Privacy Policy

Last updated: March 2026

Dinosaurs in Space Therapeutic Practice protects the personal data of its clients in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 (GDPR). This privacy policy describes how we collect, use and protect personal data.

1. Data Controller

The data controller is Dinosaurs in Space Therapeutic Practice, ul. Augusta Cieszkowskiego 1/3, 01-636 Warsaw, Poland. Email: [email protected], Phone: +48 530 518 007.

2. Purpose of Data Processing

Personal data is processed for the following purposes: (a) provision of therapeutic and educational services; (b) responding to customer inquiries; (c) correspondence; (d) invoicing and billing; (e) sending information about new programmes (with consent); (f) analytics and service improvement; (g) compliance with legal obligations.

3. Data Categories

We collect the following data categories: identification data (name, age), contact data (email, phone, address), health data (for therapeutic service delivery), education data and progress information, service preference information.

4. Legal Basis

Data processing is based on: (a) therapeutic service contract; (b) user consent; (c) legal obligation compliance; (d) legitimate interests.

5. Cookies and Google Consent Mode

The website uses cookies and Google Consent Mode technology to manage consent for data processing for analytics and marketing purposes. Cookies are categorized as follows: - Essential (Technical) Cookies: Required for website functionality, do not require consent - Analytical Cookies (analytics_storage): Used in Google Analytics to analyze website traffic, require consent - Marketing Cookies (ad_storage): Used in Google Ads for conversion tracking and ad display, require consent - Personalization Cookies (ad_personalization): Enable ad personalization, require consent Before loading Google Analytics and Google Ads scripts, the website sets default Consent Mode with all categories in 'denied' state. Upon granting consent via our banner, we update this information in the dataLayer, allowing Google to update data processing. You can manage cookie settings at any time using the cookie consent banner available on every page.

6. Data Recipients

Data may be shared with: (a) our team members and partners (only for service delivery); (b) IT and hosting service providers; (c) Google services (Analytics, Ads) – according to your cookie settings; (d) public authorities if required by law.

7. Data Retention Period

Data is retained for the period necessary to achieve the purpose for which it was collected, in accordance with applicable law. Patient data is retained as required by healthcare regulations. Google Analytics data is retained by default for 14 months.

8. User Rights

You have the following rights: (a) right to access your data; (b) right to rectification of data; (c) right to erasure ('right to be forgotten'); (d) right to restrict processing; (e) right to data portability; (f) right to object to processing; (g) right to withdraw consent at any time. To exercise these rights, contact us at [email protected].

9. Complaint to Supervisory Authority

If you believe that processing of your data violates GDPR, you have the right to lodge a complaint with the Office for Personal Data Protection (UODO) in Warsaw, ul. Krucza 36, 00-522 Warsaw, or via www.uodo.gov.pl.

10. Data Security

We implement appropriate technical and organizational measures to protect data against unauthorized access, alteration, disclosure or destruction. Servers are located in secure, certified data centers.

11. Policy Changes

We may update this privacy policy at any time. Changes will be published on this page with the date of last update.

12. Contact

For questions regarding this privacy policy or data processing, please contact us: Dinosaurs in Space Therapeutic Practice, ul. Augusta Cieszkowskiego 1/3, 01-636 Warsaw, email: [email protected], phone: +48 530 518 007.