Privacy and Cookies Policy (for the website nowaclinic.pl)

1. Personal Data Controller The controller of personal data is NOWA Sp. z o.o., registered office in Warsaw (02-707), Puławska Street 111A/5/3, entered into the National Court Register (KRS) under number 0001048792, NIP 7011157594. Contact with the Controller:

e-mail: nowaclinica@gmail.com

phone: +48 570 320 997

2. Scope of Data Processing We process personal data provided by users in the following cases: • when booking an appointment online or contacting us via a contact form; • when subscribing to the newsletter or giving marketing consent; • during the provision of medical services; • when using the website (cookies, visit statistics).

3. Purposes and Legal Basis for Processing Personal data are processed for the following purposes: • enabling registration, contact, and response (Art. 6(1)(b) GDPR); • provision of medical services (Art. 9(2)(h) GDPR); • maintaining accounting and medical documentation (Art. 6(1)(c) GDPR); • sending marketing information — only with the user’s consent (Art. 6(1)(a) GDPR); • analysis and website security (cookies — Art. 6(1)(f) GDPR).

4. Marketing Consent The user may voluntarily consent to the processing of their data for marketing purposes (e.g., to receive information about promotions, services, or events) via e-mail, SMS, or phone calls. Consent can be withdrawn at any time by sending an e-mail to nowaclinica@gmail.com or by clicking the “Unsubscribe” link in the received message.

5. Data Recipients Data may be shared only with: • entities managing the website, hosting, and booking systems (e.g., Altegio, JivoChat); • providers of IT systems and mail servers; • entities authorized by law (e.g., NFZ, regulatory authorities). All entities process data based on a data processing agreement and in compliance with the GDPR.

6. Rights of the Data Subject Every person has the right to: • access their personal data; • rectify, delete, or restrict the processing of their data; • data portability; • object to the processing of personal data; • withdraw consent at any time; • lodge a complaint with the President of the Personal Data Protection Office (UODO).

7. Data Retention Period We store data: • for the duration of service provision and the period required by medical law (medical documentation — at least 20 years); • marketing data — until the consent is withdrawn.

8. Cookies The website nowaclinic.pl uses cookies in order to: • ensure the proper functioning of the website; • analyze traffic and visit statistics (e.g., Google Analytics); • personalize content and offers. Users can change cookie settings in their browser at any time. Using the website without changing settings means consent to the use of cookies.

9. Data SecurityNOWA Sp. z o.o. applies technical and organizational measures to ensure data security, including: • SSL data transmission encryption; • restricted access to systems; • staff training in data protection.

10. Changes to the Privacy Policy This policy may be updated periodically to comply with legal changes or to reflect new website functionalities. The current version of the Privacy Policy is always available on the website nowaclinic.pl.