Privacy policy

This is an English version of the Privacy Policy of the Bianco Dental Clinic website, provided for convenience. In case of any discrepancy, the Polish version prevails.

This policy explains what personal data we collect when you use www.bianco.eu.com and contact the clinic, why we collect it, how long we keep it and what rights you have. We aim to collect only the data we genuinely need.

Effective from 13 October 2026.

1. Controller

The controller of your personal data is BIANCO DENTAL CLINIC spółka z ograniczoną odpowiedzialnością, ul. Adama Branickiego 18, 02-972 Warsaw, Poland, NIP (tax ID) 9512531745, KRS 0000940786.

For any matters concerning personal data, please contact us by e-mail at bianco@bianco.eu.com, by phone on +48 735 967 875 or by post at the clinic’s address.

The controller has not appointed a Data Protection Officer (Art. 37 GDPR). You can contact the controller directly about any data-related matter.

2. Scope of this policy

This policy covers data processed in connection with the use of the website and contacting the clinic via the contact form, e-mail, phone and WhatsApp. Patient data processed in connection with the provision of healthcare, including medical records, are governed by separate rules, in particular the Polish Act of 6 November 2008 on Patient Rights and the Patient Ombudsman. We are happy to answer any questions about this at reception or by e-mail.

3. What data we process and why

Contact form and e-mail

If you send us a message via the form or by e-mail, we process your name, e-mail address, phone number and the content of your message in order to reply and, if you wish, to arrange an appointment.

Legal basis: the consent you give in the form (Art. 6(1)(a) GDPR) and taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

Please do not describe your health in detail in the form – we will gather everything we need during your visit. If you do share health information with us, we will use it solely to reply and prepare your visit, on the basis of your explicit consent (Art. 9(2)(a) GDPR).

Phone and WhatsApp

When you contact us by phone or WhatsApp, we process your phone number, name and the information needed to arrange an appointment (Art. 6(1)(b) GDPR). WhatsApp is a service of WhatsApp Ireland Limited (Meta group); by using it you accept that provider’s terms and privacy policy.

Visit statistics (Google Analytics)

With the consent you give in the cookie banner, we use Google Analytics 4 to understand which pages are read, on which devices and where visitors come from (Art. 6(1)(a) GDPR). We do not combine this data with data from the contact form and we do not use Google Analytics advertising features.

We use Google Consent Mode. Until you give consent, Google Analytics does not store cookies, and Google may receive only limited signals about page views that contain no identifiers.

Website security and operation

The server automatically logs basic technical information about each connection (including IP address, date and time, browser type and the page visited). We use it to keep the website secure and working properly, which is our legitimate interest (Art. 6(1)(f) GDPR).

Legal claims

Where necessary, we may process data to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR).

4. Cookies

Cookies are small files stored in your browser. The website uses the following cookies:

• cookie_notice_accepted – remembers your choice in the cookie banner; essential; kept for 1 month.
• pll_language – may be set to remember the language version you chose (Polish or English); essential; up to 1 year.
• _ga, _ga_YXWY4N0SKS – Google Analytics visit statistics; set only after you give consent; up to 2 years.

A Google Maps map is embedded on the contact page, and the website’s fonts may be loaded from Google Fonts servers. In that case your browser connects to Google servers, which receive your IP address and may set their own cookies – in accordance with the Google Privacy Policy.

You can change your choice or withdraw consent at any time by clicking the “Cookie settings” button at the bottom of the page or by deleting cookies in your browser settings. You can also block cookies entirely in your browser, although some features of the website may then not work properly.

The website contains links to our Facebook page. A link on its own does not send any data to Meta – this only happens once you go to Facebook, where the privacy policy of Meta Platforms Ireland Limited applies.

5. Who receives your data

We do not sell personal data. Access to it may be held only by entities that help us run the website and handle correspondence, on the basis of data processing agreements or their own terms:

• cyber_Folks S.A. – website and server hosting (infrastructure in Poland),
• our e-mail service provider,
• Google Ireland Limited – Google Analytics, Google Maps, Google Fonts,
• WhatsApp Ireland Limited – if you contact us via WhatsApp.

Data may also be disclosed to public authorities where required by law.

6. Transfers outside the European Economic Area

Data from the contact form are stored in Poland. Google and Meta may also process data, including IP addresses, in the United States. Such transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the Commission.

7. How long we keep data

• Correspondence and enquiries – for as long as needed to handle them, and then for no longer than 3 years in case legal claims need to be established, exercised or defended. Data processed on the basis of consent are deleted earlier if consent is withdrawn, unless there is another legal basis for keeping them.
• Patient data – if you become our patient, the data needed for treatment become part of your medical records, which we keep for the period required by law (as a rule, 20 years from the last entry).
• Google Analytics – according to the data retention setting in Google Analytics, no longer than 14 months.
• Server logs – for the period set by the hosting provider as needed for security.

8. Your rights

You have the right to:

• access your data and receive a copy,
• rectification,
• erasure (“right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, simply e-mail bianco@bianco.eu.com or call us. We will respond without undue delay and in any event within one month.

You also have the right to lodge a complaint with the supervisory authority – in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.

9. Voluntary provision of data and no profiling

Providing data is voluntary, but without contact details we cannot reply to your enquiry or arrange a visit. We do not make automated decisions and do not profile website visitors.

10. Changes

We may update this policy, for example when the tools used on the website or the law change. The current version is always available on this page, together with the date from which it applies.