Privacy Policy

§1 Data Controller

The controller of your personal data is Sandra Laskowska, conducting business under the name Psyche Sandra Laskowska. Registered address: Zygmunta Hübnera 1/155, 01-756 Warsaw. Clinic address: ul. Szpitalna 5a/16, 00-031 Warsaw. NIP: 5272772340, REGON: 364678898.

§2 What data we process

• Contact details: phone number, email address, and if you provide them, your first and last name.
• Booking, payment and invoicing data.
• Information about your health and situation that you share with us yourself in a form, phone call, initial conversation, email or during therapy.
• Recordings and transcripts of conversations, on the terms described in §8.
• Data from cookies, on the terms described in §11.

§3 Purposes and legal bases

• Arranging and conducting a free initial conversation and contacting you about appointment dates: Article 6(1)(b) GDPR (steps taken prior to concluding a contract at your request); for the information that you are booking a conversation about psychotherapy, your explicit consent: Article 9(2)(a) GDPR.
• Health information provided before starting therapy, and recording and transcription of conversations: Your consent, Article 6(1)(a) and Article 9(2)(a) GDPR (details in §8).
• Providing psychological and psychotherapeutic services: Article 6(1)(b) GDPR (contract) and Article 9(2)(h) GDPR; health data is processed by persons bound by professional secrecy.
• Invoices and settlements: Article 6(1)(c) GDPR (legal obligation).
• Establishing, pursuing and defending claims: Article 6(1)(f) GDPR (our legitimate interest).
• Information about our offer, if you agree to receive it: Article 6(1)(a) GDPR.
• Online analytics and advertising: Your consent expressed in the cookie settings (§11).
• Anonymous statistics (e.g. number of inquiries from a given source): once anonymized, this is no longer personal data.

§4 Who we entrust your data to

Your data is processed on our behalf and solely on our instructions by the service providers we use:

• website and internal system hosting, databases (Lovable, Supabase, Cloudflare, Amazon Web Services),
• email, calendar and online meetings (Google Workspace, Google Meet),
• telephony and SMS (including CloudTalk, serwersms.pl),
• booking system (Bookero) and payment operator (PayU),
• artificial intelligence tools for transcribing and organizing conversations (OpenAI, Anthropic, Google),
• accounting services and invoicing.

If you consent to marketing cookies, data on your use of the website is also received by Meta (Facebook, Instagram) and Google (Google Ads). We do not sell your data.

§5 Transfer of data outside the European Economic Area

Some providers (including OpenAI, Anthropic, Google, Meta, Amazon Web Services, Cloudflare and Supabase) may process data outside the European Economic Area, mainly in the United States. This takes place on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the Commission. You can obtain a copy of the safeguards by writing to the address given in §12.

§6 How long we keep your data

Recordings of phone calls and online meetings:

7 days from the recording, longer only if the conversation has not yet been processed correctly.

Transcripts of conversations:

90 days, longer only if the conversation has not yet been processed correctly.

Form data and notes from a conversation, if you do not start therapy:

12 months from the last contact.

Patient data and notes from the course of cooperation:

for the duration of cooperation and 6 years from the last session (limitation period for claims).

Accounting documents:

5 years from the end of the year in which the tax obligation arose.

Data for offer information:

until consent is withdrawn.

Cookie data:

in accordance with the cookie settings, until consent is withdrawn.

After these periods expire, we delete or anonymize the data. Only anonymous statistics remain, from which it is not possible to determine who you are.

§7 Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, transfer it, and object to processing based on our legitimate interest. You can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.

§8 Recordings and transcripts of conversations

• Phone calls with reception and free initial conversations online (Google Meet) may be recorded. We inform you about this at the start of the phone call and before the start of the online meeting. If you do not agree to the phone call being recorded, you can hang up and write to us through the website form or by email.
• When booking a free initial conversation, you may give one voluntary consent. It covers the recording and transcription of the conversation and the use of its content to prepare a therapist recommendation, as well as internally, to improve the quality of our service. Refusal does not affect your ability to have the conversation.
• Recordings are automatically transcribed and organized using artificial intelligence tools (OpenAI, Anthropic, Google), also so that we can quickly notice situations requiring an urgent response.
• Access to recordings and transcripts is limited to authorized members of the LAS team. We do not use them for marketing purposes.
• We delete the recording once the conversation has been processed, usually after 7 days, and the transcript after 90 days. Before deleting, we check that the conversation has been processed correctly. We keep the note from the conversation in accordance with §6.

§9 Do you have to provide your data

Providing your data is voluntary. However, without your first and last name, phone number, email address and consent to processing the information about the booked conversation, we cannot arrange the conversation or send you a link to the meeting.

§10 Automated processing

Artificial intelligence tools help us transcribe and organize conversations. Decisions about the therapist recommendation and further contact are made by people on our team. We do not make decisions about you that produce legal effects based solely on automated processing.

§11 Cookies and analytics tools

Our website uses cookies and similar technologies. We divide them into three categories:

• Necessary: necessary for the website to function (handling forms, sessions, security). They do not require consent.
• Analytics: Google Analytics 4, Microsoft Clarity and our internal event counter. They help us understand how you use the website, in aggregated and pseudonymized form.
• Marketing: Meta Pixel (Facebook, Instagram) and Google Ads. They allow us to measure the effectiveness of advertising campaigns and display tailored content. We use Google Consent Mode v2.

We collect consent for analytics and marketing cookies through a banner shown on your first visit. You can change or withdraw it at any time by clicking Cookie settings (the link is also available in the footer). Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

§12 Security and contact

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or destruction.

For data protection matters, write to us: kontakt@laspsychoterapia.pl, call: +48 732 106 897, or visit: ul. Szpitalna 5a/16, 00-031 Warsaw.