(f) GDPR — the controller’s legitimate interest in handling correspondence and providing responses

Taking action prior to concluding an agreement or scheduling an appointment | data provided during contact and booking | Article 6(1)(b) GDPR

Handling appointment scheduling and follow-up contact | data provided by the user in the contact form, e-mail messages, or phone calls | Article 6(1)(b) GDPR or Article 6(1)(f) GDPR — depending on the purpose of contact

Ensuring proper operation, security, and technical support of the website | technical data, system information, and cookie settings | Article 6(1)(f) GDPR

Compliance with legal obligations | scope required by applicable law | Article 6(1)(c) GDPR

4. Voluntary provision of data

Providing personal data is voluntary, but in many cases necessary to respond, contact the user, or organise an appointment. Failure to provide data may make it impossible to handle the inquiry.

5. Data recipients and cooperating entities

Personal data may be entrusted to entities supporting the controller in the technical operation of the website, communication, and appointment organisation, only to the extent necessary to achieve the specified purposes.

When external service providers are used, some data may be transferred outside the European Economic Area if this results from the provider’s operating model. In such cases, the transfer is carried out using appropriate mechanisms provided for by the GDPR.

Entity / service | Role on the website | Notes

Vercel | website hosting and technical infrastructure | may process technical data related to delivering the website to the user

Google Maps | display of the clinic location | after the embedded map is loaded, it may process technical data and cookies according to its own rules

Instagram | external link to the clinic profile | the user is redirected to an external service only at their own request

Mail and IT support providers | communication handling and system maintenance | only to the extent necessary to provide services and maintain system security

6. Data retention period

Type of data | Indicative retention period

Contact correspondence data | for the duration of the correspondence and then until any possible claims become time-barred

Data related to appointment booking | for the time necessary to handle the booking and any further contact with the patient

Technical data and cookie settings | according to the lifespan of a given cookie or until the user changes their preferences

7. Rights of data subjects

The data subject has, in particular, the right to:

To exercise these rights, the user may contact the controller using the details provided in this policy.

Right | Scope

Access to data | obtain information on whether data is being processed and receive a copy

Rectification | correct inaccurate data or complete incomplete data

Erasure | request deletion of data in cases provided for by law

Restriction of processing | temporarily limit operations performed on the data

Objection | object to processing based on Article 6(1)(f) GDPR

Data portability | in cases specified by law, when processing is based on a contract or consent and carried out by automated means

Complaint to the supervisory authority | lodge a complaint with the President of the Personal Data Protection Office

8. Cookies and similar technologies

The website uses cookies and similar technologies to the extent necessary for its proper functioning, remembering user choices, and supporting selected external functionalities.

The consent management mechanism is implemented through a local cookie banner built directly into the website. The user may change their choice at any time via the Cookie settings link available in the website footer.

9. Links to external services

The website may contain links to external services, in particular to the clinic’s Instagram profile and services provided by third parties. Moving to an external service means leaving the controller’s website. We recommend reviewing the privacy policies of those services.

10. Data security

The controller applies appropriate technical and organisational measures to protect personal data against unauthorised disclosure, loss, destruction, modification, or unauthorised access.

11. Changes to the privacy policy

The privacy policy may be updated in the event of changes in law, the way the website operates, or the scope of services used. The current version of the document is published on this page.

Last updated: 10.04.2026