Privacy Policy

DERMMEDIC Sp. z o.o.
Dermatology Centre Kraków – Czyżyny

Last updated: 2026-08-16

This Privacy Policy applies to the processing of personal data in connection with the use of the www.dermmedic.pl website, including the appointment booking options available through it.

1. Data Controller

The controller of personal data is:

DERMMEDIC Spółka z ograniczoną odpowiedzialnością
KRS: 0001188095
NIP: 6751817302
REGON: 542425286
Os. Dywizjonu 303 62C, 31-875 Kraków, Poland E-mail: dermmedic.pl@gmail.com
Phone: +48 510 00 22 03

The Controller is a healthcare provider.

2. Scope

This Policy applies to users of the www.dermmedic.pl website, including individuals who:

• use appointment booking systems available through the website,
• proceed from the DermMedic website to external booking systems,
• contact the Controller,
• browse the website's content.

3. Appointment Booking – MyDr and Booksy

Through the DermMedic website, users may access external appointment booking systems, in particular MyDr and Booksy.

MyDr

An appointment booking module supplied by MyDr may be made available on the website.

When booking an appointment, a user may provide, among other information:

• first and last name,
• phone number,
• e-mail address,
• organisational information concerning the appointment.

Data entered into the MyDr system is processed in accordance with the rules and privacy policy of the system provider.

Depending on the scope of the activities performed, the system provider may act as a processor on behalf of the Controller or as a separate data controller.

Booksy

The website may contain buttons or links that allow users to proceed to Booksy and book an appointment.

Upon proceeding to Booksy, the user leaves the www.dermmedic.pl website, and the data provided within Booksy is processed in accordance with the rules applicable to the Booksy platform.

The controller of personal data processed in connection with the use of the Booksy platform is:

Booksy International sp. z o.o. ul. Prosta 67, 28th floor 00-838 Warsaw, Poland.

Booksy may process a user's data, among other purposes, to enable the user to use the platform and book an appointment.

When an appointment at DermMedic is booked through Booksy, the data necessary to fulfil the booking is disclosed by Booksy to DERMMEDIC Sp. z o.o.

After receiving this data, DERMMEDIC Sp. z o.o. processes it as the controller to the extent necessary to:

• manage the booking,
• communicate regarding the appointment,
• provide the service,
• comply with obligations arising from applicable law.

The scope of the data transferred may include, in particular:

• first and last name,
• phone number,
• e-mail address,
• information concerning the date, time and type of the service booked,
• other data provided by the user where necessary to manage the booking.

Detailed information on the processing of data by Booksy is available in the privacy policy and GDPR information provided by Booksy.

Legal Bases

With regard to organising and booking an appointment, DermMedic processes data in particular on the following legal bases:

• Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract and performing the service,
• Article 6(1)(c) GDPR – compliance with the Controller's legal obligations, where applicable,
• Article 6(1)(f) GDPR – the Controller's legitimate interests in organising appointments, communicating, and establishing, pursuing or defending legal claims.

Where data concerning health is processed in connection with the provision of healthcare services, it is also processed under the applicable provisions concerning special categories of personal data, in particular Article 9(2)(h) GDPR.

4. Data Processed in Connection with Contact

When a user contacts the Controller by phone or e-mail, the following data may be processed:

• first and last name,
• e-mail address,
• phone number,
• content of the message.

The legal basis for processing is, in particular:

Article 6(1)(f) GDPR – the Controller's legitimate interest in responding to enquiries and conducting communications.

Where the contact concerns booking or attending an appointment, the processing may also be based on Article 6(1)(b) GDPR.

5. Website Analytics

The website uses Vercel Analytics for statistical and technical purposes.

The Controller:

• does not use website analytics to profile users,
• does not use analytics to make automated decisions,
• does not use advertising pixels or remarketing tools on the website unless otherwise stated in this Policy.

The information collected may include, among other things:

• number of visits,
• device type,
• browser type,
• approximate location,
• technical information related to the use of the website.

The legal basis for processing is Article 6(1)(f) GDPR – the Controller's legitimate interest in ensuring the proper operation of the website and analysing how it is used.

6. Cookies and External Services

The www.dermmedic.pl website does not use marketing cookies or technologies intended to profile users unless this is expressly communicated to the user.

No remarketing tools or advertising pixels are currently used on the website.

Clicking a link to an external service, in particular Booksy, redirects the user to a service managed by another entity.

From the moment the user proceeds to a website or application operated by an external provider, that provider determines the rules governing the use of cookies and other technologies.

If the way in which the DermMedic website operates changes in the future, this Policy will be updated accordingly.

7. Recipients of Personal Data

Personal data processed by DermMedic may be disclosed to:

• IT and hosting service providers,
• providers of systems used to manage and organise appointments,
• the MyDr system provider,
• Booksy, to the extent resulting from the manner in which the platform is used and bookings are managed,
• entities providing technical, legal, accounting or organisational services to the Controller,
• entities authorised to receive the data under applicable law.

Booksy may also independently process users' data as a separate data controller in accordance with its own privacy policy.

8. Data Retention Period

Data processed in connection with the website and appointment management is retained:

• for the period necessary to fulfil the purpose for which it was collected,
• for the period necessary to manage and fulfil the booking,
• for the period required by law, where such an obligation applies,
• for the period necessary to establish, pursue or defend legal claims,
• until an effective objection is raised, where the data is processed under Article 6(1)(f) GDPR.

Data held in external systems, including Booksy, may be retained by those entities for the periods specified in their own privacy policies.

9. User Rights

To the extent provided for by the GDPR, the data subject has the right to:

• access their personal data,
• receive a copy of their personal data,
• rectify their personal data,
• erase their personal data,
• restrict the processing of their personal data,
• data portability,
• object to processing,
• withdraw consent where consent was the legal basis for processing.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

To exercise rights concerning data processed by DERMMEDIC Sp. z o.o., the data subject may contact the Controller:

E-mail: dermmedic.pl@gmail.com Phone: +48 510 00 22 03

Where a request concerns data processed independently by Booksy as a separate data controller, the data subject should contact Booksy directly.

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych).

10. Automated Decision-Making

DERMMEDIC Sp. z o.o. does not make decisions concerning website users based solely on automated processing, including profiling, which produce legal effects concerning them or similarly significantly affect them.

External platforms, including Booksy, may use their own analytical or profiling mechanisms under the terms set out in their privacy policies.

11. Changes to the Policy

This Privacy Policy may be updated in the event of:

• changes in applicable law,
• changes to the operation of the website,
• the introduction of new appointment booking systems,
• changes in the service providers used by DermMedic.

The current version of this document is available at www.dermmedic.pl.

12. Language Version

This Policy is available in Polish and English.

In the event of any discrepancy in interpretation, the Polish version shall prevail.