Privacy and cookie policy

1. Data controller

The controller of your personal data is FIXMED CLINIC spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Bydgoszcz, ul. Karpacka 31A/11A, 85-114 Bydgoszcz, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number KRS 0001150583, NIP (tax ID) 9532808931, REGON 540735485.

For matters concerning personal data you can contact us by email: [email protected], by phone: 739 149 690 or in writing at our registered office address.

2. What this policy covers

This policy describes how data is processed in connection with the use of the fixmed.pl website. Information on data processing in the course of providing healthcare services, including keeping medical records, is provided at the clinic.

3. Visits to the website

We keep no visit logs of our own and use no analytics or advertising tools. Fonts and images are loaded from our own servers. The website sets only one cookie of its own, fixmed_locale, and only when you choose the website language yourself. The cookie remembers that choice and is not used for tracking.

The website runs on DigitalOcean infrastructure and traffic passes through the Cloudflare network. These providers process your IP address and technical data (e.g. browser type, time of the request) to the extent necessary to deliver the website and protect it against attacks. The legal basis is our legitimate interest in ensuring the operation and security of the website (Article 6(1)(f) GDPR).

4. Contact by phone and email

When you call or write to us, we process the data you give us: your name, phone number, email address and the content of your message, as well as health information if you provide it. We do this to reply and to arrange a visit (Article 6(1)(b) and (f) GDPR; health data: Article 9(2)(h) GDPR).

We keep correspondence for as long as needed to handle the matter, and then until related claims become time-barred. Correspondence that becomes part of medical records is kept for the period required by Polish law on patients' rights. Email is handled by LH.pl sp. z o.o.

5. Booking visits through ZnanyLekarz

The booking calendar is provided by ZnanyLekarz sp. z o.o., ul. Kolejowa 5/7, 01-217 Warszawa, KRS 0000347997. The calendar loads only after you click "Book a visit". From that moment ZnanyLekarz receives your IP address and device data and may store cookies on your device, including analytics cookies (Google Tag Manager). They are listed in section 7.

ZnanyLekarz processes the data you give when booking as an independent controller for your account on its service, and as a processor acting on our behalf for booking visits at FIXMED. Details: ZnanyLekarz privacy policy and ZnanyLekarz cookie policy (in Polish).

If you do not want to use the calendar, book your visit by phone: 739 149 690.

6. Social media

The Facebook and Instagram icons are plain links. These services receive no data until you click them. Once you follow a link, their own privacy rules apply.

7. Cookies

The FIXMED website stores only one cookie of its own on your device: fixmed_locale. It is created only when you choose the website language yourself, and it stores nothing but that choice (pl, en or uk) for one year. It is not used for tracking or analytics. If you block it, switching the language still works, but the website will not remember your choice. We store no other cookies of our own and no data in browser storage.

The table lists our cookie and the cookies that ZnanyLekarz and the tools it uses may store after you open the booking calendar (as of 29.09.2026):

You can block and delete cookies in your browser settings. Blocking them may stop the calendar from working; in that case you can book your visit by phone.

8. Recipients of data

• DigitalOcean, LLC: website hosting, database and file storage (Frankfurt region, Germany).
• Cloudflare, Inc.: content delivery and protection of the hosting infrastructure.
• LH.pl sp. z o.o.: email and domain services.
• ZnanyLekarz sp. z o.o.: booking visits (section 5).
• Google: through the analytics tool embedded in the ZnanyLekarz calendar.

9. Transfers of data outside the EEA

DigitalOcean and Cloudflare are companies based in the USA. We store the website's data in the EU region (Frankfurt), but the providers may also process it in the USA. Both providers declare participation in the EU-U.S. Data Privacy Framework, which is the basis for the transfer (European Commission decision of 10 July 2023).

10. Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing and to data portability, and the right to object to processing based on Article 6(1)(f) GDPR. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

11. Voluntary provision of data and profiling

Providing data is voluntary, but without it we cannot reply to your message or arrange a visit. We do not make automated decisions and do not carry out profiling.

12. Changes to this policy

We update this policy when the way we process data changes.

Last updated: 29.09.2026.