1.This Policy defines the principles of processing personal data of Clients or their guardians (in the case of minor Clients) by HKF – CHILD DEVELOPMENT SUPPORT CENTER located at Wyścigowa 58, Wrocław (hereinafter referred to as “HKF Centrum”).
2. The conditions and rules for using HKF Centrum services are specified in the General Terms and Conditions and the regulations for individual services, which are separate documents that each Client should review and accept before starting to use HKF Centrum services. In the case of minor Clients, this obligation also rests with their legal representatives (guardians).
3. This Policy and the General Terms and Conditions are made available during online registration for a meeting (classes, consultations) at HKF Centrum or registration for training or webinars organized by the Centrum. If registration for a meeting is done in another way (if available for a given service), it will be provided before using the services at HKF Centrum.
II. General Principles
1.The administrator of personal data collected and processed for the purpose of using HKF Centrum services is HFK – CHILD DEVELOPMENT SUPPORT CENTER Ltd. based in Wrocław, registered in the business register of the National Court Register by the District Court for Wrocław-Fabryczna in Wrocław, VI Economic Division KRS under number: 0000996408, NIP: 8992939781 (hereinafter referred to as the “Administrator” or “Service Provider”).
2. To ensure the proper provision of services by HKF Centrum, including scheduling appointments for selected services, preparing and gathering an interview for the meeting, the Service Provider requires Clients or their guardians (in the case of minor Clients) to provide the Administrator with personal data to the extent necessary, specified in detail in section IV of this Policy.
3. The personal data of Clients or their legal guardians will be processed by the Organizer for the purposes and in accordance with the aim for which these data are collected, such that:
When registering for a meeting at HKF Centrum(classes, consultations) – the Client or their guardian receives separate information about the processing of personal data for the purpose of registering for a meeting at HKF Centrum, as well as receiving a newsletter if they provide separate consent in this regard.
When registering for a meeting at HKF Centrum(classes, consultations) by accepting the General Terms and Conditions – the Client or their guardian receives information about the processing of personal data for the purpose of conducting video surveillance.
When filling out the Client card – the Client or their guardian receives information about the processing of data for the purpose of providing specific services selected by the Client at HKF Centrum, which may relate to information about the Client’s health status (depending on whether this information is necessary for providing a given type of service at HKF Centrum).
When registering for training or webinars organized by HKF Centrum– the Client receives separate information about the processing of personal data for the purpose of registering for training or webinars, as well as receiving a newsletter if they provide separate consent in this regard.
Prior to participation in group events (e.g., group classes, open days) – the Client or their guardian receives separate information about the processing of personal data related to capturing images during the event and publishing such captured images, if they provide separate consent in this regard.
When giving consent to record a diagnostic session – the Client or their guardian receives separate information about the processing of personal data related to capturing images and/or voices during the diagnostic session if they provide separate consent for recording the diagnostic session.
4. The principles and conditions for processing the personal data of Clients or their guardians for the purpose of making online payments for services at HKF Centrum are specified in the documents made available each time before payment is made by online payment system operators, who are the administrators of these data.
III. Security of Personal Data
1.All employees and collaborators of the Administrator have committed to maintaining the confidentiality of personal data collected and processed at HKF Centrum.
2. Shared personal data, including health information, are protected by professional secrecy, which cannot be limited in time, and exemption from professional secrecy may occur only in cases specified by law.
3. The servers on which HKF Centrum’s IT systems operate are located within the European Union.
4. The Administrator applies technical and cryptographic safeguards to protect processed data against unauthorized access, alteration, or deletion.
5. Physical and digital access to the servers on which HKF Centrum operates is continuously monitored.
IV. Special Principles for Processing Personal Data at HKF Centrum
1.What personal data will be needed and for what purpose? (Purpose of processing the personal data of Users)
Name, surname, phone number, and email address, as well as the name and surname of the person for whom the service will be provided, and their date of birth – for the purpose of registering for a meeting (classes or consultations) at HKF Centrum and for preparing the appropriate interview based on the age of the person for whom services are to be provided at HKF Centrum, contacting the Client or their guardian to schedule, reschedule, or cancel meetings, and maintaining and storing accounting and financial documentation.
Name, surname, phone number, and email address – for the purpose of registering for training or webinars organized by HKF Centrum, contacting the Client to schedule, reschedule, or cancel training or webinar dates, and maintaining and storing accounting and financial documentation.
Health-related information – to gather an interview regarding the Client’s health status, determine the absence of contraindications to providing services within therapy, where gathering and evaluating this type of data is necessary for the safe and proper provision of services at HKF Centrum.
Data indicated in the above points – for archival (evidential) purposes in case of a legal need to demonstrate facts or specific circumstances or to establish, pursue, or defend against claims.
Facial image – for the purpose of conducting video surveillance (without audio recording) in rooms at HKF Centrum specified in detail in the General Terms and Conditions, to ensure the safety of Clients or their guardians and the employees and collaborators of the Service Provider, as well as to protect the property of HKF Centrum, i.e., for the protection of legally justified interests realized by the Service Provider, and in the case of separate and clear consent given by the Client or their guardian in connection with participation in group events for use (distribution) in promotional materials related to HKF Centrum in the media, including on websites and social media platforms.
Facial image and/or voice (depending on the scope of consent given for recording) – for the purpose of supplementing the diagnostic process (as auxiliary materials).
Email address – only if separate consent is given for receiving the newsletter – for sending newsletters regarding the activities of the Centrum, e.g., new services offered at the Centrum, information about events and activities organized at the Centrum.
2. Who or what allows for obtaining and processing data? (Legal basis for processing)
Registration for meetings (classes, consultations) at HKF Centrum, preparing interviews, contacting to schedule, reschedule, or cancel meetings – processing is necessary for the performance of a contract to which the Client and their legal guardian are parties.
Maintaining and storing accounting and financial documentation – processing is necessary for fulfilling a legal obligation imposed on the administrator.
Pursuing payment for meetings canceled less than 24 hours before the scheduled meeting – processing is necessary for the purposes arising from the legally justified interests realized by the administrator, namely, pursuing claims of the administrator.
Gathering and evaluating health information – the legal basis for processing this data is the consent of the Client or their guardian.
Archiving (evidential) purposes – processing is necessary for the purposes arising from the legally justified interests realized by the administrator, namely, for the needs of establishing, pursuing, or defending the Service Provider against possible legal claims.
Conducting video surveillance (without audio recording) – processing is necessary for the purposes arising from the legally justified interests realized by the administrator, namely, ensuring the safety of persons and property at HKF Centrum.
Capturing images during group events (group classes, open days) and distributing such captured images in promotional materials related to HKF Centrum in the media – the legal basis for processing the data is the separate consent of the Client or their guardian.
Capturing images and/or voices in recordings of diagnostic sessions – the legal basis for processing the data is the separate consent of the Client or their guardian.
Sending newsletters – the legal basis for processing the data is the separate consent of the Client or their guardian.
3. Who else – besides the Administrator – will have access to my data? (Categories of data recipients)
Specialists at HKF Centrum.
Providers of IT systems and services, including the operator of the BOOKERO system used for registering for meetings at HKF Centrum.
Consulting and advisory firms (e.g., providing accounting or property protection services).
4. Will the data be transferred outside of Europe? (Transfer of data outside the EEA/EU)
Based on personal data, decisions will not be made automatically, nor will they be transferred outside the European Economic Area or to an international organization.
5. What are my rights regarding the transfer of my personal data? (User rights/legal guardian of a minor User)
The right to access processed data, to rectify (if possible) or change it, to request deletion (if legally permissible), to restrict processing (if possible) or to transfer data, to withdraw consent for processing (if consent was the basis for processing), or to lodge a complaint with a supervisory authority, but this does not affect the legality of the processing carried out before the withdrawal of consent.
V. Final Provisions
1.This Privacy Policy comes into effect on 25 September 2023.
2. The Administrator reserves the right to modify the Privacy Policy. Changes will be communicated to Clients by email or in a manner appropriate for the method of registration for services at HKF Centrum.
3. Questions regarding the Privacy Policy can be directed to the Administrator by email or by contacting the HKF Centrum.