Privacy policy
This privacy policy describes how Cuprum-Med Sp. z o.o. processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament (GDPR).
1. Data controller
The controller of your personal data is:
Cuprum-Med Sp. z o.o.
ul. M. Skłodowskiej-Curie 70, 59-300 Lubin, Poland
KRS: 0000508852, NIP: 6922506490
Email: kontakt@cuprummed.pl
2. Purposes and legal basis
- Providing medical services — Art. 9(2)(h) GDPR and Polish Medical Activity Act
- Handling contact form inquiries — Art. 6(1)(a) GDPR (consent)
- Legal obligations (accounting, medical record archiving) — Art. 6(1)(c) GDPR
3. Retention period
- Medical documentation — 20 years (per Patient Rights Act)
- Contact form data — until consent withdrawal or max. 12 months
- Accounting data — 5 years from the end of the fiscal year
4. Your rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR) — except medical records
- Right to restrict processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with the Polish Data Protection Authority (uodo.gov.pl)
5. Cookies
The cuprummed.pl website does not use tracking cookies or third-party analytics. We only use the browser's localStorage to remember accessibility settings (text size, contrast) — entirely on the user's device.
6. Data recipients
- Entities authorized by law (NFZ, administrative authorities)
- IT service providers (hosting, email) under data processing agreements
We do not transfer data outside the European Economic Area.
7. GDPR contact
For matters related to personal data processing, please contact us at kontakt@cuprummed.pl.
8. Information clauses
Detailed GDPR information clauses for selected processing activities: