Privacy policy

Your privacy matters, especially in a psychotherapeutic context. This website works without tracking, analytics or advertising services. Apart from the technical data needed to deliver the site securely (section 3), personal data is only processed when you contact me.

1. Controller

Magdalena Kubalańca
Łódź, Poland
Email: magdalena@kubalanca.com

2. Contact form and email

When you use the contact form or write to me by email, I process the details you provide: your name, email address, your preferred format and language, and your message. I use this information only to answer your enquiry and, if you wish, to arrange a first session.

Messages from the form are sent to my mailbox by email. They are not stored in a database on the web server. To protect the form against automated misuse, the server keeps a pseudonymised (hashed) form of your IP address together with the time of sending for one hour; it is then deleted automatically.

Please only share what you feel comfortable sharing. If you voluntarily mention information about your health, I process it on the basis of your explicit consent, which you give by ticking the consent box in the form.

Legal basis: Art. 6(1)(b) GDPR (steps prior to a possible agreement at your request), Art. 6(1)(a) GDPR (consent) and, for health information you choose to share, Art. 9(2)(a) GDPR (explicit consent); for the protection of the form against misuse, Art. 6(1)(f) GDPR (legitimate interest).

Providing your data is voluntary, but without a way to reach you I cannot reply. No automated decision-making or profiling takes place.

3. Hosting and server logs

This website is hosted by Hostinger International Ltd. (Cyprus), which processes data on my behalf under a data processing agreement. When you visit the site, the server automatically records technical information such as your IP address, date and time, the page requested and your browser type. This is necessary to deliver the website securely and to detect misuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Log files are kept only for a limited period for security purposes.

4. Language settings, no tracking

This website is available in English and Polish. To show you the right language, the server reads the language setting that your browser sends with every request; it is used only for this purpose and not stored.

If you choose a language with the language switcher, a single functional cookie named lang (value “en” or “pl”) remembers your choice for up to one year. It contains no identifier and is not used for tracking. You can delete it at any time in your browser settings. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in showing the website in the language you chose); storing the cookie is strictly necessary for this function you requested. Under Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej), such a strictly necessary cookie does not require consent; this section provides the required information.

This website does not use analytics, advertising tools or social media plugins. Fonts and images are served from this website itself, so no data is passed to font or image services. External links (for example to a map service) are only followed if you click them; the privacy policy of that service then applies.

5. How long data is kept

Enquiries that do not lead to working together are deleted once they have been answered and are no longer needed, at the latest after six months. If we begin working together, you will receive separate information about how client data is handled.

6. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability and to object to processing. You can withdraw your consent at any time with effect for the future. Simply write to me.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

7. Security

This website is served exclusively over an encrypted connection (HTTPS). Please consider that regular email is not end-to-end encrypted; if you prefer, you can keep your first message short and share details in person.