{"id":799,"date":"2026-03-28T05:35:18","date_gmt":"2026-03-28T05:35:18","guid":{"rendered":"https:\/\/prenatalni.pl\/polityka-prywatnosci\/"},"modified":"2026-05-15T09:57:28","modified_gmt":"2026-05-15T09:57:28","slug":"privacy-policy-and-cookies","status":"publish","type":"page","link":"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/","title":{"rendered":"Privacy Policy and Cookies"},"content":{"rendered":"<div>Privacy Policy and Cookies<\/div>\n<div>\u00a7 1. Definitions\n<\/div>\n<div>The following terms used in this Policy shall mean:<\/div>\n<div>\n<p><strong>Administrator:<\/strong> Sonrisa Clinic Sp. z o.o., registered in \u0141\u00f3d\u017a, ul. Z\u0142otno 24a, 94-221 \u0141\u00f3d\u017a, KRS: 000001201869, NIP: 7272894044\n<\/p>\n<p><strong>Service:<\/strong> The website and online store available at www.prenatalni.pl.\n<\/p>\n<p><strong>User:<\/strong> Any natural person, legal entity, or organizational unit using the Service.\n<\/p>\n<p><strong>Customer:<\/strong> A natural person, legal entity, or organizational unit without legal personality that has concluded or intends to conclude a Sales Agreement with the Administrator.\n<\/p>\n<p><strong>Consumer:<\/strong> A natural person making a purchase for purposes not directly related to their business or professional activity.\n<\/p>\n<p><strong>GDPR:<\/strong> Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.\n<\/p>\n<p><strong>Personal Data:<\/strong> Any information about an identified or identifiable natural person.<\/p>\n<p><strong>Processing:<\/strong> Operations performed on personal data, such as collecting, recording, storing, compiling, modifying, disclosing, and erasing.\n<\/p>\n<p><strong>Cookies:<\/strong> Small text files saved on the User\u2019s device by the web browser when visiting the Service.\n<\/p>\n<p><strong>Order:<\/strong> A declaration of intent by the Customer constituting an offer to conclude a Sales Agreement.\n<\/p>\n<p><strong>Sales Agreement:<\/strong> A product sales agreement concluded between the Customer and the Administrator via the Service.\n<\/p>\n<\/div>\n<div>\u00a7 2. Personal Data Controller<\/div>\n<div>The controller of personal data collected via the Service www.prenatalni.pl is:<\/p>\n<p>SONRISA CLINIC SP. Z O.O.<br \/>\nul. Z\u0142otno 24A, 94-221 \u0141\u00f3d\u017a<br \/>\nKRS: 000001201869, NIP: 7272894044<br \/>\nEmail: kontakt@prenatalni.pl\n<\/div>\n<div>\u00a7 3. Scope and Purposes of Data Processing\n<\/div>\n<div>\n<p><strong>3.1. Data processed in connection with the conclusion and performance of a Sales Agreement:<\/strong><\/p>\n<ul>\n<li>Full name \/ company name<\/li>\n<li>Home address<\/li>\n<li>Email address<\/li>\n<li>Phone number<\/li>\n<li>Invoice address (if different from delivery address)<\/li>\n<li>VAT number (in the case of a business invoice).<\/li>\n<\/ul>\n<p>We process this data for the purpose of:<\/p>\n<ol>\n<li>Concluding and performing the sales agreement (legal basis: Art. 6(1)(b) GDPR)\n<\/li>\n<li>Issuing an invoice or receipt and fulfilling tax obligations (legal basis: Art. 6(1)(c) GDPR \u2013 tax law provisions)\n<\/li>\n<li>Handling complaints and returns (legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR)\n<\/li>\n<li>Archiving financial documents for the period required by law (legal basis: Art. 6(1)(c) GDPR)\n<\/li>\n<li>Establishing, defending, or pursuing claims \u2013 for the duration of the limitation period (legal basis: Art. 6(1)(f) GDPR)\n<\/li>\n<\/ol>\n<p><strong>3.2. Data processed for marketing purposes<br \/>\n <br \/><\/strong>With the User\u2019s separate consent (Art. 6(1)(a) GDPR), we may process:\n<\/p>\n<ul>\n<li>Email address \u2013 for the purpose of sending newsletters and commercial information<\/li>\n<\/ul>\n<p>Consent to marketing is voluntary and may be withdrawn at any time without negative consequences for the performance of the sales agreement. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.<\/p>\n<p><strong>3.3. Data processed for analytical and security purposes<\/strong><br \/>Based on the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), we process:\n<\/p>\n<ul>\n<li>IP addresses and technical device data \u2013 to ensure the security of the Service\n<\/li>\n<li>Service access logs \u2013 for technical diagnostics<\/li>\n<li>Data on behavior within the Service (pages viewed, clicks, time spent) \u2013 to improve Service functionality and analyze effectiveness\n<\/li>\n<\/ul>\n<\/div>\n<div>\u00a7 4. Data Retention Periods\n<\/div>\n<div>Personal data is stored for the following periods:<\/div>\n<table>\n<tbody>\n<tr>\n<td>Purpose of Processing<\/td>\n<td>Retention Period<\/td>\n<\/tr>\n<tr>\n<td>Order fulfillment<\/td>\n<td>Until the limitation period expires (generally 3 years; for consumer claims \u2013 6 years from the due date)<\/td>\n<\/tr>\n<tr>\n<td>Financial documents (invoices)<\/td>\n<td>Until the limitation period expires (generally 3 years; for consumer claims \u2013 6 years from the due date)<\/td>\n<\/tr>\n<tr>\n<td>Newsletter \/ Marketing<\/td>\n<td>Until consent is withdrawn or an objection is raised<\/td>\n<\/tr>\n<tr>\n<td>Analytical data (anonymized)<\/td>\n<td>Indefinitely after anonymization; prior to anonymization \u2013 a maximum of 26 months<\/td>\n<\/tr>\n<tr>\n<td>Security data (logs)<\/td>\n<td>Up to 12 months from collection<\/td>\n<\/tr>\n<tr>\n<td>Complaint proceedings<\/td>\n<td>Until the conclusion of proceedings + limitation period for claims<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div>\u00a7 5. Rights of Data Subjects<\/div>\n<div>\n<p>Under the GDPR, you have the following rights with regard to your personal data:<\/p>\n<p><strong>Right of access<\/strong> (Art. 15 GDPR)<br \/>You have the right to obtain confirmation as to whether your personal data is being processed, and if so, to access it and receive information about the purposes of processing, categories of data, recipients, and planned retention periods.<br \/>\n <br \/><strong>Right to rectification<\/strong>  (Art. 16 GDPR)<br \/>You have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.<br \/>\n <br \/><strong>Right to erasure<\/strong> (Art. 17 GDPR) <br \/>You have the right to request the erasure of your personal data if: the data is no longer necessary for the purposes for which it was collected; consent has been withdrawn and there is no other legal basis for processing; an objection to processing has been raised; the data was processed unlawfully. This right does not apply where processing is necessary to comply with a legal obligation or for the establishment, exercise, or defense of legal claims.<br \/>\n <br \/><strong>Right to restriction of processing<\/strong> (Art. 18 GDPR) <br \/>You have the right to request the restriction of processing in the circumstances specified in Art. 18 GDPR (e.g., when you contest the accuracy of the data or have raised an objection).<br \/>\n <br \/><strong>Right to data portability<\/strong> (Art. 20 GDPR)<br \/>\n<br \/>You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and the right to transmit that data to another controller \u2013 where processing is based on consent or a contract and is carried out by automated means.<br \/>\n <br \/><strong>Right to object<\/strong> (Art. 21 GDPR) <br \/>You have the right to object at any time to processing of data based on the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), including profiling. The Administrator shall cease processing unless it demonstrates compelling legitimate grounds for the processing which override your interests, or processing is necessary for the establishment, exercise, or defense of legal claims. <br \/><strong>Right to withdraw consent<\/strong> <br \/>You may withdraw your consent to the processing of data for marketing purposes at any time (e.g., by unsubscribing from the newsletter or contacting the Administrator). Withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal.<br \/>\n <br \/><strong>Right to lodge a complaint with a supervisory authority<\/strong> <br \/>If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Moniuszki 1A, 00-014 Warsaw.\n<\/p>\n<p><strong>How to exercise your rights?<\/strong> <br \/> To exercise your rights, please contact us by email at: kontakt@prenatalni.pl or in writing to the Administrator\u2019s registered address. We will respond to your request without undue delay, and in any event within 30 days of receipt. If necessary, this period may be extended by a further 60 days, of which you will be informed.\n<\/p>\n<\/div>\n<div>\u00a7 6. Recipients of Personal Data<\/div>\n<div>\n<p>In the course of conducting business, your personal data may be shared with the following categories of recipients:\n<\/p>\n<p><strong>6.1. Processors acting on behalf of the Administrator<br \/>\n<\/strong><\/p>\n<ul>\n<li>Hosting and server service providers \u2013 for data storage and Service operation\n<\/li>\n<li>E-commerce and CMS platform providers \u2013 operating the online store software\n<\/li>\n<li>Electronic payment operators (e.g., Przelewy24, PayU, Stripe, PayPal) \u2013 solely to the extent necessary to process transactions\n<\/li>\n<li>Courier and logistics companies (e.g., InPost, DPD, DHL, Polish Post) \u2013 to the extent necessary to fulfill deliveries\n<\/li>\n<li>Accounting and invoicing service providers \u2013 to the extent necessary to issue sales documents<\/li>\n<li>Analytical and marketing tool providers (e.g., Google Analytics, Meta Pixel) \u2013 based on separate consent or legitimate interest\n<\/li>\n<li>Email marketing service providers (e.g., Mailchimp, GetResponse, FreshMail) \u2013 based on consent\n<\/li>\n<li>CRM system providers \u2013 supporting customer service\n<\/li>\n<\/ul>\n<p><strong>6.2. Public authorities and authorized entities<br \/>\n<\/strong> <br \/>Data may be shared with state authorities (e.g., courts, law enforcement agencies, tax authorities) solely on the basis of applicable law and only to the extent required by them.\n<\/p>\n<p><strong> 6.3. Transfers outside the European Economic Area (EEA)<br \/>\n<\/strong> <br \/>Some tool providers (e.g., Google, Meta\/Facebook) may process data outside the EEA. In such cases, the transfer takes place on the basis of standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR) or other mechanisms ensuring an adequate level of data protection. Details are available in the privacy policies of the respective providers.<\/p>\n<\/div>\n<div>\u00a7 7. Data Security\n<\/div>\n<div>\n<p>The Administrator applies appropriate technical and organizational measures to protect processed personal data, in particular:<\/p>\n<ul>\n<li>SSL\/TLS connection encryption (HTTPS protocol) for all pages of the Service\n<\/li>\n<li>Password encryption using strong cryptographic algorithms (e.g., bcrypt)\n<\/li>\n<li>Regular data backups\n<\/li>\n<li>Restriction of access to data exclusively to authorized employees and associates\n<\/li>\n<li>Application of the principle of least privilege\n<\/li>\n<li>Regular software updates and security patching\n<\/li>\n<li>Security monitoring of the Service and infrastructure\n<\/li>\n<li>Employee training in personal data protection\n<\/li>\n<li>Conclusion of data processing agreements with external entities<\/li>\n<\/ul>\n<p>Despite the security measures in place, the Administrator cannot guarantee 100% security of data transmission over the Internet. In the event of a personal data breach that may pose a high risk to the rights or freedoms of natural persons, the Administrator will notify the affected Users without undue delay.\n<\/p>\n<\/div>\n<div>\u00a7 8. Cookies<\/div>\n<div>\n<p><strong>8.1.  What are cookies?<br \/>\n<\/strong> <br \/>Cookies are small text files sent by the Service to the User\u2019s web browser and stored on their device (computer, phone, tablet). Cookies allow, among other things, for the retention of User settings, maintenance of login sessions, operation of the shopping cart, and analysis of user behavior.\n<\/p>\n<p><strong>8.2. Types of cookies used<br \/>\n<\/strong> <br \/>A) By storage duration:\n<\/p>\n<\/div>\n<table>\n<tbody>\n<tr>\n<td>Type<\/td>\n<td>\n<p>Description<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>Session cookies<\/td>\n<td>Temporary files that are deleted when the browser session ends (when the browser window is closed). Essential for the proper functioning of the Service during a single visit.<\/td>\n<\/tr>\n<tr>\n<td>Persistent cookies<\/td>\n<td>Files stored on the User\u2019s device for a specified period (from a few days to several years), even after the browser is closed. Used to remember preferences and facilitate subsequent visits.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div>B) By purpose and legal basis:\n<\/div>\n<table>\n<tbody>\n<tr>\n<td>Category<\/td>\n<td>Examples and Purpose<\/td>\n<\/tr>\n<tr>\n<td>Essential (always active)<\/td>\n<td>Login session, shopping cart, CSRF security tokens, language\/currency selection. Essential for store operation \u2013 do not require consent.<\/td>\n<\/tr>\n<tr>\n<td>Functional<\/td>\n<td>Remembering User preferences (e.g., font size, recently viewed products). Require consent.<\/td>\n<\/tr>\n<tr>\n<td>Analytical<\/td>\n<td>Google Analytics, Hotjar \u2013 traffic measurement, behavior analysis. Require consent.<\/td>\n<\/tr>\n<tr>\n<td>Marketing<\/td>\n<td>Meta Pixel (Facebook\/Instagram), Google Ads, TikTok Pixel \u2013 remarketing and ad targeting. Require consent.<\/td>\n<\/tr>\n<tr>\n<td>Partner (third-party)<\/td>\n<td>Third-party tools (e.g., chat, payment widget, social media buttons). The relevant third-party provider is responsible for these cookies.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div>\n<p><strong>8.3. Detailed list of cookies used<\/strong><\/p>\n<\/div>\n<table>\n<tbody>\n<tr>\n<td>Cookie Name<\/td>\n<td>\n<p>Purpose \/ Provider \/ Duration<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>_ga, _ga_XXXX<\/td>\n<td>Google Analytics \u2013 user identification; duration: 2 years<\/td>\n<\/tr>\n<tr>\n<td>_gid<\/td>\n<td>Google Analytics \u2013 user differentiation; duration: 24 hours<\/td>\n<\/tr>\n<tr>\n<td>_gat<\/td>\n<td>Google Analytics \u2013 request rate limiting; duration: 1 minute<\/td>\n<\/tr>\n<tr>\n<td>_fbp<\/td>\n<td>Meta (Facebook\/Instagram) Pixel \u2013 remarketing; duration: 3 months<\/td>\n<\/tr>\n<tr>\n<td>fr<\/td>\n<td>Facebook \u2013 advertising; duration: 3 months<\/td>\n<\/tr>\n<tr>\n<td>PHPSESSID \/ session_id<\/td>\n<td>Store session, shopping cart; duration: session or up to 30 days<\/td>\n<\/tr>\n<tr>\n<td>csrf_token<\/td>\n<td>Form security; duration: session<\/td>\n<\/tr>\n<tr>\n<td>cart_id<\/td>\n<td>Shopping cart identification; duration: up to 7 days<\/td>\n<\/tr>\n<tr>\n<td>user_preferences<\/td>\n<td>Saved User settings; duration: up to 12 months<\/td>\n<\/tr>\n<tr>\n<td>cookie_consent<\/td>\n<td>Remembering cookie consent choice; duration: 12 months<\/td>\n<\/tr>\n<tr>\n<td>_gcl_au<\/td>\n<td>Google Ads \u2013 conversions; duration: 3 months<\/td>\n<\/tr>\n<tr>\n<td>_ttp<\/td>\n<td>TikTok Pixel \u2013 conversion tracking; duration: 13 months<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div>\n<p>The above list is subject to change as the Service develops. The current list is always available in the cookie management panel within the Service.\n<\/p>\n<p><strong>8.4. Managing cookies \u2013 Consent Management Platform (CMP)<br \/>\n<\/strong> <br \/>Upon the first visit to the Service, a cookie banner is displayed allowing the management of consent for individual cookie categories. Preferences can be changed at any time by clicking the \u201cManage cookies\u201d icon\/link available in the footer of the Service.\n<\/p>\n<p><strong>Browser settings:<br \/>\n<\/strong> <br \/>Users may manage cookies at any time through their web browser settings:\n<\/p>\n<ul>\n<li>Google Chrome: Menu \u2192 Settings \u2192 Privacy and security \u2192 Cookies and other site data<\/li>\n<li>Mozilla Firefox: Menu \u2192 Settings \u2192 Privacy &#038; Security \u2192 Cookies and Site Data\n<\/li>\n<li>Microsoft Edge: Menu \u2192 Settings \u2192 Cookies and site permissions\n<\/li>\n<li>Safari: Preferences \u2192 Privacy \u2192 Manage Website Data\n<\/li>\n<li>Opera: Menu \u2192 Settings \u2192 Advanced \u2192 Privacy and security\n<\/li>\n<\/ul>\n<p>Note: Disabling all cookies, including essential ones, may prevent the use of certain features of the Service, including placing orders, logging into an account, and using the shopping cart.\n<\/p>\n<\/div>\n<div>\u00a7 9. Third-Party Tools and External Parties\n<\/div>\n<div>\n<p><strong>9.1. Google Analytics<\/strong> <br \/>The Service uses Google Analytics \u2013 a web analytics service provided by Google LLC (or Google Ireland Limited in the case of the EEA). Google Analytics uses cookies to analyze how the Service is used. Information generated by cookies (including IP address) is transmitted to Google\u2019s servers. The Administrator uses the IP anonymization feature (IP masking). Details: https:\/\/policies.google.com\/privacy<\/p>\n<p><strong>9.2. Meta Pixel (Facebook \/ Instagram)<\/strong> <br \/>The Service uses the tracking pixel of Meta Platforms Ireland Limited. Meta Pixel enables the measurement of the effectiveness of ads displayed on Facebook and Instagram and the creation of advertising audiences. Processing is carried out based on the User\u2019s consent. Details: https:\/\/www.facebook.com\/policy.php\n<\/p>\n<p><strong>9.3. Google Ads and Remarketing<\/strong> <br \/>The Service may use Google Ads Remarketing, which allows the Service\u2019s ads to be displayed to Users who have previously visited the Service. Processing is based on consent.\n<\/p>\n<p><strong> 9.4. Payment Operators<\/strong> <br \/>The Service integrates with external payment operators. Transaction data is transmitted to the selected operator (Przelewy24, PayU, Stripe, or another) and is subject to their privacy policy. The Administrator does not store full payment card details.\n<\/p>\n<p><strong>9.5. Embedded External Content<\/strong> <br \/>The Service may contain social media plugins (e.g., Facebook \u201cLike\u201d buttons, share buttons), chat widgets, and other external elements. Interaction with these elements may result in data being transmitted to third parties, even without actively clicking a button. The Administrator recommends reviewing the privacy policies of these parties.\n<\/p>\n<\/div>\n<div>\u00a7 10. Profiling and Automated Decision-Making<\/div>\n<div>\n<p>The Administrator may profile Users based on their behavior within the Service (e.g., product categories viewed, purchase history) for the purpose of personalizing displayed content and product recommendations. Profiling is carried out on the basis of the Administrator\u2019s legitimate interest or the User\u2019s consent.\n<\/p>\n<p>The profiling conducted by the Administrator does not lead to automated decision-making that produces legal effects concerning the User or similarly significantly affects them within the meaning of Art. 22 GDPR. The User has the right to object to profiling.\n<\/p>\n<\/div>\n<div>\u00a7 11. Changes to the Privacy Policy\n<\/div>\n<div>\n<p>The Administrator reserves the right to amend this Policy in the event of:\n<\/p>\n<ul>\n<li>Changes to applicable law, in particular regarding personal data protection\n<\/li>\n<li>Changes to the methods, purposes, or legal bases for processing personal data\n<\/li>\n<li>Implementation of new services, functionalities, or tools within the Service\n<\/li>\n<\/ul>\n<p>The Administrator will inform Users of material changes to the Policy by:\n<\/p>\n<ul>\n<li>Displaying an appropriate notice on the Service for at least 14 days before the changes take effect\n<\/li>\n<li>Sending information to the email address provided by the User (for account holders and newsletter subscribers)\n<\/li>\n<\/ul>\n<p>Continued use of the Service after the changes take effect constitutes acceptance of the new Policy. Previous versions of the Policy are available in the archive on the Service\u2019s website.\n<\/p>\n<\/div>\n<div>\u00a7 12. Final Provisions\n<\/div>\n<div>\n<ol>\n<li>This Policy is effective from 1 April 2026.\n<\/li>\n<li>This Policy constitutes an integral part of the Terms and Conditions of the prenatalni.pl service.\n<\/li>\n<li>Matters not regulated by this Policy shall be governed by generally applicable law.\n<\/li>\n<li>Any disputes arising from this Policy that cannot be resolved amicably shall be settled by the court having jurisdiction over the Administrator\u2019s registered seat.<\/li>\n<\/ol>\n<\/div>\n<p><!--more--><br \/>\n<!-- {\"type\":\"layout\",\"children\":[{\"type\":\"section\",\"props\":{\"height\":\"viewport\",\"id\":\"o-konferencji\",\"image_position\":\"center-center\",\"image_size\":\"cover\",\"padding_top\":\"xlarge\",\"style\":\"default\",\"text_color\":\"light\",\"title_breakpoint\":\"xl\",\"title_position\":\"top-left\",\"title_rotation\":\"left\",\"vertical_align\":\"middle\",\"width\":\"default\"},\"children\":[{\"type\":\"row\",\"props\":{\"column_gap\":\"large\",\"layout\":\"2-3,1-3\",\"row_gap\":\"large\"},\"children\":[{\"type\":\"column\",\"props\":{\"image_position\":\"center-center\",\"position_sticky_breakpoint\":\"m\",\"width_medium\":\"2-3\"},\"children\":[{\"type\":\"headline\",\"props\":{\"content\":\"Privacy Policy and Cookies\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h2\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 1. Definitions\\n\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"The following terms used in this Policy shall mean:\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p><strong>Administrator:<\/strong> Sonrisa Clinic Sp. z o.o., registered in \u0141\u00f3d\u017a, ul. Z\u0142otno 24a, 94-221 \u0141\u00f3d\u017a, KRS: 000001201869, NIP: 7272894044\\n<\/p>\n\n\\n\n\n<p><strong>Service:<\/strong> The website and online store available at www.prenatalni.pl.\\n<\/p>\n\n\\n\n\n<p><strong>User:<\/strong> Any natural person, legal entity, or organizational unit using the Service.\\n<\/p>\n\n\\n\n\n<p><strong>Customer:<\/strong> A natural person, legal entity, or organizational unit without legal personality that has concluded or intends to conclude a Sales Agreement with the Administrator.\\n<\/p>\n\n\\n\n\n<p><strong>Consumer:<\/strong> A natural person making a purchase for purposes not directly related to their business or professional activity.\\n<\/p>\n\n\\n\n\n<p><strong>GDPR:<\/strong> Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.\\n<\/p>\n\n\\n\n\n<p><strong>Personal Data:<\/strong> Any information about an identified or identifiable natural person.<\/p>\n\n\\n\n\n<p><strong>Processing:<\/strong> Operations performed on personal data, such as collecting, recording, storing, compiling, modifying, disclosing, and erasing.\\n<\/p>\n\n\\n\n\n<p><strong>Cookies:<\/strong> Small text files saved on the User\u2019s device by the web browser when visiting the Service.\\n<\/p>\n\n\\n\n\n<p><strong>Order:<\/strong> A declaration of intent by the Customer constituting an offer to conclude a Sales Agreement.\\n<\/p>\n\n\\n\n\n<p><strong>Sales Agreement:<\/strong> A product sales agreement concluded between the Customer and the Administrator via the Service.\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 2. Personal Data Controller\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"The controller of personal data collected via the Service www.prenatalni.pl is:<br \/>\\n\\nSONRISA CLINIC SP. Z O.O.<br \/>\\nul. Z\u0142otno 24A, 94-221 \u0141\u00f3d\u017a<br \/>\\nKRS: 000001201869, NIP: 7272894044<br \/>\\nEmail: kontakt@prenatalni.pl\\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 3. Scope and Purposes of Data Processing\\n\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p><strong>3.1. Data processed in connection with the conclusion and performance of a Sales Agreement:<\/strong><\/p>\n\n\\n\n\n<ul>\\n\n\n<li>Full name \/ company name<\/li>\n\n\\n\n\n<li>Home address<\/li>\n\n\\n\n\n<li>Email address<\/li>\n\n\\n\n\n<li>Phone number<\/li>\n\n\\n\n\n<li>Invoice address (if different from delivery address)<\/li>\n\n\\n\n\n<li>VAT number (in the case of a business invoice).<\/li>\n\n\\n<\/ul>\n\n\\n\n\n<p>We process this data for the purpose of:<\/p>\n\n\\n\n\n<ol>\\n\n\n<li>Concluding and performing the sales agreement (legal basis: Art. 6(1)(b) GDPR)\\n<\/li>\n\n\\n\n\n<li>Issuing an invoice or receipt and fulfilling tax obligations (legal basis: Art. 6(1)(c) GDPR \u2013 tax law provisions)\\n<\/li>\n\n\\n\n\n<li>Handling complaints and returns (legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR)\\n<\/li>\n\n\\n\n\n<li>Archiving financial documents for the period required by law (legal basis: Art. 6(1)(c) GDPR)\\n<\/li>\n\n\\n\n\n<li>Establishing, defending, or pursuing claims \u2013 for the duration of the limitation period (legal basis: Art. 6(1)(f) GDPR)\\n<\/li>\n\n\\n<\/ol>\n\n\\n\n\n<p><strong>3.2. Data processed for marketing purposes\\n <br \/><\/strong>With the User\u2019s separate consent (Art. 6(1)(a) GDPR), we may process:\\n<\/p>\n\n\\n\n\n<ul>\\n\n\n<li>Email address \u2013 for the purpose of sending newsletters and commercial information<\/li>\n\n\\n<\/ul>\n\n\\n\n\n<p>Consent to marketing is voluntary and may be withdrawn at any time without negative consequences for the performance of the sales agreement. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.<\/p>\n\n\\n\n\n<p><strong>3.3. Data processed for analytical and security purposes<\/strong><br \/>Based on the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), we process:\\n<\/p>\n\n\\n\n\n<ul>\\n\n\n<li>IP addresses and technical device data \u2013 to ensure the security of the Service\\n<\/li>\n\n\\n\n\n<li>Service access logs \u2013 for technical diagnostics<\/li>\n\n\\n\n\n<li>Data on behavior within the Service (pages viewed, clicks, time spent) \u2013 to improve Service functionality and analyze effectiveness\\n<\/li>\n\n\\n<\/ul>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 4. Data Retention Periods\\n\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"Personal data is stored for the following periods:\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"table\",\"props\":{\"image_svg_color\":\"emphasis\",\"link_style\":\"default\",\"link_text\":\"Read more\",\"meta_style\":\"text-meta\",\"show_content\":true,\"show_image\":true,\"show_link\":true,\"show_meta\":true,\"show_title\":true,\"table_order\":\"1\",\"table_responsive\":\"overflow\",\"table_width_meta\":\"shrink\",\"table_width_title\":\"shrink\"},\"children\":[{\"type\":\"table_item\",\"props\":{\"content\":\"Retention Period\",\"title\":\"Purpose of Processing\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Until the limitation period expires (generally 3 years; for consumer claims \u2013 6 years from the due date)\",\"title\":\"Order fulfillment\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Until the limitation period expires (generally 3 years; for consumer claims \u2013 6 years from the due date)\",\"title\":\"Financial documents (invoices)\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Until consent is withdrawn or an objection is raised\",\"title\":\"Newsletter \/ Marketing\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Indefinitely after anonymization; prior to anonymization \u2013 a maximum of 26 months\",\"title\":\"Analytical data (anonymized)\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Up to 12 months from collection\",\"title\":\"Security data (logs)\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Until the conclusion of proceedings + limitation period for claims\",\"title\":\"Complaint proceedings\"}}]},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 5. Rights of Data Subjects\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p>Under the GDPR, you have the following rights with regard to your personal data:<\/p>\n\n\\n\n\n<p><strong>Right of access<\/strong> (Art. 15 GDPR)<br \/>You have the right to obtain confirmation as to whether your personal data is being processed, and if so, to access it and receive information about the purposes of processing, categories of data, recipients, and planned retention periods.\\n <br \/><strong>Right to rectification<\/strong>  (Art. 16 GDPR)<br \/>You have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.\\n <br \/><strong>Right to erasure<\/strong> (Art. 17 GDPR) <br \/>You have the right to request the erasure of your personal data if: the data is no longer necessary for the purposes for which it was collected; consent has been withdrawn and there is no other legal basis for processing; an objection to processing has been raised; the data was processed unlawfully. This right does not apply where processing is necessary to comply with a legal obligation or for the establishment, exercise, or defense of legal claims.\\n <br \/><strong>Right to restriction of processing<\/strong> (Art. 18 GDPR) <br \/>You have the right to request the restriction of processing in the circumstances specified in Art. 18 GDPR (e.g., when you contest the accuracy of the data or have raised an objection).\\n <br \/><strong>Right to data portability<\/strong> (Art. 20 GDPR)\\n<br \/>You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and the right to transmit that data to another controller \u2013 where processing is based on consent or a contract and is carried out by automated means.\\n <br \/><strong>Right to object<\/strong> (Art. 21 GDPR) <br \/>You have the right to object at any time to processing of data based on the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), including profiling. The Administrator shall cease processing unless it demonstrates compelling legitimate grounds for the processing which override your interests, or processing is necessary for the establishment, exercise, or defense of legal claims. <br \/><strong>Right to withdraw consent<\/strong> <br \/>You may withdraw your consent to the processing of data for marketing purposes at any time (e.g., by unsubscribing from the newsletter or contacting the Administrator). Withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal.\\n <br \/><strong>Right to lodge a complaint with a supervisory authority<\/strong> <br \/>If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Moniuszki 1A, 00-014 Warsaw.\\n<\/p>\n\n\\n\n\n<p><strong>How to exercise your rights?<\/strong> <br \/> To exercise your rights, please contact us by email at: kontakt@prenatalni.pl or in writing to the Administrator\u2019s registered address. We will respond to your request without undue delay, and in any event within 30 days of receipt. If necessary, this period may be extended by a further 60 days, of which you will be informed.\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 6. Recipients of Personal Data\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p>In the course of conducting business, your personal data may be shared with the following categories of recipients:\\n<\/p>\n\n\\n\n\n<p><strong>6.1. Processors acting on behalf of the Administrator\\n<\/strong><\/p>\n\n\\n\n\n<ul>\\n\n\n<li>Hosting and server service providers \u2013 for data storage and Service operation\\n<\/li>\n\n\\n\n\n<li>E-commerce and CMS platform providers \u2013 operating the online store software\\n<\/li>\n\n\\n\n\n<li>Electronic payment operators (e.g., Przelewy24, PayU, Stripe, PayPal) \u2013 solely to the extent necessary to process transactions\\n<\/li>\n\n\\n\n\n<li>Courier and logistics companies (e.g., InPost, DPD, DHL, Polish Post) \u2013 to the extent necessary to fulfill deliveries\\n<\/li>\n\n\\n\n\n<li>Accounting and invoicing service providers \u2013 to the extent necessary to issue sales documents<\/li>\n\n\\n\n\n<li>Analytical and marketing tool providers (e.g., Google Analytics, Meta Pixel) \u2013 based on separate consent or legitimate interest\\n<\/li>\n\n\\n\n\n<li>Email marketing service providers (e.g., Mailchimp, GetResponse, FreshMail) \u2013 based on consent\\n<\/li>\n\n\\n\n\n<li>CRM system providers \u2013 supporting customer service\\n<\/li>\n\n\\n<\/ul>\n\n\\n\n\n<p><strong>6.2. Public authorities and authorized entities\\n<\/strong> <br \/>Data may be shared with state authorities (e.g., courts, law enforcement agencies, tax authorities) solely on the basis of applicable law and only to the extent required by them.\\n<\/p>\n\n\\n\n\n<p><strong> 6.3. Transfers outside the European Economic Area (EEA)\\n<\/strong> <br \/>Some tool providers (e.g., Google, Meta\/Facebook) may process data outside the EEA. In such cases, the transfer takes place on the basis of standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR) or other mechanisms ensuring an adequate level of data protection. Details are available in the privacy policies of the respective providers.<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 7. Data Security\\n\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p>The Administrator applies appropriate technical and organizational measures to protect processed personal data, in particular:<\/p>\n\n\\n\n\n<ul>\\n\n\n<li>SSL\/TLS connection encryption (HTTPS protocol) for all pages of the Service\\n<\/li>\n\n\\n\n\n<li>Password encryption using strong cryptographic algorithms (e.g., bcrypt)\\n<\/li>\n\n\\n\n\n<li>Regular data backups\\n<\/li>\n\n\\n\\n\n\n<li>Restriction of access to data exclusively to authorized employees and associates\\n<\/li>\n\n\\n  \\n\n\n<li>Application of the principle of least privilege\\n<\/li>\n\n\\n      \n\n<li>Regular software updates and security patching\\n<\/li>\n\n\\n      \n\n<li>Security monitoring of the Service and infrastructure\\n<\/li>\n\n\\n\n\n<li>Employee training in personal data protection\\n<\/li>\n\n\\n\n\n<li>Conclusion of data processing agreements with external entities<\/li>\n\n\\n<\/ul>\n\n\\n\n\n<p>Despite the security measures in place, the Administrator cannot guarantee 100% security of data transmission over the Internet. In the event of a personal data breach that may pose a high risk to the rights or freedoms of natural persons, the Administrator will notify the affected Users without undue delay.\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 8. Cookies\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p><strong>8.1.  What are cookies?\\n<\/strong> <br \/>Cookies are small text files sent by the Service to the User\u2019s web browser and stored on their device (computer, phone, tablet). Cookies allow, among other things, for the retention of User settings, maintenance of login sessions, operation of the shopping cart, and analysis of user behavior.\\n<\/p>\n\n\\n\n\n<p><strong>8.2. Types of cookies used\\n<\/strong> <br \/>A) By storage duration:\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"table\",\"props\":{\"image_svg_color\":\"emphasis\",\"link_style\":\"default\",\"link_text\":\"Read more\",\"meta_style\":\"text-meta\",\"show_content\":true,\"show_image\":true,\"show_link\":true,\"show_meta\":true,\"show_title\":true,\"table_order\":\"1\",\"table_responsive\":\"overflow\",\"table_width_meta\":\"shrink\",\"table_width_title\":\"shrink\"},\"children\":[{\"type\":\"table_item\",\"props\":{\"content\":\"\n\n<p>Description<\/p>\n\n\",\"title\":\"Type\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Temporary files that are deleted when the browser session ends (when the browser window is closed). Essential for the proper functioning of the Service during a single visit.\",\"title\":\"Session cookies\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Files stored on the User\u2019s device for a specified period (from a few days to several years), even after the browser is closed. Used to remember preferences and facilitate subsequent visits.\",\"title\":\"Persistent cookies\"}}]},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"B) By purpose and legal basis:\\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"table\",\"props\":{\"image_svg_color\":\"emphasis\",\"link_style\":\"default\",\"link_text\":\"Read more\",\"meta_style\":\"text-meta\",\"show_content\":true,\"show_image\":true,\"show_link\":true,\"show_meta\":true,\"show_title\":true,\"table_order\":\"1\",\"table_responsive\":\"overflow\",\"table_width_meta\":\"shrink\",\"table_width_title\":\"shrink\"},\"children\":[{\"type\":\"table_item\",\"props\":{\"content\":\"Examples and Purpose\",\"title\":\"Category\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Login session, shopping cart, CSRF security tokens, language\/currency selection. Essential for store operation \u2013 do not require consent.\",\"title\":\"Essential (always active)\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Remembering User preferences (e.g., font size, recently viewed products). Require consent.\",\"title\":\"Functional\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Google Analytics, Hotjar \u2013 traffic measurement, behavior analysis. Require consent.\",\"title\":\"Analytical\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Meta Pixel (Facebook\/Instagram), Google Ads, TikTok Pixel \u2013 remarketing and ad targeting. Require consent.\",\"title\":\"Marketing\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Third-party tools (e.g., chat, payment widget, social media buttons). The relevant third-party provider is responsible for these cookies.\",\"title\":\"Partner (third-party)\"}}]},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p><strong>8.3. Detailed list of cookies used<\/strong><\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"table\",\"props\":{\"image_svg_color\":\"emphasis\",\"link_style\":\"default\",\"link_text\":\"Read more\",\"meta_style\":\"text-meta\",\"show_content\":true,\"show_image\":true,\"show_link\":true,\"show_meta\":true,\"show_title\":true,\"table_order\":\"1\",\"table_responsive\":\"overflow\",\"table_width_meta\":\"shrink\",\"table_width_title\":\"shrink\"},\"children\":[{\"type\":\"table_item\",\"props\":{\"content\":\"\n\n<p>Purpose \/ Provider \/ Duration<\/p>\n\n\",\"title\":\"Cookie Name\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Google Analytics \u2013 user identification; duration: 2 years\",\"title\":\"_ga, _ga_XXXX\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Google Analytics \u2013 user differentiation; duration: 24 hours\",\"title\":\"_gid\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Google Analytics \u2013 request rate limiting; duration: 1 minute\",\"title\":\"_gat\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Meta (Facebook\/Instagram) Pixel \u2013 remarketing; duration: 3 months\",\"title\":\"_fbp\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Facebook \u2013 advertising; duration: 3 months\",\"title\":\"fr\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Store session, shopping cart; duration: session or up to 30 days\",\"title\":\"PHPSESSID \/ session_id\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Form security; duration: session\",\"title\":\"csrf_token\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Shopping cart identification; duration: up to 7 days\",\"title\":\"cart_id\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Saved User settings; duration: up to 12 months\",\"title\":\"user_preferences\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Remembering cookie consent choice; duration: 12 months\",\"title\":\"cookie_consent\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"Google Ads \u2013 conversions; duration: 3 months\",\"title\":\"_gcl_au\"}},{\"type\":\"table_item\",\"props\":{\"content\":\"TikTok Pixel \u2013 conversion tracking; duration: 13 months\",\"title\":\"_ttp\"}}]},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p>The above list is subject to change as the Service develops. The current list is always available in the cookie management panel within the Service.\\n<\/p>\n\n\\n\n\n<p><strong>8.4. Managing cookies \u2013 Consent Management Platform (CMP)\\n<\/strong> <br \/>Upon the first visit to the Service, a cookie banner is displayed allowing the management of consent for individual cookie categories. Preferences can be changed at any time by clicking the \u201cManage cookies\u201d icon\/link available in the footer of the Service.\\n<\/p>\n\n\\n\n\n<p><strong>Browser settings:\\n<\/strong> <br \/>Users may manage cookies at any time through their web browser settings:\\n<\/p>\n\n\\n\n\n<ul>\\n\n\n<li>Google Chrome: Menu \u2192 Settings \u2192 Privacy and security \u2192 Cookies and other site data<\/li>\n\n\\n\n\n<li>Mozilla Firefox: Menu \u2192 Settings \u2192 Privacy & Security \u2192 Cookies and Site Data\\n<\/li>\n\n\\n\n\n<li>Microsoft Edge: Menu \u2192 Settings \u2192 Cookies and site permissions\\n<\/li>\n\n\\n\n\n<li>Safari: Preferences \u2192 Privacy \u2192 Manage Website Data\\n<\/li>\n\n\\n\n\n<li>Opera: Menu \u2192 Settings \u2192 Advanced \u2192 Privacy and security\\n<\/li>\n\n\\n<\/ul>\n\n\\n\n\n<p>Note: Disabling all cookies, including essential ones, may prevent the use of certain features of the Service, including placing orders, logging into an account, and using the shopping cart.\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 9. Third-Party Tools and External Parties\\n\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p><strong>9.1. Google Analytics<\/strong> <br \/>The Service uses Google Analytics \u2013 a web analytics service provided by Google LLC (or Google Ireland Limited in the case of the EEA). Google Analytics uses cookies to analyze how the Service is used. Information generated by cookies (including IP address) is transmitted to Google\u2019s servers. The Administrator uses the IP anonymization feature (IP masking). Details: https:\/\/policies.google.com\/privacy<\/p>\n\n\\n\n\n<p><strong>9.2. Meta Pixel (Facebook \/ Instagram)<\/strong> <br \/>The Service uses the tracking pixel of Meta Platforms Ireland Limited. Meta Pixel enables the measurement of the effectiveness of ads displayed on Facebook and Instagram and the creation of advertising audiences. Processing is carried out based on the User\u2019s consent. Details: https:\/\/www.facebook.com\/policy.php\\n<\/p>\n\n\\n\n\n<p><strong>9.3. Google Ads and Remarketing<\/strong> <br \/>The Service may use Google Ads Remarketing, which allows the Service\u2019s ads to be displayed to Users who have previously visited the Service. Processing is based on consent.\\n<\/p>\n\n\\n\n\n<p><strong> 9.4. Payment Operators<\/strong> <br \/>The Service integrates with external payment operators. Transaction data is transmitted to the selected operator (Przelewy24, PayU, Stripe, or another) and is subject to their privacy policy. The Administrator does not store full payment card details.\\n<\/p>\n\n\\n\n\n<p><strong>9.5. Embedded External Content<\/strong> <br \/>The Service may contain social media plugins (e.g., Facebook \u201cLike\u201d buttons, share buttons), chat widgets, and other external elements. Interaction with these elements may result in data being transmitted to third parties, even without actively clicking a button. The Administrator recommends reviewing the privacy policies of these parties.\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 10. Profiling and Automated Decision-Making\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p>The Administrator may profile Users based on their behavior within the Service (e.g., product categories viewed, purchase history) for the purpose of personalizing displayed content and product recommendations. Profiling is carried out on the basis of the Administrator\u2019s legitimate interest or the User\u2019s consent.\\n<\/p>\n\n\\n\n\n<p>The profiling conducted by the Administrator does not lead to automated decision-making that produces legal effects concerning the User or similarly significantly affects them within the meaning of Art. 22 GDPR. The User has the right to object to profiling.\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 11. Changes to the Privacy Policy\\n\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<p>The Administrator reserves the right to amend this Policy in the event of:\\n<\/p>\n\n\\n\n\n<ul>\\n\n\n<li>Changes to applicable law, in particular regarding personal data protection\\n<\/li>\n\n\\n\n\n<li>Changes to the methods, purposes, or legal bases for processing personal data\\n<\/li>\n\n\\n\n\n<li>Implementation of new services, functionalities, or tools within the Service\\n<\/li>\n\n\\n<\/ul>\n\n\\n\n\n<p>The Administrator will inform Users of material changes to the Policy by:\\n<\/p>\n\n\\n\n\n<ul>\\n\n\n<li>Displaying an appropriate notice on the Service for at least 14 days before the changes take effect\\n<\/li>\n\n\\n\n\n<li>Sending information to the email address provided by the User (for account holders and newsletter subscribers)\\n<\/li>\n\n\\n<\/ul>\n\n\\n\n\n<p>Continued use of the Service after the changes take effect constitutes acceptance of the new Policy. Previous versions of the Policy are available in the archive on the Service\u2019s website.\\n<\/p>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}},{\"type\":\"headline\",\"props\":{\"content\":\"\u00a7 12. Final Provisions\\n\",\"image_align\":\"left\",\"image_margin\":\"xsmall\",\"margin_top\":\"small\",\"maxwidth\":\"2xlarge\",\"title_element\":\"div\",\"title_style\":\"h4\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<ol>\\n\n\n<li>This Policy is effective from 1 April 2026.\\n<\/li>\n\n\\n\n\n<li>This Policy constitutes an integral part of the Terms and Conditions of the prenatalni.pl service.\\n<\/li>\n\n\\n\n\n<li>Matters not regulated by this Policy shall be governed by generally applicable law.\\n<\/li>\n\n\\n\n\n<li>Any disputes arising from this Policy that cannot be resolved amicably shall be settled by the court having jurisdiction over the Administrator\u2019s registered seat.<\/li>\n\n\\n<\/ol>\n\n\",\"margin_bottom\":\"default\",\"margin_top\":\"default\",\"maxwidth\":\"xlarge\"}}]},{\"type\":\"column\",\"props\":{\"image_position\":\"center-center\",\"position_sticky_breakpoint\":\"m\",\"vertical_align\":\"middle\",\"width_medium\":\"1-3\"}}]}]}],\"version\":\"5.0.19\"} --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy and Cookies \u00a7 1. Definitions The following terms used in this Policy shall mean: Administrator: Sonrisa Clinic Sp. z o.o., registered in \u0141\u00f3d\u017a, ul. Z\u0142otno 24a, 94-221 \u0141\u00f3d\u017a, KRS: 000001201869, NIP: 7272894044 Service: The website and online store available at www.prenatalni.pl. User: Any natural person, legal entity, or organizational unit using the Service. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-799","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy and Cookies &#8226; Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy and Cookies &#8226; Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy\" \/>\n<meta property=\"og:description\" content=\"Privacy Policy and Cookies \u00a7 1. Definitions The following terms used in this Policy shall mean: Administrator: Sonrisa Clinic Sp. z o.o., registered in \u0141\u00f3d\u017a, ul. Z\u0142otno 24a, 94-221 \u0141\u00f3d\u017a, KRS: 000001201869, NIP: 7272894044 Service: The website and online store available at www.prenatalni.pl. User: Any natural person, legal entity, or organizational unit using the Service. [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/\" \/>\n<meta property=\"og:site_name\" content=\"Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-15T09:57:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/prenatalni.pl\/wp-content\/uploads\/2026\/03\/konferencja-wrzesien.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1100\" \/>\n\t<meta property=\"og:image:height\" content=\"1133\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/privacy-policy-and-cookies\\\/\",\"url\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/privacy-policy-and-cookies\\\/\",\"name\":\"Privacy Policy and Cookies &#8226; Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/#website\"},\"datePublished\":\"2026-03-28T05:35:18+00:00\",\"dateModified\":\"2026-05-15T09:57:28+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/privacy-policy-and-cookies\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/prenatalni.pl\\\/en\\\/privacy-policy-and-cookies\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/privacy-policy-and-cookies\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy and Cookies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/\",\"name\":\"Mi\u0119dzynarodowa Konferencja Ginekologiczno-Po\u0142o\u017cnicza\",\"description\":\"Prenatalni \u2013 kursy i konferencja ginekologiczna\",\"publisher\":{\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/#organization\"},\"alternateName\":\"Prenatalni\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/#organization\",\"name\":\"Prenatalni\",\"alternateName\":\"Mi\u0119dzynarodowa Konferencja Ginekologiczno-Po\u0142o\u017cnicza\",\"url\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/prenatalni.pl\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/sonrisa_sygnet_navy_RGB_S.png\",\"contentUrl\":\"https:\\\/\\\/prenatalni.pl\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/sonrisa_sygnet_navy_RGB_S.png\",\"width\":400,\"height\":268,\"caption\":\"Prenatalni\"},\"image\":{\"@id\":\"https:\\\/\\\/prenatalni.pl\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy and Cookies &#8226; Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy and Cookies &#8226; Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy","og_description":"Privacy Policy and Cookies \u00a7 1. Definitions The following terms used in this Policy shall mean: Administrator: Sonrisa Clinic Sp. z o.o., registered in \u0141\u00f3d\u017a, ul. Z\u0142otno 24a, 94-221 \u0141\u00f3d\u017a, KRS: 000001201869, NIP: 7272894044 Service: The website and online store available at www.prenatalni.pl. User: Any natural person, legal entity, or organizational unit using the Service. [&hellip;]","og_url":"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/","og_site_name":"Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy","article_modified_time":"2026-05-15T09:57:28+00:00","og_image":[{"width":1100,"height":1133,"url":"https:\/\/prenatalni.pl\/wp-content\/uploads\/2026\/03\/konferencja-wrzesien.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/","url":"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/","name":"Privacy Policy and Cookies &#8226; Mi\u0119dzynarodowy Kurs Ginekologiczno-Po\u0142o\u017cniczy","isPartOf":{"@id":"https:\/\/prenatalni.pl\/en\/#website"},"datePublished":"2026-03-28T05:35:18+00:00","dateModified":"2026-05-15T09:57:28+00:00","breadcrumb":{"@id":"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/prenatalni.pl\/en\/privacy-policy-and-cookies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/prenatalni.pl\/en\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy and Cookies"}]},{"@type":"WebSite","@id":"https:\/\/prenatalni.pl\/en\/#website","url":"https:\/\/prenatalni.pl\/en\/","name":"Mi\u0119dzynarodowa Konferencja Ginekologiczno-Po\u0142o\u017cnicza","description":"Prenatalni \u2013 kursy i konferencja ginekologiczna","publisher":{"@id":"https:\/\/prenatalni.pl\/en\/#organization"},"alternateName":"Prenatalni","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/prenatalni.pl\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/prenatalni.pl\/en\/#organization","name":"Prenatalni","alternateName":"Mi\u0119dzynarodowa Konferencja Ginekologiczno-Po\u0142o\u017cnicza","url":"https:\/\/prenatalni.pl\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/prenatalni.pl\/en\/#\/schema\/logo\/image\/","url":"https:\/\/prenatalni.pl\/wp-content\/uploads\/2026\/03\/sonrisa_sygnet_navy_RGB_S.png","contentUrl":"https:\/\/prenatalni.pl\/wp-content\/uploads\/2026\/03\/sonrisa_sygnet_navy_RGB_S.png","width":400,"height":268,"caption":"Prenatalni"},"image":{"@id":"https:\/\/prenatalni.pl\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/pages\/799","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/comments?post=799"}],"version-history":[{"count":44,"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/pages\/799\/revisions"}],"predecessor-version":[{"id":845,"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/pages\/799\/revisions\/845"}],"wp:attachment":[{"href":"https:\/\/prenatalni.pl\/en\/wp-json\/wp\/v2\/media?parent=799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}