Privacy policy
How we handle the personal data you leave on the site, and what rights you have under RODO (GDPR).
This document describes the processing of personal data of visitors to cbtpoland.com. We comply with Regulation (EU) 2016/679 — RODO (GDPR).
1. Who processes the data
The data is processed by CBT Poland Center (Warsaw, Republic of Poland). Registration of the legal entity is in progress; once it is complete, this section will state the full name, address and registration numbers.
For any question about data processing, write to info@cbtpoland.com.
2. What data we collect
We collect only what you enter into the forms on the site yourself:
- Training request: first and last name, phone, email, preferred messenger, the programme chosen, information about your education and practice experience, comment.
- Booking a psychologist: first and last name, phone, email, preferred messenger, the format and type of work you would like, and — if you wish — a brief description of your concern.
- Supervision request: first and last name, contact details, format, practice experience, comment.
- Corporate enquiry: name, contact details, company name, number of participants, comment.
- Write to us: name, email address, phone if you wish, the text of your message.
- Newsletter subscription: email address.
We collect no fields other than those listed. We do not ask you to state a diagnosis and do not offer a list of conditions to tick.
3. Health information
If you describe your condition in the “briefly about your concern” field, that information belongs to a special category of data (art. 9 RODO). We process it only on the basis of your separate explicit consent, which you give with the checkbox next to that field, and solely in order to match you with a suitable specialist and format of work.
Such information is not forwarded to messengers and is available only to the coordinator and to the specialist the request is passed to. The field is optional: you can send a request without filling it in.
4. Why we process data and on what legal basis
| Purpose | Basis under RODO |
|---|---|
| Replying to a request, advising on programmes | art. 6(1)(b) — steps prior to entering into a contract |
| Matching a specialist and a therapy format | art. 6(1)(a) and art. 9(2)(a) — consent |
| Newsletter about enrolment and materials | art. 6(1)(a) — consent |
| Keeping a record of requests and enquiries | art. 6(1)(f) — legitimate interest |
5. Who the data is passed to
- Site and email hosting — technical infrastructure located on servers in the European Union.
- Newsletter service — Mailgun Technologies (European region, servers in the EU). We pass only the name and email address needed to deliver the message. Health information is never passed to the mailing service.
- Telegram — the messenger receives only a notification that a new request has arrived. The content of enquiries, including the description of a concern, is not passed to the messenger.
We do not sell or pass data to third parties for advertising purposes.
6. How long we keep data
- Requests that did not lead to working together — up to 12 months from the enquiry.
- Data of students and clients — for the duration of our work together and thereafter for the periods laid down by law for documents and accounts.
- Newsletter subscription address — until you unsubscribe.
- Consent to processing information about your condition — until it is withdrawn or until the period above expires, whichever comes first.
7. Your rights
You have the right to: access your data; correct it; request its deletion; restrict processing; object to processing; transfer your data; withdraw consent at any time — withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, write to info@cbtpoland.com. We will reply within one month.
If you believe we are breaching the data processing rules, you have the right to lodge a complaint with the supervisory authority — Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.
8. Cookies and analytics
The site does not use tracking cookies, advertising pixels or external analytics systems. We use our own visit counter, which sets no cookies and collects no data that could identify you.
The technical cookies the site does set:
| Name | Purpose | Lifetime |
|---|---|---|
cbtpl-lang | The language you chose in the language switcher | 12 months |
cbtpl-cookie-ok | A note that the cookie notice has been dismissed | 12 months |
Both entries are technical: they contain no personal data, are not sent to the server for analysis and cannot identify you.
Fonts and all other assets are hosted on our own server: when you open a page, your browser does not contact any third-party service.
The light or dark theme you choose is stored in your browser’s local storage and never leaves it.
9. Changes
We will update this document after the legal entity is registered and when online payment is enabled. The date of the last change is given below.
Last updated: August 2026.