PRIVACY POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA by BioSync Katarzyna Senye

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), we inform you that:

1. Data Controller

The controller of your personal data is BioSync Katarzyna Senye, located at Sarmacka 25/34, 02-972 Warsaw, Poland, NIP: 1230984816, REGON: 529187670, email: rodo@biosync.pl, phone number: +48 608616166

2. Contact for Data Protection Matters

In matters related to the protection of personal data, you can contact us via email at rodo@biosync.pl or by mailing the Administrator's registered address, with the note "Data Protection."

3. Purposes and Legal Basis for Data Processing

The Administrator processes your personal data for the following purposes:

  • Pursuant to Article 6(1)(a) of GDPR – for the purpose of conducting EEG Biofeedback, Neurofeedback, and VR therapy – until the completion of the service.

  • Pursuant to Article 6(1)(c) of GDPR – for the fulfillment of legal obligations, particularly related to tax and accounting regulations – until such obligations are fulfilled or expire.

  • Pursuant to Article 6(1)(f) of GDPR – for the purposes of legitimate interests pursued by the Administrator, such as the establishment, exercise, or defense of legal claims – until an objection is raised or until the expiration of the claim period.

  • Pursuant to Article 9(2)(a) of GDPR – for the purpose of conducting EEG Biofeedback therapy, which involves processing special categories of personal data (health data) – until the service is completed.

4. Recipients of Personal Data

Your personal data may be shared with entities cooperating with the Administrator in providing services, such as IT service providers, accounting firms, legal advisors, and public authorities, in accordance with applicable laws.
All data recipients are obliged to maintain confidentiality and implement appropriate technical and organizational measures to ensure the protection of personal data.

5. Your Rights Regarding Personal Data

You have the right to:

  1. Access your personal data and request a restriction on its processing, to the extent that such requests do not conflict with the professional secrecy obligations of the psychologist.

  2. Object to the processing of your data under Article 6(1)(f) of GDPR (legitimate interest of the Administrator), except in the case of data obtained during the provision of psychological services.

  3. Correct your data, request its deletion, and the right to data portability, as provided by GDPR.

6. Right to Lodge a Complaint

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).

7. Automated Decision-Making and Profiling

Your personal data will not be processed through automated decision-making processes, including profiling.

8. Transfer of Data Outside the EU

Your personal data will not be transferred outside the European Union or to any international organizations.

9. Voluntary Nature of Data Provision

Providing your personal data is voluntary but necessary for the services offered by the Administrator. Failure to provide the required data will prevent the provision of those services.

10. Privacy Statement for the Service Chatbase Chat

If the chat function of our website is activated, additional personal data will be processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about your inquiry or contactcontact information like Name and e-mail address. Purpose of processing: analysis of user behavior, Supporting website visitors with technical or content-related questions and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller CHATBASE.CO INC, 4700 Keele Street, 215 Bergeron Centre of Engineering Excellence, Toronto, ON, M3J 1P3, Canada (https://www.chatbase.co/). The legal basis for the data transfer to CHATBASE.CO INC is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted to Canada on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2001) 4539. The privacy policy of CHATBASE.CO INC: https://www.chatbase.co/privacy.