Privacy policy

The controller is Primavera sp. z o.o., ul. Szlak 77/211, 31-153 Kraków, tax number (NIP) 9452172135, company register number (KRS) 0000451320, running the Primavera Psychotherapy Centre.

Contact in matters concerning personal data: gabinet@primavera.krakow.pl, tel. 662 888 417.

What	Which data	Legal basis	For how long
Contact form	name, e-mail, phone (if you give it), content of the message	Article 6(1)(b) and (f) GDPR — answering your question and contact about the service	up to one year after the end of the correspondence
Signing up for a group or workshop	name, e-mail, phone, content of the application	Article 6(1)(b) GDPR — application to take part	up to one year after the event ends
Contact by phone and e-mail	phone number, e-mail address, content of the conversation or message	Article 6(1)(b) and (f) GDPR	up to one year after the last contact
Website statistics (Google Analytics)	cookie identifier, data about the visit, approximate location	Article 6(1)(a) GDPR — your consent	up to 14 months
Advertising (Google Ads)	cookie identifier, information about the visit and about booking an appointment	Article 6(1)(a) GDPR — your consent	up to 13 months
Aggregate measurement of how the site and ads perform, without cookies (before you give consent or if you decline)	the IP address needed for the connection, the fact that a page was viewed, browser type — no cookie identifier	Article 6(1)(f) GDPR — legitimate interest: knowing whether the site and ads work	we do not store this data; Google processes it in aggregate
Remembering your cookie choice	a record of your choice in the browser (cc_cookie)	Article 6(1)(c) and (f) GDPR	6 months
Security and running the site	IP address, technical browser data in the server logs	Article 6(1)(f) GDPR — protection against abuse	up to 30 days

Giving your data is voluntary, but without it we cannot answer your message or sign you up for an event.

Health data. We do not ask about health in our forms and we ask you not to describe symptoms or treatment history in them. If you do write about your health anyway, we will treat it as special category data provided on your own initiative (Article 9(2)(a) GDPR) and delete it as soon as the matter is settled. Difficulties are best talked about at a session or by phone.

Therapy records. This policy concerns the website. We discuss the rules for processing the data of people using psychotherapy at the first session at the practice.

• Cloudflare, Inc. — website hosting (servers in the European Union, protection against attacks).
• Hostido (e-mail and domain) — messages from the form arrive in our mailbox.
• Google Ireland Ltd. — Google Tag Manager, Google Analytics and Google Ads. The cookies and identifiers of these tools work only after you give consent; without consent Google receives only cookieless signals (section 5).
• TwójPsycholog — the booking calendar. On the “Book a session” page it loads as soon as you open the page; on specialists' profiles only after you click “Show calendar” or “Book a session”. Your browser then connects to twojpsycholog.pl and downloads Google Fonts — both services learn your IP address in the process. The data you give when booking is processed by the calendar operator in line with its own privacy policy.
• Google Maps — the map on the “Contact” page loads only after you click “Show map”; until then your browser does not connect to Google.
• Facebook (Meta) — only if you click the link to our profile; you then move to a Meta website.

We do not sell your data and we do not pass it to other companies for marketing purposes.

Google and Cloudflare may also process data outside the EEA, among others in the United States. This takes place on the basis of a European Commission adequacy decision (Data Privacy Framework) or standard contractual clauses.

The site uses cookies (and similar technologies):

• necessary — remembering your consent choice (cc_cookie, 6 months). These always work;
• statistical and marketing — Google Analytics and Google Ads. These are stored only after you give consent.

You can change or withdraw your consent at any time — at the bottom of the page, under “Cookie settings”. You can also delete cookies in your browser settings.

The site uses Google Consent Mode. Google Tag Manager loads when you open a page, but until you give consent Google Analytics and Google Ads do not store or read cookies and receive no advertising identifiers. Google then gets only single cookieless signals — that a page was viewed, at what time, in which browser, and the IP address needed for the connection itself. They are used for aggregate, estimated statistics on how the site and ads perform, not to recognise an individual. When you withdraw your consent, we delete the cookies of these tools and refresh the page.

Two other connections to Google do not depend on this consent and are not used for statistics or advertising: the booking calendar downloads Google fonts (on the “Book a session” page as soon as you open it, on specialists' profiles after you click “Show calendar” or “Book a session”), and the map connects to Google only after you click “Show map”. See section 3 for details.

You have the right to:

• access your data and receive a copy of it,
• have your data corrected,
• have your data erased (“the right to be forgotten”),
• restrict processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw consent at any time (this does not affect the lawfulness of processing before the withdrawal).

To exercise these rights, write to gabinet@primavera.krakow.pl.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

We do not make decisions about you in an automated way and we do not profile you in a way that produces legal effects.

We update the policy when we change the tools or the way the site works.

Last updated: 28 September 2026.