Privacy Policy

Principles of data processing

The data controller processes personal data only for specified, explicit and lawful purposes, and only to the extent necessary.

Contact form

The following data may be entered in the contact form on the website: full name, email address, phone number, optional message. The purpose of processing is to respond to the enquiry and to enable contact. The legal basis is action taken at the data subject's request prior to entering into a contract.

The data provided during contact is retained for a maximum of 6 months from the closure of the matter, unless a further relationship or service relationship arises, or a legal obligation requires longer retention.

When using the message field, please provide only the information necessary for the enquiry.

Online appointment booking

The booking system may process the following data: name, email address, phone number, the date and time of the booking, the mode of consultation, an optional note, and information related to modifying or cancelling the booking.

The purpose of processing is to arrange the appointment, organise the consultation, send confirmations and reminders, and handle cancellations and modifications. The legal basis is the performance of a contract, or action taken at the data subject's request prior to entering into a contract.

The data entered in the booking system does not serve as detailed health documentation.

Automated emails

In connection with a booking, the system may send automated emails, in particular: a booking confirmation, an appointment reminder, a notification of a modification, and a cancellation confirmation. These messages are not for marketing purposes but relate to the provision of the booked service.

Google Calendar and Google Meet

For online consultations, the system may generate a Google Meet join link. This uses the Google Calendar and Google Meet services. Google's own privacy policy also applies to the use of these services.

HighLevel / LeadConnector

The technical infrastructure of the contact form and the appointment booking is provided by the HighLevel / LeadConnector system. On behalf of the data controller, the provider may act as a processor in the technical handling, storage, transmission and automation of personal data.

Google Maps

The website may use a Google Maps map to show the practice location. When loading Google Maps, Google may process technical data such as the IP address. Google's own privacy policy also applies to the use of Google Maps.

Processors and recipients

In particular, the following providers may be involved in the processing:

• HighLevel / LeadConnector — CRM, contact form, appointment booking, automation and email communication.
• Google — Google Calendar, Google Meet and Google Maps services.
• Mailgun — technical delivery of automated emails via the HighLevel system.

Data security

The data controller and the providers engaged take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss or disclosure.

Data subject rights

The data subject is entitled in particular to:

• request information about the processing of their personal data,
• request access to their personal data,
• request the rectification of inaccurate data,
• in certain cases, request the erasure of data,
• request the restriction of processing,
• in certain cases, object to the processing,
• exercise the right to data portability,
• withdraw consent where processing is based on consent.

Requests relating to data processing may be submitted at: info@metamorfozis-szolnok.hu

Filing a complaint

If the data subject believes that the processing of their personal data infringes the applicable data protection rules, they may lodge a complaint with the National Authority for Data Protection and Freedom of Information.

The data subject may also seek a judicial remedy.