01Who is responsible
The controller of personal data for the website and clinic enquiries is Makitruk Andrii, operating under the select | ed | brand, ul. Jana Kazimierza 31, Warsaw, Poland. Contact: selectedwarsaw@gmail.com.
02When you contact us
We process the name, telephone number, email address or Telegram username you provide, the content of your enquiry and the information needed to arrange a visit. Authorised clinic administrators handle enquiries and appointments. Providing your details is voluntary, but we need a way to contact you to respond or arrange a visit. Please do not send medical records, scans or detailed health information through ordinary email or Telegram; ask the clinic how to provide these securely.
03Why we use your information
To respond to a request to arrange services, we rely on Article 6(1)(b) GDPR (steps taken at your request before entering into a contract). For general correspondence, website security and the establishment, exercise or defence of legal claims, we rely on Article 6(1)(f): our legitimate interests in answering enquiries, maintaining a secure website and protecting our rights. Processing required by law relies on Article 6(1)(c). We do not use enquiries to send unsolicited marketing.
04Medical information
This website notice covers browsing and initial contact. Patient registration, medical care and medical records are subject to separate patient information and applicable healthcare rules, including Article 9 GDPR where relevant. The six-month enquiry period below does not apply to medical records. Please request the patient privacy notice from the clinic before providing clinical documentation.
05Who may receive data
Access is limited to authorised clinic staff and service providers as needed for their role: website hosting (Cloudflare), email (Google/Gmail) and the communication channel you choose, such as Telegram. Providers may act as processors or independent controllers depending on the service. Data may also be disclosed to public authorities when legally required. We do not sell personal data.
06Travel Avenue and external links
Travel Avenue is a separate travel and concierge partner. You contact it independently; the clinic does not pass your contact details to it. Its processing is governed by its own privacy information. Links to Telegram, Instagram and Google Maps take you to external services. Clicking a booking link opens a draft message in Telegram; it does not automatically send it. Those services apply their own privacy rules.
07Website operation and international services
Hosting may process IP addresses, request times, requested pages and browser information to deliver the website and investigate technical or security incidents. Google Fonts is loaded externally to display the typeface; this involves a connection to Google servers and technical request data. These services may process data outside the European Economic Area. Transfer arrangements depend on the provider and service; contact us for information about the applicable safeguards and how to obtain a copy. See the providers’ privacy information linked below.
08How long information is kept
For enquiries that do not lead to an appointment, we retain correspondence for up to six months after the last message, then delete it from the clinic-controlled active correspondence. If an enquiry becomes an appointment or patient record, the applicable patient retention rules take over. Where specific correspondence is needed for an existing dispute or legal obligation, only the necessary material is retained until that matter is resolved or the legal retention period expires. Technical records are kept for website delivery and security, with incident-related records retained until investigation and any related claim are resolved. External providers may retain their own records under their policies.
09Cookies and analytics
The current website does not enable Google Analytics, advertising pixels or optional tracking cookies. It has no embedded social-media feeds; social links open external pages. If we introduce optional tracking, we will update this notice and provide the required choice before activating it.
10Your rights
Depending on the legal basis and circumstances, you may request access, correction, erasure, restriction or portability of your data and object to processing based on legitimate interests. Where consent is used, you can withdraw it without affecting earlier lawful processing. Contact selectedwarsaw@gmail.com. You can also complain to the President of the Polish Personal Data Protection Office (UODO). We do not make solely automated decisions that produce legal or similarly significant effects, or use profiling for such decisions.