To make it easier for you to understand and navigate this document, below we have explained some of the terms we use most often:


‍

‍Application – Doctor.One Patient App and Doctor.One HCP App;

‍

‍Doctor.One Patient App – the mobile application “Doctor.One Patient”, available for download in the Google Play and Apple App Store;‍

‍

‍Doctor.One HCP App – the mobile application “Doctor.One HCP”, available for download in the Google Play and Apple App Store;

‍

‍GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;

‍

‍Partner – an entity (e.g. medical facility, company, institution) being a party to a separate agreement with Doctor One, under which it is entitled to: (i) make the Partner Application available to the Partner Users, (ii) provide services electronically within the Partner Application and is a party to the agreement for the provision of these services with the Partner App Users;

‍

‍Partner Application or Partner App – a white-label mobile application, based on technology belonging to Doctor One and produced by Doctor One, made available by the Partner for use by the Partner App Users, whereby the Partner acquires the rights to make the Partner Application available to the Partner App Users under a separate agreement concluded between the Partner and Doctor One or Doctor One Polska;

‍

‍Policy – the document you are currently reading, which is the Doctor One Application Privacy Policy;

‍

‍Specialist – a medical professional, including in particular a physician, pharmacist, physiotherapist, nurse, midwife, dietitian or psychologist, who is registered in the Application and communicates with Users using it. A Specialist may simultaneously be a Partner Specialist;

‍

‍Partner Specialist – a person performing a medical profession and employed by the Partner or remaining in a permanent contractual relationship with them, including in particular a physician, pharmacist, physiotherapist, nurse, midwife, dietitian or psychologist, who is registered in the Application and communicates with the Partner App Users via it;

‍

‍Partner Users – persons who use electronic services provided by Partner via Partner App;

‍

‍Users – persons who use electronic services provided by Doctor One via Doctor.One Patient App.

This Policy only covers such Users’ personal data that is necessary to process in order to provide the electronic services via Application (such as data associated with your User account). For this data, Doctor One is the data controller.

‍

This Policy does not apply to personal data exchanged between a Specialist and a User, particularly through the chat function in the Application. For this data, the data controller is a Specialist or Partner, and they bear separate responsibility for the purposes and means of processing carried out by them. In this context, Doctor One acts only as a processor of Users’ and Partner Users’ data, providing the technical tools to facilitate the exchange on behalf of the Specialist or Partner.

The data controller of:

• Specialists;
• Partner Specialists;
• Users

‍

is Doctor One sp. z o.o. with a registered office in Warsaw (00-043) at ul. Tadeusza Czackiego 19 lok. 1, entered into the register of entrepreneurs of the National Court Register (KRS) maintained by the District Court for the Capital City of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number: 0000899724, holding Tax Identification Number (NIP): 1182223969 and share capital 138 000 PLN (hereinafter referred to as “Doctor One”, “we”, “our”, “us”).

‍

Data Protection Officer

‍

We have appointed a Data Protection Officer for Doctor One. All inquiries, requests, and complaints regarding the processing of personal data by Doctor One should be directed to the Data Protection Officer via email at: iod@doctor.one or in writing to our respective correspondence addresses: Doctor One sp. z o. o., ul. Czackiego 19 lok. 1, 00-043 Warszawa, Poland, with the annotation “GDPR”.

Depending on the data subject and the specific processing activity, as outlined in “WHO WE ARE AND WHOSE PERSONAL DATA WE PROCESS?”, Doctor One obtains your personal data directly from you when:


‍

• as a Specialist, you register in the Doctor.One HCP App;
• as a User, you register in the Doctor.One Patient App.

‍


We obtain your personal data from third parties when:

‍

• we receive your data from your actual or legal guardian who registers you in the Doctor.One Patient App;
• we receive your data from our Partner, in connection with your use of the Partner Application made available by our Partner.

We process personal data for the following purposes:

‍

1. Specialists and Partner Specialists:
   
   
   • performance of the contract for the provision of electronic services, consisting in particular of enabling access to the Doctor.One HCP App (art. 6(1)(b) GDPR);
   • fulfillment of legal obligations incumbent on Doctor One in connection with the performance of the contract for the provision of electronic services (art. 6(1)(c) GDPR);
   • enabling us to defend against possible claims or pursue possible claims (art. 6(1)(f) GDPR);
     ‍
2. Partner Specialists:
   
   
   • performance of the contract for the provision of electronic services, consisting in particular of enabling access to the Doctor.One HCP App (art. 6(1)(b) GDPR);
   • fulfillment of legal obligations incumbent on Doctor One in connection with the performance of the contract for the provision of electronic services (art. 6(1)(c) GDPR);
   • enabling us to defend against possible claims or pursue possible claims (art. 6(1)(f) GDPR);
     
     Providing your personal data is necessary for the conclusion and performance of the Agreement with Doctor One. Failure to provide this data will make it impossible for you to use the Application.
     ‍
3. Users:
   
   
   • performance of the agreement for the provision of electronic services, consisting in particular of enabling access to the Doctor.One Patient App (art. 6(1)(b) GDPR);
   • enabling us to defend against possible claims or pursue possible claims (art. 6(1)(f) GDPR);
   • continuous improvement of the Doctor.One Patient App (art. 6(1)(f) GDPR), whereby we do not use data concerning health for this purpose (art. 6(1)(f) GDPR).
     
     Providing your personal data is necessary to conclude an agreement with us for the provision of electronic services and to provide you with access to the Application. Failure to provide them will make it impossible for you to use the Application.
     ‍

In case of:

‍

1. Specialists
   
   
   • we process: first and last name, residential address, e-mail address, telephone number, tax identification number, photo, office address, information related to the business activity conducted (if applicable), information related to the practice conducted, such as, for example, the number of the license to practice the profession, information on specialization and academic titles held, as well as data necessary to make and settle payments for the purchased service; 
     ‍
2. Partner Specialists
   
   
   • we process: first and last name, residential address, e-mail address, telephone number, tax identification number, photo, office address, information related to the business activity conducted (if applicable), information related to the practice conducted, such as, for example, the number of the license to practice the profession, information on specialization and academic titles held, as well as your professional relationship with a Partner, including the fact that you are associated with or employed by them.
     ‍
3. Users:
   
   
   • we process: first and last name, e-mail address, telephone number, the collection and storage of which in the Application is necessary for the performance of obligations arising from the contract for the provision of electronic services, as well as analytical data on the source of downloading the Doctor.One Patient App.

Below you will find out how long we store the personal data we obtain, depending on the entities and categories of data processed:

‍

1. Specialists
   
   
   • we process your personal data for the entire duration of the contract, and after its termination: (i) in relation to data related to the proper settlement and accounting of the Contract – for the period specified in tax law provisions and accounting law provisions regarding the storage of tax and accounting documentation; (ii) in relation to data necessary to fulfill legal obligations related to conducting medical activities – for the period of storage of medical documentation specified in legal regulations; 
   • other information entered by you into the Application is processed until you delete your account;
     ‍
2. Partner Specialists
   
   
   • we process your personal data for the entire duration of the contract between us and the Partner, and after its termination, in terms of information entered by you into the Application, we process it until you delete your account;
     ‍
3. Users:
   
   
   • information entered by you into the Doctor.One Patient App is processed until you delete your account.

Below is a list of entities to whom we may share your personal data:


‍

1. Specialists:
   
   
   • payment operators - in the scope of information related to payment for services purchased from Doctor One;
   • entities that provide business support services to Doctor One (e.g. IT services necessary for the development and maintenance of the Application);
   • legal advisors and consultants serving Doctor One to the extent necessary for us to use their services;
     ‍
2. Partners Specialists:
   
   
   • entities that provide business support services to Doctor One (e.g. IT services);
   • legal advisors and consultants serving Doctor One to the extent necessary for us to use their services;
     ‍
3. Users:
   
   
   • entities that provide business support services to Doctor One (e.g., IT services necessary for the development and maintenance of the Application);
   • legal advisors and consultants serving Doctor One to the extent necessary for us to use their services;
   • providers of IT services and systems, including analytical services and tools that we use to run and maintain the Application and analyze its usage statistics;

Because we use the services of Google Operations Ireland Limited (Google Workspace) and Strikingly, your personal data may be transferred by these entities outside the European Economic Area based on standard contractual clauses (Art. 46(2)(c) of the GDPR). Any questions regarding the transfer of data outside the EEA should be directed to these entities.

More information can be found here:


‍

• Google legal frameworks for data transfers;
• Strikingly’s Privacy Policy.


In connection with our processing of your personal data, you have the right to:

‍

• request access to your personal data and their rectification

‍

You have the right to access and have your personal data rectified at any time if it is incorrect.

‍

• erasure of personal data we hold about you and the right to restrict their processing

‍

At your request, we will proceed with the erasure of the data collected about you after the purpose for which the data was collected has been fulfilled. You have the right at any time to request that we erase data about you or restrict its processing.

‍

• data portability

‍

To the extent that personal data is processed in an automated manner for the purpose of performing a contract (Art. 6(1)(b) GDPR) or based on your consent (Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR), you have the right to receive your personal data from us in a structured, commonly used machine-readable format, and you have the right to transmit this personal data to another controller without hindrance from us.

• object to data processing

‍

To the extent that personal data is processed for the purpose of realizing the legitimate interests of Doctor One (Art. 6(1)(f) GDPR), you have the right to object to the processing of personal data.

‍

• lodge a complaint with a supervisory authority

‍

If you believe that our processing of your personal data violates applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office in Warsaw.

‍

• withdraw consent for the processing of personal data

‍


If we process personal data based on your consent, you have the right to withdraw the granted consent at any time, which remains without impact on the lawfulness of the processing carried out based on this consent before its withdrawal.
If you wish to exercise your rights, please contact us via e-mail at the address of the Data Protection Officer: iod@doctor.one or in writing to our correspondence address: Doctor One sp. z o. o., ul. Czackiego 19 lok. 1, 00-043 Warszawa, Poland with the annotation “GDPR”.

We do not use any information provided by you for the purposes of automated decision-making.

We and our business partners use various solutions and tools used for analytical and marketing purposes. Below is basic information about these tools. Detailed information in this regard can be found in the privacy policies of individual partners.

‍

GOOGLE ANALYTICS

‍

In the Application, we use Google Analytics. Google Analytics cookies are files used by Google to analyze how the Services and Application are used and to create statistics and reports on the functioning of the Application. Google does not use the collected data to identify the user, nor does it combine this information to enable identification. Detailed information on the scope and principles of data collection in connection with this service can be found here.

The provisions of the Policy may be subject to improvements and changes, and its latest versions will be published on our Service each time and will be dated with the last update.The Policy in this wording is effective from may 2026.