- The use of the cQtherapy.me website, in particular the sending of an enquiry via the contact form, the completion of the order form and/or questionnaire, may require the submission of data such as: name, e-mail address and, in the case of ordering a consultation, also: information about health, leisure and physical activities, information about the type of work and information about private life that may have an impact on the implementation of cQtherapy (e.g. number of births, children), physical parameters such as height and weight.
- In the course of cQtherapy, the patient may also be asked to provide sensitive data in the form of information about his or her gender and state of health. Sensitive data will only be collected and processed for appropriate, recommended for the body's state of health, preparation and implementation of cQtherapy, per Article 9, paragraph 2 of the DPA.
- The controller of the personal data is AP cQ Ltd. based in Hong Kong, contact: info@cqtherapy.me
- Failure to provide the required data when filling in the contact form, survey/order will prevent cQtherapy.me from contacting you and ordering a consultation.
- The data provided to us will only be used for the purpose for which it was provided, i.e. to respond to the request sent and to fulfill the order, i.e. to prepare cQtherapy.
- The Data Controller shall collect the data with due diligence for the duration of the performance of the activities referred to in point 4 and the provision of the services resulting therefrom.
- Concerning the security of the personal data entrusted to it, internal procedures have been implemented by the provisions of Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 and the Personal Data Protection Act of 10 May 2018, the purpose of which is to prevent such data from being made available to unauthorized persons.
- The data controller will not transfer personal data to third countries or international organizations.
- The collected personal data may be made available to legally authorized institutions that are entitled to receive it under the applicable legislation (e.g. law enforcement authorities).
- The collected personal data, with the exception of sensitive data, may, in connection with the performance of the activities listed in paragraph 4, be entrusted by the Controller to third parties who are processors of such personal data only if the Controller has entered into personal data entrustment agreements with such entities.
- Each Processor shall have the right to process the entrusted personal data only on behalf of the Controller and for the purpose expressly stated in the above-mentioned entrustment agreements. Processors of personal data are accounting companies, hosting companies cooperating with the Administrator and operators of other services necessary for the performance of the activities mentioned in paragraph 4.
- Any natural person who has provided data through the cQtherapy.me website has the right to access this data at any time, as well as to modify, delete and request the cessation of processing his or her data. Any person who has provided their data has the right to lodge a complaint with the supervisory authority of the President of the Office for the Protection of Personal Data.
- The data of users of the cQtherapy.me website may be subject to profiling for marketing purposes, including the display of content best suited to the user's expectations, using external analysis mechanisms based on the cookies collected, such as Google Analytics, Google Adwords, the Facebook Pixel mechanism and others. The cQtherapy.me website only uses those mechanisms whose owners have certificates, procedures or other forms of confirmation of data processing in accordance with current EU data protection legislation.
- If the user does not agree to the profiling, he/she should leave the cQtherapy.me website and delete the cookies from his/her browser. The user can delete Google's cookies in their account under ad settings: https://myaccount.google.com/privacy#ads and limit ad impressions, as well as delete their data from the Analytics database using the plugin: https://tools.google.com/dlpage/gaoptout.
- Personal data will be collected and stored with due care.
- Data in electronic form will be stored on password-protected devices, carriers and IT systems leased by the Administrator from personal data processors - hosting companies on the basis of separate agreements.
- Data in paper form shall be stored in locked cabinets in premises to which only persons authorised to process personal data have access.
- The data will be stored from the moment of their transfer and consent to the processing of personal data until the completion of the activities referred to in point 2, at the most until the end of the Administrator's business activity, or longer if required by separate regulations, in particular: accounting data - up to 5 years from the date of issuing the documents.
