doctor.one service

Privacy Policy

Definitions

To make it easier for you to understand and navigate this document, we have explained some of the concepts we use most often below:
  1. Application — Doctor.One Patient and Doctor.One.Doctor app;
  2. Doctor.One Doctor App — mobile application “Doctor.One Doctor”, available for download in Google Play Store and Apple App Store;
  3. Doctor.One Patient App — the mobile application “Doctor.One Patient”, available for download in the Google Play Store and Apple App Store;
  4. Partner Application — whitelabel mobile application, based on technology belonging to Doctor One and produced by Doctor One, made available by the Partner for the use of the Partner Users, whereby the Partner acquires the rights to make the Partner Application available to the Partner Users under a separate agreement concluded between the Partner and Doctor One or Doctor One Polska;
  5. Newsletters — a service provided electronically by Doctor One, consisting in enabling interested Users to receive at the specified e-mail address the most important information related to the Service and the Application and content promoting health;
  6. Patients — persons using healthcare services provided by Doctor One Specialists, in particular through the Application;
  7. partner — an entity (e.g. a medical institution, company, institution) that is a party to a separate agreement with Doctor One or Doctor One Polska, under which: (i) is entitled to make the Partner Application available to the Partner Users, (ii) provides services electronically within the Partner Application and is a party to the contract for the provision of these services with the Partner Users;
  8. politics — the document you are reading, namely the Doctor One Application Privacy Policy;
  9. SHOWS — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC;
  10. Service — website run by Doctor One at https://www.doctor.one.
  11. specialist — a person practicing a medical profession, including in particular a doctor, pharmacist, physiotherapist, nurse, midwife, nutritionist or psychologist, who is registered in the Application and communicates with Users with its help, the Specialist may simultaneously be a Partner Specialist and/or a Doctor One Specialist;
  12. Specialist Doctor One — a person practicing a medical profession, including in particular a doctor, pharmacist, physiotherapist, nurse, midwife, nutritionist or psychologist, who collectively meets the following conditions: (i) cooperates with Doctor One Polska on the basis of the Terms of Cooperation with Doctor One Polska, and (ii) at least one Patient has a Care Plan purchased from him, and (iii) grants Doctor One on behalf of a medical entity (run by Doctor One Polska) of health services for Patients who have purchased an active Care Plan with this Specialist, on the basis of specified in the Terms of Cooperation with Doctor One Polska;
  13. Partner Specialist — a person practicing a medical profession and employed by the Partner or in a permanent contractual relationship with him, including in particular a doctor, pharmacist, physiotherapist, nurse, midwife, nutritionist or psychologist, who is registered in the Application and with its help communicates with the Partner Users;
  14. Users — persons who use the services provided electronically by Doctor One, consisting in the provision of the Doctor.One Patient application.

Who are we and whose data do we process?

Doctor One and Doctor One Polska are related entities in terms of capital and organisation. Doctor One and Doctor One Polska are separate controllers of personal data. Depending on the specific data processing process or service you use, the relevant controller will be one of these entities. Although part of the processing processes carried out by both companies may be the same or similar, Doctor One and Doctor One Polska are not joint controllers of each, and each administrator bears separate responsibility for the purposes and methods of processing pursued by them.
Whose data does Doctor One process?
Data Controller:
  1. visitors and users of the Website;
  2. People who follow and interact with Doctor One on the social networks Facebook, Instagram, TikTok and LinkedIn
  3. persons who contact Doctor One via e-mail, telephone, contact form on the Website or other available communication channels;
  4. candidates for Doctor One employees;
  5. Specialists;
  6. Partner specialists;
  7. our business partners (advisors or consultants, contractors and service providers for Doctor One);
  8. subscribers of our Newsletter;
  9. Users
is Doctor One Polish Limited Liability Company with its registered office in Warsaw (00-043) at ul. Tadeusz Czackiego 19 lok. 1, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the City of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number: 0000899724, having TIN number: 1182223969 and capital in the amount of PLN 79,000 (hereinafter referred to as”Doctor One”,”we”,”our”,”us”).
Whose data does Doctor One Polska process?
Data Controller:
  1. persons who contact Doctor One Polska via e-mail, telephone, contact form on the Website or other available communication channels;
  2. Patients;
  3. candidates for Doctor One Polska employees;
  4. Specialists Doctor One;
  5. our business partners (advisors or consultants, contractors and service providers for Doctor One Polska);
  6. Users
is Doctor One Polish Limited Liability Company with its registered office in Bieniewice (05-870) at ul. Poziomkowa 11, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the City of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number: 0000989484, having NIP number: 1182246930 and share capital in the amount of PLN 5 000. Doctor One is a medical entity entered in the Register of Entities Performing Medicinal Activities conducted by the Mazowieckie Voivode - registry number 000000254837 (hereinafter referred to as”Doctor One Poland”,”we”,”our”,”us”).
Data Protection Officer
We have appointed one Data Protection Officer for Doctor One and Doctor One Polska, who is Jedrzej Stepniowski. All inquiries, requests and complaints regarding the processing of personal data by Doctor One or Doctor One Polska, please send to the e-mail address: iod@doctor.one or in writing to our correspondence address respectively:
  1. Doctor One sp. z o. o., ul. Czackiego 19, loc. 1, 00-043 Warsaw,
  2. Doctor One Polska sp. z o.o.,, ul. Czackiego 19, loc. 1, 00-043 Warsaw,
with the note “GDPR”.

When and how do we collect your data?

Depending on this, he feels and within what process we process the data - according to the section: WHO ARE WE AND WHOSE DATA DO WE PROCESS? , as Doctor One or Doctor One Polska, we obtain your personal data directly from you when:
  1. you are browsing the Website;
  2. follow and interact with our social media channels;
  3. you contact us via e-mail, telephone, contact form on the Website or other available communication channels;
  4. you benefit from the health services we provide through our Doctor.One Patient App;
  5. you respond to job offers at Doctor One or Doctor One Polska;
  6. as a doctor, pharmacist, physiotherapist, midwife or psychologist, you register with the Application and communicate with Users with its help;
  7. you cooperate with Doctor One Polska on the basis of the Terms of Cooperation with Doctor One Polska, and on behalf of the medical entity Doctor One Polska provide health services to Patients on the terms set out in the Terms of Cooperation with Doctor One Polska;
  8. you contact us in the context of business cooperation, consulting or consulting, performing and providing services to us or entering into a contract with us in connection with the provision of such services;
  9. you subscribe to our Newsletter;
  10. you use the services provided electronically by Doctor One, consisting in the provision of the Doctor.One Patient Application.
We obtain your personal data from third parties when:
  1. as Doctor One Polska we receive your medical records from a medical entity from which we have taken over tasks in connection with the cessation of its medical activity, i.e. Doctor One;
  2. other entities providing health services provide us (Doctor One Polska) with your medical records or data concerning your health in order to ensure the continuity of the provision of health services;
  3. we receive as Doctor One or Doctor One Polska your data from your actual or legal guardian who registers you in the Doctor.One Patient App;
  4. we receive your data — as a patient or doctor — from our Partner, in connection with your use of the Partner Application provided by them;
  5. the doctor we employ sends you an invitation to use the Doctor.One Patient App;
  6. we receive your personal data from our contractor when you act as his representative when concluding a contract with Doctor One or Doctor One Polska or when you are a contact person indicated by our counterparty in the contract concluded with Doctor One or Doctor One Polska.

For what purpose and on what basis do we process your personal data?

We process personal data for the following purposes:
  1. visitors and users of the Website:
    1. ensuring the proper technical functioning of the Website (Article 6 (1) (f) of the GDPR);
    2. profiling in order to analyze statistics on the use of the Website (Article 6 (1) (f) of the GDPR).
    3. Providing your personal data is necessary to use the Website.
  2. People who follow and interact with Doctor One on Facebook, Instagram, TikTok and LinkedIn:
    1. informing about the services we provide and building a positive image of Doctor One (Article 6 (1) (f) of the GDPR);
    2. responding to inquiries and comments received via social networks (Article 6 (1) (f) GDPR);
    3. the implementation of tasks in the field of health promotion (Article 6 (1) (f) of the GDPR).
    4. Due to the way the social networks we use operate, the provision of your personal data is essential to follow our profiles and respond to your queries and comments through these media.
  3. persons who contact Doctor One or Doctor One Polska via e-mail, telephone, contact form on our Website or other available communication channels:
    1. responding to inquiries received (Article 6 (1) (f) GDPR).
    2. Providing your personal data is necessary to respond to your inquiries.
  4. Patients:
    1. provision of services of a fee-based nature, via the Doctor.One Patient Application, in accordance with the rules set out in the Act on Medical Activities, the Act on Patients' Rights and the Patient Ombudsman and the Act on the provision of services by electronic means (Article 9 (2) (h) of the GDPR in conjunction with the provisions of the aforementioned acts);
    2. compliance with legal obligations arising from tax law and accounting regulations related to the correct settlement and posting of payments for services purchased from Doctor One Polska (Article 6 (1) (c) GDPR in conjunction with tax law and accounting regulations);
    3. storage of medical records, in accordance with the rules set out in Chapter 7 of the Act on Patients' Rights and the Patient Ombudsman (Article 9 (2) (h) of the GDPR in conjunction with the provisions of the Act on Patients' Rights and the Patients' Rights Ombudsman);
    4. managing the quality of the services we provide by examining the level of your satisfaction, by means of the opinions you provide in the Doctor.One Patient App or on the Website to our medical staff (Article 9 (2) (h) and Article 6 (1) (f) GDPR);
    5. improving the Applications and services of Doctor One Polska, whereby we do not use health data for this purpose (Article 6 (1) (f) of the GDPR)
    6. Providing your personal data is necessary to provide you with health services and to fulfill our legal obligation to keep your medical records. Providing feedback to our medical staff is voluntary.
  5. Candidates for Doctor One and Doctor One Polska employees:
    1. conducting the recruitment process and assessing your abilities, competencies and suitability for the position for which you are applying (Article 6 (1) (b) GDPR and Article 6 (1) (a) GDPR);
    2. storing the documentation related to your job application for the purpose of future recruitment processes - if you give your consent (Art. 6 (1) lit. a GDPR);
    3. fulfilment of legal obligations arising from the provisions of the Labour Code and other provisions of Polish labour law (Article 6 (1) (c) of the GDPR).
    4. To the extent specified in the provisions of the Labor Code (Article 221) the provision of personal data by you is necessary to carry out the recruitment process. In the rest, the provision of data is voluntary and is not a condition for taking part in the recruitment. If you do not want us to process your personal data to a wider extent than specified in the provisions of the Labor Code, simply do not include it in your application.
  6. Specialists:
    1. execution of an agreement for the provision of electronic services, consisting in particular of enabling access to the Doctor One.Lekarz Application (Article 6 (1) (b) of the GDPR);
    2. fulfillment of legal obligations incumbent on Doctor One in connection with the performance of the contract for the provision of services by electronic means (Article 6 (1) (c) of the GDPR);
    3. to enable us to defend against possible claims or to pursue any claims (Article 6 (1) (f) GDPR);
    4. Providing personal data is necessary to conclude an agreement with us for the provision of services by electronic means. Failure to provide them will prevent you from using the Application.
  7. Specialists of Doctor One:
    1. execution of an agreement for the provision of electronic services, consisting in particular of enabling access to the Doctor One.Lekarz Application (Article 6 (1) (b) of the GDPR);
    2. fulfillment of legal obligations incumbent on Doctor One in connection with the performance of the contract for the provision of services by electronic means (Article 6 (1) (c) of the GDPR);
    3. performance of the contract concluded between Doctor One Specialist and Doctor One Polska as a result of Doctor One Specialist's acceptance of the Terms of Cooperation with Doctor One Polska (Article 6 (1) (b) of the GDPR);
    4. fulfillment of legal obligations related to the correct settlement and accounting of the contract concluded as a result of the Doctor One Specialist's acceptance of the Terms of Cooperation with Doctor One Polska, which result, among others, from tax law and accounting regulations (Article 6 (1) (c) of the GDPR);
    5. fulfilling the legal obligations incumbent on Doctor One Polska related to the conduct of medical activities, which result in particular from the provisions of the Act on Medicinal Activities, the Act on Patients' Rights and the Patient Ombudsman and the provisions on the maintenance of medical records (Article 6 (1) (c) of the GDPR);
    6. to enable us to defend against possible claims or to pursue any claims (Article 6 (1) (f) of the GDPR).
    7. Providing your personal data is necessary for the conclusion and performance of the Agreement with Doctor One Polska.
  8. Partner Specialists:
    1. execution of an agreement for the provision of electronic services, consisting in particular of enabling access to the Doctor One.Lekarz Application (Article 6 (1) (b) of the GDPR);
    2. fulfillment of legal obligations incumbent on Doctor One in connection with the performance of the contract for the provision of services by electronic means (Article 6 (1) (c) of the GDPR);
    3. to enable us to defend against possible claims or to pursue any claims (Article 6 (1) (f) GDPR);
    4. Providing personal data is necessary to conclude an agreement with us for the provision of services by electronic means. Failure to provide them will prevent you from using the Application.
  9. our business partners (advisors or consultants, contractors and service providers for Doctor One and Doctor One Polska):
    1. if you are directly a party to a contract concluded with Doctor One Polska or Doctor One: conclusion and performance of the contract (Article 6 (1) (b) of the GDPR) and the fulfilment by Doctor One or Doctor One Polska of legal obligations related to the conclusion of the contract and cooperation (including those arising from the provisions of the Act on the Social Security System and the provisions of tax law) (Article 6 (1) (c) of the GDPR);
    2. when concluding the contract you act as a representative of our counterparty - a legal entity: proper identification of the other party as a party to the contract and conclusion of a contract with the entity on whose behalf you act (Article 6 (1) (f) GDPR) and ongoing contact regarding services provided and cooperation between the other party to the contract and Doctor One or Doctor One Polska (Article 6 (1) (f) GDPR);
    3. when you are the contact person indicated by our counterparty in the contract: ongoing contact regarding the services provided and cooperation between the other party to the contract and Doctor One or Doctor One Polska (Article 6 (1) (f) of the GDPR).
    4. If you are a party to a contract concluded with Doctor One or Doctor One Polska, the provision of personal data by you is a statutory requirement or is necessary to conclude a contract with Doctor One.
  10. Subscribers to our Newsletter:
    1. informing about the services provided by Doctor One and Doctor One Polska and building a positive image of Doctor One and Doctor One Polska (Article 6 (1) (f) of the GDPR);
    2. direct marketing of Doctor One and Doctor One Polska services (Article 6 (1) (f) GDPR);
    3. the implementation of tasks in the field of health promotion (Article 6 (1) (f) of the GDPR).
    4. Providing your personal data is necessary to subscribe to our Newsletter.
  11. Users:
    1. execution of an agreement for the provision of electronic services, consisting in particular of enabling access to the Doctor One Application.Patient (Article 6 (1) (b) of the GDPR);
    2. to enable us to defend against possible claims or to pursue any claims (Article 6 (1) (f) GDPR);
    3. continuous improvement of the Doctor One.Patient Application (Art. 6 para. 1 lit. f GDPR).
    4. Providing your personal data is necessary to conclude an agreement with us for the provision of services by electronic means. Failure to provide them will prevent you from using the Application.
In the case
  1. visitors and users of the doctor.one website
    1. we process: IP address, data stored in cookies;
  2. People who follow and interact with Doctor One on Facebook, Instagram, TikTok and LinkedIn
    1. we process: your name or nickname and other information that is publicly available on your profile or that you voluntarily provide to us;
  3. persons who contact Doctor One or Doctor One Polska via e-mail, telephone, contact form on the Website or other available communication channels
    1. we process: name, email address, telephone number or other information that you voluntarily provide to us;
  4. Patients
    1. we process: health data, the collection and storage of which in medical records is necessary for the provision of health services and required under the provisions of Polish law defining the scope of information collected in medical records, analytical data on the source of download of the Doctor.One Patient App, as well as data necessary to make and settle payments for purchased services;
  5. Candidates for Doctor One and Doctor One Polska employees
    1. we process: name, e-mail address, telephone number, information about education, qualifications and previous employment and other information, the provision of which is mandatory in accordance with the provisions of Polish law or which you voluntarily provide to us;
  6. Specialists
    1. we process: name and surname, address of residence, email address, telephone number PESEL or NIP, photo, office address, information related to the business activity (if applicable), information related to the practice carried out such as, for example, the number of the right to practice, information about the specialization and academic titles held;
  7. Specialists of Doctor One
    1. we process: name and surname, address of residence, email address, telephone number PESEL or NIP, photo, office address, information related to the business activity (if applicable), information related to the practice carried out such as, for example, the number of the right to practice, information about the specialization and academic titles held;
  8. Partner Specialists
    1. we process: name and surname, address of residence, email address, telephone number PESEL or NIP, photo, office address, information related to the business activity (if applicable), information related to the practice carried out such as, for example, the number of the right to practice, information about the specialization and academic titles held;
  9. our business partners (advisors or consultants, contractors and service providers for Doctor One and Doctor One Polska)
    1. we process: name and surname, position, business e-mail address and telephone number, and in the case of partners conducting sole proprietorship - also the TIN number;
  10. Subscribers to our Newsletter
    1. we process: name and surname, e-mail address.
  11. Users:
    1. we process: name, surname, e-mail address, telephone number, health data, the collection and storage of which in the Application is necessary to fulfill the obligations arising from the contract for the provision of services by electronic means, analytical data about the source of download of the Doctor.One Patient Application.

How long do we keep personal data?

Below you will find out how long we store the collected personal data, depending on the subjects and categories of data processed:
  1. visitors and users of the Website:
    1. we store information about your IP address for as long as it is archived in the logs of the server on which our website is located;
    2. We store the information contained in cookies in accordance with the retention periods contained in the table, located in the section COOKIE FILES Politics.
  2. People who follow and interact with Doctor One on Facebook, Instagram, TikTok and LinkedIn:
    1. We store the data necessary to follow our social media profiles and respond to your inquiries through these media for as long as you remain a follower of our profiles or interact with them, and your interactions such as comments or likes will be visible even after you stop following our profiles, as long as you do not unfollow or delete them.
  3. persons who contact Doctor One and Doctor One Polska via e-mail, telephone, contact form on the Website or other available communication channels:
    1. we store the data necessary to respond to your inquiries for as long as it is necessary for the resolution of your case or for as long as the statutory limitation periods for claims require it;
    2. Additionally, we retain the personal data we need to defend or pursue claims for as long as the statutory limitation periods for claims require.
  4. Patients:
    1. we store personal data collected in your medical records, including your opinions on the services provided, in accordance with the rules defining the period of storage of medical records, which are indicated in the Act on the Rights of the Patient and the Ombudsman;
    2. personal data obtained in connection with payment for purchased services are processed for the period of storage of tax and accounting documentation specified in the provisions of Polish law.
  5. Candidates for Doctor One and Doctor One Polska employees:
    1. if you do not consent to the processing of your personal data contained in the recruitment documents for the purposes of future recruitment, we delete these data immediately after the end of the recruitment for the position you are applying for, but in no case later than within 6 months from the date you apply for a job at Doctor One or Doctor One Polska;
    2. if you consent to the processing of your personal data contained in the recruitment documents for the purposes of future recruitment, we will store this data until you withdraw your consent, but no longer than 2 years after the end of the recruitment.
  6. Specialists
    1. We process the information you enter into the Doctor.One Patient App until you delete your account.
  7. Specialists of Doctor One
    1. we process your personal data for the entire duration of the contract, and after its termination: (i) in relation to data related to the correct settlement and accounting of the Agreement — for the period of storage of tax and accounting documentation specified in the tax law and accounting regulations; (ii) in relation to the data necessary to fulfill legal obligations related to the conduct of medical activities — by the prescribed in the legal period of storage of medical records.
  8. Partner Specialists
    1. we process your personal data for the entire duration of the contract linking us with the Partner, and after its termination in the scope of information entered by you into the Application, we process it until you delete your account.
  9. our business partners (advisors or consultants, contractors and service providers for Doctor One and Doctor One Polska):
    1. we process your personal data for the entire period of performance of a contract concluded directly with you or with an entity that you represent or for which you are a contact person, and after its completion, additionally for the period of storage of tax and accounting documentation specified in tax law and accounting regulations.
  10. Subscribers to our Newsletter:
    1. We store the data necessary to subscribe to the Newsletter until you withdraw your consent to receive it.
  11. Users:
    1. We process the information you enter into the Doctor.One Patient App until you delete your account.

Who can we disclose your personal data to?

Below is a list of entities to whom we may disclose your personal data:
  1. visitors and users of the Website; Users of the Application:
    1. providers of IT services and systems, including services and analytical tools, which we use to run the Website or maintain the Application and analyse statistics of its use;
    2. legal advisors and consultants serving Doctor One and Doctor One Polska to the extent that the disclosure of data is necessary for the use of their services.
  2. People who follow and interact with Doctor One on Facebook, Instagram, TikTok and LinkedIn:
    1. operators of social networks;
    2. entities that we commission to maintain our profiles on social networks;
    3. providers of IT services and systems that we use to maintain profiles on social networks;
    4. legal advisors and consultants operating Doctor One to the extent that disclosure is necessary for the use of their services.
  3. persons who contact Doctor One or Doctor One Polska via e-mail, telephone, contact form on our Website or other available communication channels:
    1. in the case of data administered by Doctor One Polska - provider of services in the field of management of a medical entity, i.e. Doctor One sp. z o.o.;
    2. e-mail operators;
    3. postal operators and couriers;
    4. providers of IT services and systems that we use to use e-mail and the Website;
    5. legal advisors and consultants serving Doctor One or Doctor One Polska to the extent that the disclosure of data is necessary for the use of their services.
  4. Patients:
    1. provider of services in the field of management of a medical entity and provider of the Application and services related to its development and maintenance, i.e. Doctor One sp. z o.o.;
    2. entities that have the right of access to medical records under the provisions of the Act on Patients' Rights and the Patients' Rights Ombudsman;
    3. our subcontractors and other entities involved in the process of providing health services, including medical diagnostic service providers, hospitals or emergency medical teams;
    4. providers of IT services and systems, including services and analytical tools, which we use to run and maintain the Application and the Website and analyse statistics of their use;
    5. payment operators - in the field of information related to payment for services purchased from Doctor One;
    6. legal advisors and consultants operating Doctor One to the extent that disclosure is necessary for the use of their services.
  5. Candidates for Doctor One and Doctor One Polska employees:
    1. in the case of data administered by Doctor One Polska - providers of services in the field of management of the recruitment process and/or the medical entity, including Doctor One sp. z o.o.;
    2. providers of IT services and systems that we use to manage recruitment processes;
    3. legal advisors and consultants serving Doctor One or Doctor One Polska to the extent that the disclosure of data is necessary for the use of their services.
  6. Specialists:
    1. entities that provide Doctor One with business support services (e.g. IT services necessary for the development and maintenance of the Application);
    2. legal advisors and consultants operating Doctor One to the extent that disclosure is necessary for the use of their services.
  7. Specialists of Doctor One:
    1. provider of services in the field of management of a medical entity and provider of the Application and services related to its development and maintenance, i.e. Doctor One sp. z o.o.;
    2. Doctor One Polska staff members involved in the implementation of the contract;
    3. entities that provide Doctor One Polska with business support services (e.g. accounting, legal and advisory services, IT services).
  8. Partner Specialists:
    1. entities that provide Doctor One with business support services (e.g. IT services);
    2. legal advisors and consultants operating Doctor One to the extent that disclosure is necessary for the use of their services.
  9. our business partners (advisors or consultants, contractors and service providers for Doctor One and Doctor One Polska, doctors):
    1. entities providing accounting and accounting services to Doctor One Polska and Doctor One;
    2. entities providing business support services (including Doctor One in the case of data administered by Doctor One Polska);
    3. providers of IT services and systems that we use to manage within the Doctor One organizational structure;
    4. legal advisors and consultants operating Doctor One to the extent that disclosure is necessary for the use of their services.
  10. Subscribers to our Newsletter:
    1. providers of services and IT systems that we use to send the Newsletter.
  11. Users:
    1. entities that provide Doctor One with business support services (e.g. IT services necessary for the development and maintenance of the Application);
    2. legal advisors and consultants operating Doctor One to the extent that disclosure is necessary for the use of their services.

Transfer of personal data to third countries (outside the European Economic Area)

As we use the services of Google Operations Ireland Limited (Google Workspace) and Strikingly, your personal data may be transferred by these entities outside the European Economic Area on the basis of standard contractual clauses (Art. 46 (2) (c) GDPR). Any questions regarding data transfers outside the EEA should be addressed directly to these entities.
More information can be found here:

Your rights

In connection with the processing of your personal data by us, you have the right to:
  1. request access to and rectification of your personal data
You have the right to access information about you at any time and to correct it if it is incorrect.
  1. erasure of the personal data we hold about you and the right to restrict its processing
Upon your request, we will delete the data collected about you after fulfilling the purpose for which the data was collected. You have the right at any time to request that we delete data about you or restrict its processing.
However, remember that your personal data collected in connection with your use of medical services, processed as part of your medical records, we must keep for the period specified in the provisions of the Patient Rights Act and the Patient Ombudsman. During this period, we will not be able to process your request to delete your data.
  1. data portability
To the extent that personal data are processed in an automated manner for the performance of a contract (Art. 6 (1) lit. b GDPR) or on the basis of your consent (Art. 6 (1) lit. a GDPR, Art. 9 (2) lit. a GDPR), you have the right to receive from us personal data concerning you in a structured, commonly used machine-readable format, and you have the right to transmit this personal data to another controller without hindrance from our side.
  1. to object to the processing of data
To the extent that personal data are processed in order to pursue the legitimate interests of Doctor One Polska or Doctor One (Art. 6 para. 1 lit. f GDPR), you have the right to object to the processing of personal data.
  1. lodge a complaint with a supervisory authority
If you believe that our processing of your personal data violates the applicable provisions on the protection of personal data, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection in Warsaw.
  1. withdrawal of consent to the processing of personal data
If we process personal data on the basis of your consent, you have the right to withdraw your consent at any time, which does not affect the compatibility of the processing carried out on the basis of that consent before its withdrawal.
If you wish to exercise your rights, please contact us by e-mail, at the address of the Data Protection Officer: iod@doctor.one or in writing to our correspondence address respectively:
  1. Doctor One sp. z o. o., ul. Czackiego 19, loc. 1, 00-043 Warsaw,
  2. Doctor One Polska sp. z o.o., ul. Czackiego 19, loc. 1, 00-043 Warsaw,
with the note “GDPR”.

Automated decision making

We do not use any information you provide for automated decision-making purposes.

Analytical and marketing tools

We and our business partners use various solutions and tools used for analytical and marketing purposes. Below you will find basic information about these tools along with an indication of our platform (Service or Application) on which we use them. Detailed information in this regard can be found in the privacy policies of the respective partners.
Google Ads
We use Google Ads on the Website. It is a tool that allows you to measure the effectiveness of information and marketing campaigns carried out by Doctor One, allowing the analysis of data such as keywords or the number of unique users. The Google Ads platform also allows us to show our messages to people who have visited the Service in the past. For information on the processing of data by Google within the scope of the above service, you will find herein.
Google Analytics
We use Google Analytics on the Website and in the Application. Google Analytics cookies are files used by Google in order to analyze the use of the Website and the Application and to create statistics and reports on the functioning of the Website and the Application. Google does not use the collected data to identify you, nor does it combine this information for identification purposes. Detailed information on the scope and rules of data collection in connection with this service can be found herein.
hotjar
We use Hotjar on the Website. It is a tool that allows you to monitor the traffic of users on the website: create a map of clicks on this basis and analyze the path along which users move. Detailed information on the scope and rules of data collection in connection with this service can be found herein.

Social Media

We process personal data of users who follow and interact with Doctor One profiles on the social networks Facebook, Instagram, TikTok and LinkedIn. Detailed information on data processing (including data transfers outside the EEA by these entities) by the respective portals can be found at the following links:

Cookie files

On the Website we use cookies (“cookies”) and similar technologies (e.g. pixel tags).
Cookies are small packages of information stored on end devices, usually containing the address of the site, the date of placement, expiration date, unique number and additional information consistent with the purpose of the given file.
Cookies can be divided into 2 categories:
  1. necessary and functional files, the use of which is required for the proper functioning of our Service;
  2. statistical and analytical files that allow us to understand how users behave on the Website using aggregated and anonymous statistical information.
The table below describes in detail the cookies we use on the Website:
Type and purpose
name
Storage time
indispensable - These are cookies necessary for the proper functioning and ensuring the security of the Website.
_cfuvid
duration of the session in the browser
You can disable the saving of cookies directly on the device used to connect to our Website, in accordance with the instructions of the browser manufacturer:
Information on setting up and deleting cookies in other web browsers can be found on the websites of their manufacturers.

Changes to the privacy policy

The provisions of the Policy may consist of improvements and changes, and the latest versions will each time be published on our Website and will be marked with the date of the last update.
The policy as amended is effective January 1, 2026.
We use cookies to give you the best possible experience. You can change your cookie access settings in your browser. For more information, see Privacy Policy.