Privacy policy

Last updated: 03/09/2026

This privacy policy explains how Orto-vis — Gabinet Ortodontyczny (the clinic operated by Dr. Magdalena Dudkiewicz, located at Tadeusza Kościuszki 48, suite 1U, 90-427 Łódź, Poland) processes personal data in accordance with the EU General Data Protection Regulation (GDPR / Regulation 2016/679) and Polish patient rights legislation.

Data controller

Orto-vis — Gabinet Ortodontyczny, e-mail kontakt@orto-vis.pl.

Categories of data processed

Contact data submitted through the contact form or by e-mail (name, e-mail, phone, message content).
Medical data (special category under Art. 9 GDPR) collected during medical visits — processed exclusively to provide healthcare services.
Technical website data: IP address, browser type, anonymous usage statistics (only if you consent to analytics cookies).

Legal bases & purposes

Provision of healthcare services — Art. 9(2)(h) GDPR and the Polish Patient Rights Act.
Response to contact enquiries — Art. 6(1)(f) GDPR (legitimate interest).
Site analytics — Art. 6(1)(a) GDPR (your consent; revocable at any time in cookie settings).

Retention

Medical records are retained for 20 years per Polish law. Contact form messages are deleted no later than 12 months after last contact.

Your rights

You have the right to access, rectify, erase (subject to medical record retention), restrict processing, object, port your data, withdraw consent, and lodge a complaint with the Polish Data Protection Authority (UODO).

Recipients

Data may be processed by our hosting provider, e-mail delivery provider (Resend), and cookieless analytics provider (Plausible). All sub-processors are bound by data processing agreements.

Cookies

We use only essential cookies and — with your consent — anonymous analytics cookies. No marketing or profiling cookies.

Contact

For data protection enquiries, write to kontakt@orto-vis.pl.