Doctor.One General Privacy Policy

To make it easier for you to understand and navigate this document, below we have explained some of the terms we use most often:

‍

• GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;

‍

• Newsletter – a service provided electronically by Doctor One, consisting of enabling interested recipients to receive the most important information related to services offered by Doctor One and health-promoting content to the provided e-mail address;


‍

• Service – the internet service operated by Doctor One at https://www.doctor.one or https://www.doctor.one/de;

‍

• Policy – the document you are currently reading, which is the Doctor One General Privacy Policy;


The data controller of:

‍

• persons visiting and using the Service;
• persons who follow the Doctor One profile on social media platforms such as Facebook, Instagram, TikTok and LinkedIn, and interact with them;
• persons who contact Doctor One via email, telephone, contact form on the Service or other available communication channels;
• candidates for Doctor One employees;
• our business partners (advisors or consultants, contractors and service providers for Doctor One);
• subscribers to our Newsletter

‍

is Doctor One sp. z o.o. with a registered office in Warsaw (00-043) at ul. Tadeusza Czackiego 19 lok. 1, entered into the register of entrepreneurs of the National Court Register (KRS) maintained by the District Court for the Capital City of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number: 0000899724, holding Tax Identification Number (NIP): 1182223969 and share capital 138 000 PLN (hereinafter referred to as “Doctor One”, “we”, “our”, “us”).

‍

Data Protection Officer

‍

We have appointed a Data Protection Officer for Doctor One. All inquiries, requests, and complaints regarding the processing of personal data by Doctor One should be directed to the Data Protection Officer via email at: iod@doctor.one or in writing to our correspondence addresses: Doctor One sp. z o. o., ul. Czackiego 19 lok. 1, 00-043 Warszawa, Poland, with the annotation “GDPR”.

Depending on the data subject and the specific processing activity, as outlined in “WHO WE ARE AND WHOSE PERSONAL DATA WE PROCESS?”, Doctor One obtains your personal data directly from you when:


‍

• you browse the Service;
• you follow and interact with our channels on social media platforms;
• you contact us via email, telephone, contact form on the Service or other available communication channels;
• you respond to job offers at Doctor One;
• you contact us as a part of business cooperation, advisory or consulting, performance and delivery of services for us or you enter into an agreement with us in connection with the provision of such services;
• you subscribe to our Newsletter.

‍


We obtain your personal data from third parties when:

‍

• we receive your personal data from our contractor when you act as their representative, e.g. while entering into a contract with Doctor One, or when you are a contact person indicated by our contractor in a contract entered into with Doctor One.

We process personal data for the following purposes:


‍

1. persons visiting and using the Service:
   
   • ensuring the proper technical functioning of the Service (art. 6(1)(f) GDPR);
   • profiling for the purpose of analyzing Service usage statistics (art. 6(1)(f) GDPR).
     ‍
     Providing your personal data is necessary to use the Services.
     ‍
2. persons who follow the Doctor One profile on social media platforms Facebook, Instagram, TikTok and LinkedIn and interact with them:
   
   • informing about the services we provide and building a positive image of Doctor One (art. 6(1)(f) GDPR);
   • providing answers to questions and comments received via social media portals (art. 6(1)(f) GDPR);
   • implementation of tasks in the field of health promotion (art. 6(1)(f) GDPR).
     
     Due to the way social media portals operate, providing your personal data is necessary to follow our profiles and provide answers to your questions and comments via these media.
     ‍
3. persons who contact Doctor One via email, telephone, contact form on the Service or other available communication channels;
   
   • providing answers to received inquiries (art. 6(1)(f) GDPR)
     Providing your personal data is necessary for us to respond to your inquiry.
     ‍
4. candidates for Doctor One employees:
   
   • conducting the recruitment process and assessing your abilities, competences and suitability for work in the position for which you are applying (Art. 6(1)(b) of the GDPR and Art. 6(1)(a) GDPR);
   • storage of documentation related to your job application for the purposes of future recruitment processes - if you consent to it (Art. 6(1)(a) GDPR);
   • fulfillment of legal obligations resulting from the provisions of the Labor Code and other provisions of Polish labor law (art. 6(1)(c) GDPR)
     ‍
     In the scope specified in the provisions of the Labor Code (art. 221) providing data by you is necessary to conduct the recruitment process. In the remaining scope, providing data is voluntary and is not a condition for participating in recruitment. If you do not want us to process your personal data in a scope wider than specified in the provisions of the Labor Code, simply do not include them in your application.
     ‍
5. our business partners (advisors or consultants, contractors and service providers for Doctor One):
   
   • when you are a direct party to an agreement concluded with Doctor One: conclusion and performance of the agreement (Art. 6(1)(b) GDPR) and fulfillment by Doctor One of legal obligations related to the conclusion of the agreement and cooperation (including those resulting from the Social Insurance System Act and tax law provisions) (Art. 6(1)(c) GDPR);
   • when you act as a representative of our counterparty - a legal person when concluding an agreement: proper identification of the other party as a party to the agreement and conclusion of the agreement with the entity on whose behalf you act (art. 6(1)(f) GDPR) and ongoing contact regarding the services provided and cooperation between the other party to the agreement and Doctor One (art. 6(1)(f) GDPR);
   • when you are a contact person indicated by our counterparty in the agreement: ongoing contact regarding the services provided and cooperation between the other party to the agreement and Doctor One (art. 6(1)(f) GDPR).
     
     If you are a party to an agreement concluded with Doctor One, providing your personal data is a statutory requirement or is necessary to conclude an agreement with Doctor One.
     ‍
6. Newsletter subscribers:
   
   • informing about services provided by Doctor One and building a positive image of Doctor One (art. 6(1)(f) GDPR);
   • direct marketing of Doctor One services (art. 6(1)(f) GDPR);
   • implementation of tasks in the field of health promotion (art. 6(1)(f) GDPR).
     
     Providing your personal data is necessary to fulfil the subscription to our Newsletter.
     ‍

In case of:

1. persons visiting and using the website doctor.one
   
   • we process: IP address, data stored in cookies;
     ‍
2. persons who follow the Doctor One profile on social media platforms Facebook, Instagram, TikTok and LinkedIn and interact with them
   
   • we process: first and last name or nickname and other information that is publicly available on your profile or that you voluntarily provide to us; 
     ‍
3. persons who contact Doctor One via email, telephone, contact form on the Service or other available communication channels 
   
   • we process: first and last name, e-mail address, telephone number or other information that you voluntarily provide to us; 
     ‍
4. candidates for Doctor One employees
   
   • we process: first and last name, e-mail address, telephone number, information on education, qualifications and previous employment and other information, the provision of which is mandatory in accordance with the provisions of Polish law or which you voluntarily provide to us; 
     ‍
5. our business partners (advisors or consultants, contractors and service providers for Doctor One):
   
   • we process: first and last name, position, business e-mail address and telephone number, and in the case of partners conducting a sole proprietorship - also the NIP number;
     ‍
6. Newsletter subscribers
   
   • we process: first and last name, e-mail address.

Below you will find out how long we store the personal data we obtain, depending on the entities and categories of data processed:

1. persons visiting and using the Service:
   
   • information about your IP address is stored for as long as the archiving period in the server logs on which our website is located lasts;
   • information contained in cookies is stored in accordance with the retention periods included in the table located in the COOKIES section of the Policy;
     ‍
2. persons who follow the Doctor One profile on social media platforms Facebook, Instagram, TikTok and LinkedIn and interact with them:
   
   • data necessary to observe our profiles on social media and provide answers to your questions via these media are stored as long as you remain a follower of our profiles or interact with them, whereby your interactions such as comments or likes will remain visible even after you stop following our profile, until you withdraw or delete them; 
     ‍
3. persons who contact Doctor One via email, telephone, contact form on the Service or other available communication channels;
   
   • data necessary to provide an answer to your inquiries are stored for as long as it is necessary to resolve your case or as long as the limitation periods for claims specified in legal provisions require;
   • additionally, personal data needed by us to defend or pursue claims are stored for as long as the limitation periods for claims specified in legal provisions require; 
     ‍
4. candidates for Doctor One employees:
   
   • if you do not consent to the processing of your personal data contained in recruitment documents for the purposes of future recruitments, these data are deleted immediately after the end of recruitment for the position you are applying for, but in no case later than within 6 months from the day you apply for a job at Doctor One;
   • if you consent to the processing of your personal data contained in recruitment documents for the purposes of future recruitments, these data are stored until you withdraw your consent, but no longer than for 2 years after the end of recruitment; 
     ‍
5. our business partners (advisors or consultants, contractors and service providers for Doctor One):
   
   • we process your personal data for the entire period of performance of the contract concluded directly with you or the entity you represent, or for which you are a contact person, and after its completion, additionally for the period of storage of tax and accounting documentation specified in tax and accounting regulations;
     ‍
6. Newsletter subscribers:
   
   • data necessary to implement the Newsletter subscription is stored until you withdraw your consent to receive it.

Below is a list of entities to whom we may share your personal data:


‍

1. persons visiting and using the Service:
   
   • IT service and system providers, including analytical services and tools that we use to run the Service and analyze its usage statistics;
   • legal advisors and consultants serving Doctor One to the extent necessary to use their services;
     ‍
2. persons who follow the Doctor One profile on social media platforms Facebook, Instagram, TikTok and LinkedIn and interact with them:
   
   • social media portal operators; 
   • entities to which we commission the management of our profiles on social media platforms;
   • IT service and system providers that we use to run profiles on social media platforms;
   • legal advisors and consultants serving Doctor One to the extent necessary for us to use their services;
     ‍
3. persons who contact Doctor One via email, telephone, contact form on the Service or other available communication channels:
   
   • e-mail operators;
   • postal and courier operators;
   • IT service and system providers that we use to use e-mail and the Services;
   • legal advisors and consultants serving Doctor One to the extent necessary for us to use their services;
     ‍
4. candidates for Doctor One employees:
   
   • providers of IT services and systems that we use to manage recruitment processes;
   • legal advisors and consultants serving Doctor One to the extent necessary for us to use their services;
     ‍
5. our business partners (advisors or consultants, contractors and service providers for Doctor One):
   
   • entities providing accounting and bookkeeping services to Doctor One;
   • entities providing business support services;
   • providers of IT services and systems that we use for management within the organizational structure of Doctor One;
   • legal advisors and consultants serving Doctor One to the extent necessary for us to use their services;
     ‍
6. Newsletter subscribers:
   
   • providers of IT services and systems that we use to send the Newsletter.

Because we use the services of Google Operations Ireland Limited (Google Workspace) and Strikingly, your personal data may be transferred by these entities outside the European Economic Area based on standard contractual clauses (Art. 46(2)(c) of the GDPR). Any questions regarding the transfer of data outside the EEA should be directed to these entities.

‍

More information can be found here:

• Google legal frameworks for data transfers;
• Strikingly’s Privacy Policy.

In connection with our processing of your personal data, you have the right to:


‍

• request access to your personal data and their rectification

‍

You have the right to access and have your personal data rectified at any time if it is incorrect.

• erasure of personal data we hold about you and the right to restrict their processing

‍

At your request, we will proceed with the erasure of the data collected about you after the purpose for which the data was collected has been fulfilled. You have the right at any time to request that we erase data about you or restrict its processing.


‍

• data portability

‍

To the extent that personal data is processed in an automated manner for the purpose of performing a contract (Art. 6(1)(b) GDPR) or based on your consent (Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR), you have the right to receive your personal data from us in a structured, commonly used machine-readable format, and you have the right to transmit this personal data to another controller without hindrance from us.


‍

• object to data processing

‍

To the extent that personal data is processed for the purpose of realizing the legitimate interests of Doctor One (Art. 6(1)(f) GDPR), you have the right to object to the processing of personal data.


‍

• lodge a complaint with a supervisory authority

‍

If you believe that our processing of your personal data violates applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office in Warsaw.


‍

• withdraw consent for the processing of personal data

‍

If we process personal data based on your consent, you have the right to withdraw the granted consent at any time, which remains without impact on the lawfulness of the processing carried out based on this consent before its withdrawal.

‍

If you wish to exercise your rights, please contact us via e-mail at the address of the Data Protection Officer: iod@doctor.one or in writing to our correspondence address:


‍

• Doctor One sp. z o. o., ul. Czackiego 19 lok. 1, 00-043 Warszawa, Poland

‍


with the annotation “GDPR”.

We do not use any information provided by you for the purposes of automated decision-making.

We and our business partners use various solutions and tools used for analytical and marketing purposes. Below is basic information about these tools along with an indication of our platform on which they are used. Detailed information in this regard can be found in the privacy policies of individual partners.


‍

GOOGLE ADS

‍

On the Service, we use Google Ads. This is a tool that allows measuring the effectiveness of information and marketing campaigns carried out by Doctor One, allowing for the analysis of data such as keywords or the number of unique users. The Google Ads platform also allows for displaying our messages to people who have visited the Website in the past. Information on the processing of data by Google regarding the above service can be found here.


‍

GOOGLE ANALYTICS

‍

On the Service, we use Google Analytics. Google Analytics cookies are files used by Google to analyze how the Service is used and to create statistics and reports on the functioning of the Service. Google does not use the collected data to identify the user, nor does it combine this information to enable identification. Detailed information on the scope and principles of data collection in connection with this service can be found here.


‍

HOTJAR

‍

On the Service, we use Hotjar. This is a tool that allows monitoring user traffic on the website: creating a click map based on it and analyzing the path taken by users. Detailed information on the scope and principles of data collection in connection with this service can be found here.

We process personal data of users who follow Doctor One profiles on social media portals Facebook, Instagram, TikTok, and LinkedIn and interact with them. Detailed information on the processing of data (including those regarding data transfer outside the EEA by these entities) by individual portals can be found under the following links:


‍

• Facebook and Instagram Privacy Policy;
• TikTok Privacy Policy;
• LinkedIn Privacy Policy.

On the Service, we use cookie technology ("cookies") and similar ones (e.g., pixel tags).Cookies are small packets of information saved on end devices, usually containing the website address, date of placement, expiration date, a unique number, and additional information consistent with the purpose of the given file.

‍

Cookies can be divided into 2 categories:

‍

• necessary and functional cookies, the use of which is required for the proper operation of our Service; 
• statistical and analytical cookies, which allow us to understand how users behave on the Website using aggregated and anonymous statistical information.

‍

The table below describes in detail the cookies we use on the Service:

You can disable the saving of cookies directly on the device used to connect to our Service, according to the instructions of the browser manufacturer:


‍

• Google Chrome
• Safari
• Mozilla Firefox

‍


Information on configuring and deleting cookies in other web browsers can be found on the websites of their manufacturers.

The provisions of the Policy may be subject to improvements and changes, and its latest versions will be published on our Service each time and will be dated with the last update.

The Policy in this wording is effective from may 2026.