Policy on privacy and use of “cookies” files on the Website

General Information

We care about your privacy. We collect and process your data only when it is necessary for the proper provision of the services we offer.

In accordance with the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in connection with the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), commonly referred to as GDPR, we present below the data processing principles used by the Administrator.

Who is the Data Administrator?

The data administrator is:

Healing Institute Foundation registered with the District Court for the City of Warsaw in Warsaw, XIV Economic Division of the National Court Register, located at ul. Szamocka 10c / 50, Warsaw 01-748, VAT ID: 5253002902, KRS: 0001104388, REGON: 528621437.

We will process your Personal Data only to the necessary extent specified below. At the same time, we inform you that regardless of the above agreements, you can exercise your rights under the GDPR.
You can contact us at the email address: hello@healinginstitute.eu

Why do we collect your data? How long do we process it?

We may process your data for the following purposes:

  1. Communication with You, including responding to inquiries submitted through the contact form, email messages, etc.

Data will be processed based on our legitimate interest as the administrator in the form of communication with you (Article 6(1)(f) of the GDPR). Your personal data will be processed no longer than until you raise an objection or the business purpose for which it was processed ceases to exist. Providing this data is voluntary, but it is necessary for communication with you. Data may also be processed for archival purposes for internal purposes based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) until you raise an objection, or the business purpose ceases.

To this end, we will process your data in the following scope:

  1. email address;
  2. other personal data that you voluntarily provide to us in the message you send.

  1. Providing Therapeutic Services as defined in the Regulations

In cases where we are the entity providing you with the Therapeutic Service (as described in our Regulations), we will process your personal data necessary to perform this service. These data will be processed for the duration of the contract regarding Therapeutic Services, for the purpose of concluding and fulfilling the contract (Article 6(1)(b) of the GDPR) and for the duration of the limitation period for claims related to this contract (2 years from the end of the year in which we completed the provision of the Therapeutic Service, Article 6(1)(f) of the GDPR).

Providing data is voluntary, but it is necessary for the conclusion and execution of the contract, which pertains to Therapeutic Services.

To this end, we will process your data in the following scope:

  1. email address;
  2. phone number;
  3. date of birth;
  4. time and place of birth;
  5. payment information (including bank account number);
  6. first and last name;
  7. image;
  8. any other data you voluntarily provided to us during the Therapeutic Service.

  1. Assumptions and Use of the Account

Data necessary for the conclusion and performance of the contract will be processed for the duration of the contract (Article 6(1)(b) of the GDPR) and for the period of limitation for claims related to the contract which provides you access to the account (2 years from the end of the year in which we ceased providing you with access to the Account, Article 6(1)(f) of the GDPR). Providing this data is voluntary, but it is necessary for the conclusion and performance of the contract. Additional data provided for the purpose of facilitating the performance of the contract will be processed no longer than until you raise an objection, or the business purpose based on legitimate interest in customer service ceases (Article 6(1)(f) of the GDPR).

Furthermore, your data may be processed by us when it is necessary to fulfill legal obligations imposed on us as the data administrator (such as issuing and storing invoices) – data will be processed for this purpose for no longer than 6 years (archival obligations concerning accounting documents), unless legal provisions require a longer period (Article 6(1)(c) of the GDPR). Data may also be archived for internal and statistical purposes until you raise an objection, or the business purpose based on the legitimate interest of the Administrator ceases (Article 6(1)(f) of the GDPR), but not for longer than the period mentioned in the previous sentence.

To this end, we will process your data in the following scope:

  1. First name; 
  2. Last name; 
  3. Email address; 
  4. Payment information when you choose a subscription (payment card information, bank account information, payment details); 
  5. Any other data you voluntarily entered while creating the Account.

  1. Sending Marketing Information, including About Services, Products, Promotions, Free Content (Newsletter)

Data will be processed based on the legitimate interest of the Administrator for marketing the Administrator’s products and services (Article 6(1)(f) of the GDPR) or based on your consent (Article 6(1)(a) of the GDPR). Your data will be processed no longer than until you raise an objection or withdraw your consent (if you provided it earlier) or the business purpose ceases – depending on which occurs first. Providing data is voluntary, but it is necessary to receive the newsletter.

To this end, we will process your data in the following scope:

  1. Email address; 
  2. First name; 
  3. Last name.

  1. Administration and Management of Pages and Groups on Social Media Platforms (including Facebook, Instagram, WhatsApp) in Cases of Data Processing on Social Media, Including Communication with You and Directing Marketing Content to You.

This data will be processed only if you choose to like our profiles on social media or otherwise provide your data, e.g., by posting or commenting. The data will be processed for the duration of the page/group existence or until you raise an objection, which can occur by unchecking the “Like” or “Follow” option, deleting your comment/post, or by any other means provided by the platform/page, or by contacting us.

Please remember that we are the administrator of your personal data only to the extent that you engage in activities related to our profile or group. For other actions within the respective social media platform, the administrator of your personal data is the provider of that platform.

  1. Posting Comments

Regarding the data visible on our site when a comment is posted, this data is processed for the purpose of executing the contract, which is the service we provide that allows adding comments (Article 6(1)(b) of the GDPR). 

To this end, we will process your data in the following scope:

  1. First name;
  2. Last name;
  3. Username;
  4. Other data voluntarily entered by you in the published comment.

  1. Provision of Access to Materials

This data will be processed to fulfill our agreement, the subject of which is to ensure you access to the Materials (Article 6(1)(b) of the GDPR). Your data will be processed for the duration of the contract regarding the Materials, for its conclusion and execution (Article 6(1)(b) of the GDPR), as well as for the duration of the limitation period for claims related to this contract (2 years from the end of the year in which your access to the Materials ended) (Article 6(1)(f) of the GDPR). 

To this end, we will process your data in the following scope:

  1. First and last name;
  2. Email address;
  3. Username;
  4. Payment information (including bank account number);
  5. Any other personal data voluntarily entered by you on the Platform.

  1. Establishment, Defense, and Enforcement of Claims

Data will be processed for the limitation period for claims based on the legitimate interest of the Administrator to defend against claims, as well as to establish and pursue claims (Article 6(1)(f) of the GDPR).

To whom may we transfer your data?

We only share your data with other entities when it is necessary. If necessary, your data may be transferred to entities with which we collaborate to achieve our goals: hosting companies, IT companies/data management providers, accounting service providers, newsletter service providers, cloud service providers, subcontractors, platforms facilitating the scheduling of meetings and online events, customer management software providers, entities collaborating in the execution of the contract, and other entities supporting us in the achievement of processing goals.

In some cases, we may transfer personal data to countries outside the European Economic Area. In the event of a necessary transfer, it will be based on standard contractual clauses accepted by the data recipient or, if applicable, the Data Privacy Framework (executive decision of the Commission specifying the principles for transferring personal data to the USA).

We do not plan to transfer personal data to countries other than the USA. Data recipients may only be entities that have been verified for implementing safeguards ensuring the security and integrity of the processed personal data. Furthermore, data recipients, namely LearnWorlds (CY) Ltd., Zoom Video Communications, Inc., Google LLC, and GetResponse Inc., have self-certified and are included on the list of entities participating in the Data Privacy Framework.

What rights do you have?

In connection with the GDPR, you have the right to:

  1. Access your personal data;
  2. Rectify your personal data;
  3. Delete your personal data;
  4. Restrict the processing of your personal data;
  5. Object to the processing of your personal data;
  6. Transfer your personal data; withdraw consent; withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.


If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office. However, we encourage you to contact us first to clarify any doubts.

You can exercise your rights by contacting us via email at hello@healinginstitute.eu or by sending a regular letter to our correspondence address.

Applied security measures.

We implement advanced security measures aimed at ensuring the safety and integrity of personal data that we process in our ongoing activities. We use IT security measures (appropriate workstation security, antivirus and firewall implementation), organizational measures (authorization systems, binding data protection policies, procedures for selecting trusted processors), and physical measures (appropriate security for the data processing area).

The applied security measures are regularly verified for their proper implementation and effectiveness. If it is determined that the measures in place are insufficient, we implement new solutions to ensure adequate security of the data we process.

Cookie Policy.

This website uses cookies. We use cookies to personalize content and advertisements, to provide social media features, and to analyze traffic on our site. Information about how you use our website is shared with our social media, advertising, and analytics partners. Partners may combine this information with other data received from you or obtained during your use of their services.

Cookies are small text files that may be used by websites to enable users to use pages more efficiently.

The law states that we can store cookies on a user’s device if they are necessary for the functioning of this site. For all other types of cookies, we need the user’s permission.

This website uses various types of cookies. Some cookies are placed by third-party services that appear on our pages.

You can withdraw your consent at any time through the Cookie Declaration on our website.

Elementor

Statistics (anonymous)

Usage

We use Elementor for content creation. Read more

Sharing data

This data is not shared with third parties.

Statistics (anonymous)

Name
Expiration
persistent
Function
Store performed actions on the website

WordPress

Functional

Usage

We use WordPress for website development. Read more

Sharing data

This data is not shared with third parties.

Functional

Name
Expiration
persistent
Function
Store user preferences
Name
Expiration
session
Function
Store browser details
Name
Expiration
session
Function
Read if cookies can be placed
Name
Expiration
session
Function
Store language settings
Name
Expiration
1 year
Function
Store user preferences
Name
Expiration
persistent
Function
Store user preferences
Name
Expiration
persistent
Function
Store logged in users

WooCommerce

Functional

Usage

We use WooCommerce for webshop management. Read more

Sharing data

This data is not shared with third parties.

Functional

Name
Expiration
session
Function
Store items in shopping cart
Name
Expiration
session
Function
Store items in shopping cart
Name
Expiration
1 day
Function
Store items in shopping cart
Name
Expiration
session
Function
Store performed actions on the website

Google reCAPTCHA

Functional, Marketing

Usage

We use Google reCAPTCHA for spam prevention. Read more

Sharing data

For more information, please read the Google reCAPTCHA Privacy Statement.

Functional

Name
Expiration
6 months
Function
Provide spam protection

Marketing

Name
Expiration
session
Function
Read and filter requests from bots
Name
Expiration
session
Function
Read and filter requests from bots
Name
Expiration
persistent
Function
Read and filter requests from bots

Stripe

Functional

Usage

We use Stripe for payment processing. Read more

Sharing data

For more information, please read the Stripe Privacy Statement.

Functional

Name
Expiration
1 year
Function
Provide fraud prevention

Jetpack

Statistics

Usage

We use Jetpack for advertising. Read more

Sharing data

For more information, please read the Jetpack Privacy Statement.

Statistics

Name
Expiration
1 year
Function
Store referrer ID's
Name
Expiration
3 days
Function

Sourcebuster JS

Statistics

Usage

We use Sourcebuster JS for visitor tracking. Read more

Sharing data

This data is not shared with third parties.

Statistics

Name
Expiration
6 months
Function
Name
Expiration
6 months
Function
Name
Expiration
6 months
Function
Store browser details
Name
Expiration
6 months
Function
Name
Expiration
Function

Automattic

Statistics

Usage

We use Automattic for website development. Read more

Sharing data

For more information, please read the Automattic Privacy Statement.

Statistics

Name
Expiration
30 minutes
Function
Provide functions across pages

Wordfence

Functional

Usage

We use Wordfence for security and fraud prevention. Read more

Sharing data

For more information, please read the Wordfence Privacy Statement.

Functional

Name
Expiration
persistent
Function
Provide protection against hackers
Name
Expiration
1 day
Function
Read to determine if the user is logged in

Google Fonts

Marketing

Usage

We use Google Fonts for display of webfonts. Read more

Sharing data

For more information, please read the Google Fonts Privacy Statement.

Marketing

Name
Expiration
expires immediately
Function
Read user IP address

Complianz

Functional

Usage

We use Complianz for cookie consent management. Read more

Sharing data

This data is not shared with third parties. For more information, please read the Complianz Privacy Statement.

Functional

Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store accepted cookie policy ID
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store if the cookie banner has been dismissed

YouTube

Purpose pending investigation

Usage

We use YouTube for video display. Read more

Sharing data

For more information, please read the YouTube Privacy Statement.

Purpose pending investigation

Name
GPS
Expiration
Function
Name
VISITOR_INFO1_LIVE
Expiration
Function
Name
YSC
Expiration
Function
Name
PREF
Expiration
Function

Miscellaneous

Statistics

Usage

Sharing data

Sharing of data is pending investigation

Purpose pending investigation

Name
WP_DATA_USER_2
Expiration
Function
Name
e_kit-elements-defaults
Expiration
Function
Name
cookieyes-consent
Expiration
Function
Name
__ssid
Expiration
Function
Name
_ga
Expiration
Function
Name
_ga_P2JCP1HDZ4
Expiration
Function
Name
cmplz_user_data
Expiration
365 days
Function

Statistics

Name
Expiration
6 months
Function
Name
Expiration
6 months
Function

Social media plugins.

The site uses plugins and other social media tools provided by platforms such as Facebook. The rules regarding the processing of personal data are described directly on the service providers’ websites of these social media platforms.

Joint administration.

The administrator of data processed for statistics collected on the Facebook platform is the Healing Institute Foundation registered with the District Court for the City of Warsaw in Warsaw, XIV Economic Division of the National Court Register, located at ul. Szamocka 10c / 50, Warsaw 01-748, VAT ID: 5253002902, KRS: 0001104388, REGON: 528621437, Facebook Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as the Joint Administrator, and LearnWorlds (CY) Ltd., located at Gladstonos 120, Foloune Building, 2nd Floor, B1, Limassol, 3032, Cyprus, hereinafter referred to as the Joint Administrator.

These data are processed on the basis of joint administration by the aforementioned entities. Detailed rules regarding the joint administration of data, including information about the rights you have, are described on the page “Information about page statistics.” The Administrator processes data based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which involves analyzing user activity and preferences in order to improve the functionalities used and the services provided. For matters concerning personal data, you can contact both the Administrator and the Joint Administrator. Contact details for the Administrator can be found above in the privacy policy.

Effective Date: November 19, 2024

[cmplz-cookiepolicy-table]