In force from 26.10.2026.
Courtesy translation — the Polish version is binding.
The controller of your data is Specjalistyczna Praktyka Lekarska Piotr Niedziałkowski („Centrum Oceny Zdrowia”), NIP 5781585942, Ul. Łucka 20/1202, 00-845 Warszawa. Contact on data matters: e-mail kontakt@ocenazdrowia.pl, phone +48 690 584 584.
First name, surname, PESEL, phone number, e-mail address, and the test results and reports you upload or type in.
For signing in only: when signing in from the home page you give your phone number and PESEL, and only then receive a code by text message. This way no one who knows only your phone number can get to your results. We do not share your PESEL with anyone and do not link it to a clinic patient record.
Running the account — the contract, i.e. the program terms (Art. 6(1)(b) GDPR). Test results are health data — we process them on the basis of your explicit consent (Art. 9(2)(a) GDPR), given when creating the account. You can withdraw consent by deleting the account. For a clinic patient, results are part of the medical records (Art. 9(2)(h) GDPR).
You, after entering the code from the text message. A doctor — only at a consultation, if you book one; if you are a clinic patient, your doctor as part of your care. The person who technically maintains the server has access to it only to keep the program working and secure.
The company whose server runs the program (cyber_Folks S.A., server in Poland). The e-mail provider (LH.pl) — to send the e-mail with the link. The payment operator (PayU S.A.) — only when you pay: name, surname, e-mail, phone and amount, without any test results. The text-message gateway (SMSAPI) — to send the code; it receives only the phone number and the code. No one else. We do not sell data or use it for advertising.
Results are read from files by the program on our server. We do not send them to external artificial intelligence or text recognition services.
Uploaded files are encrypted. You sign in only with a one-time code from a text message. Uploaded files are checked and opened in a closed “cage”, so that a file disguised as a result cannot harm the program.
As long as you have an account. After deletion, data disappears from the program immediately, and from backups within 30 days. An account created but not confirmed with the text-message code disappears by itself after a day.
When someone creates an account through your referral, we only record that the account came from your link — without a name and without results. The referrer does not see the data or results of the referred person. So that one person cannot be referred twice, an encrypted digest of their phone number and PESEL is kept — neither the number nor the PESEL can be read from it. The digest remains even after the account is deleted. Legal basis: our legitimate interest, i.e. protection against referral abuse (Art. 6(1)(f) GDPR).
You have the right to access, correct, delete, restrict processing of and port your data (you can print your results at any time), as well as the right to withdraw consent. You can lodge a complaint with the President of the Personal Data Protection Office (UODO). On data matters, write to kontakt@ocenazdrowia.pl.