This privacy policy explains what personal data we process in connection with your use of the medicalcare24.pl website, for what purpose, on what basis and what rights you have.
1. Data controller
The controller of personal data is Ewelina Dąbrowska, trading as medical care24 Ewelina Dąbrowska, ul. Heroldów 21f lok. 36, 01-991 Warszawa, NIP 118 18 16 779 (Polish tax identification number) (the “Controller”).
For matters relating to personal data, you can contact us by email: help@medicalcare24.pl, by phone: +48 608 472 472 or by post at the address given above.
2. What data we process and for what purpose
Contact form
When you send a message using the form on the website, we process the data you provide in it: full name, phone number, email address and the content of the message, including information about the planned transport (pick-up location, destination, date). We use this data to reply to your enquiry, prepare a quote and arrange the transport.
- Legal basis: Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest, namely replying to you and staying in contact about your enquiry).
- Providing the data is voluntary, but without it we cannot reply to your enquiry.
- We keep the data for as long as it takes to handle your enquiry and, if no contract is concluded, for no longer than 12 months from the last contact. If we conclude a contract, we keep the data for the period required by law, including tax law, and until the limitation periods for claims have expired.
Health information
To plan medical transport, we need basic information about the patient’s state of health, for example whether they can sit, whether they need to travel lying down and what care they need during the journey. We process this information only to the extent necessary to arrange and carry out the service (Article 9(2)(h) GDPR) and, in all other respects, on the basis of the explicit consent of the data subject (Article 9(2)(a) GDPR). Please do not send medical records through the form. If they are needed, we will agree a secure way of sharing them.
Contact by phone and email
If you contact us directly by phone or email, we process the data you give us in order to handle that contact (Article 6(1)(b) and (f) GDPR), for the period described above.
Visitor statistics
If you consent to statistics cookies, we use Google Analytics 4 to understand how visitors use the website: which pages they view, where they come from and whether they contact us (clicking a phone number or an email address, submitting the form). The data is collected in aggregated form and is not used to identify any individual. The basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Without your consent, Google Analytics does not store any cookies. We use Google consent mode (Consent Mode v2), in which, before consent is given, only anonymous signals without user identifiers are sent to Google.
Search engine visibility
We use Google Search Console to check how the website appears in Google search results (number of impressions and clicks, search queries, indexing errors). The tool does not store cookies in your browser and gives us aggregated data only, with no information that would allow an individual to be identified.
3. Cookies
Cookies are small files stored in your browser. On your first visit we display a window in which you decide which categories you agree to. Until you decide, we store strictly necessary cookies only.
- Strictly necessary: remembering your cookie decision and running the website and its administration panel. These do not require consent.
- Functional: the Google Maps map embedded on the home page and on the Contact page. When it is displayed, Google receives your IP address and may store its own cookies.
- Statistics: Google Analytics (the _ga cookie and the _ga_ cookie with a stream identifier, valid for up to 2 years). Only with your consent.
- Marketing: the _gcl_au cookie, which makes it possible to link a visit to a Google advertisement, if any (valid for up to 90 days). Only with your consent. We are not currently running any advertising campaigns.
You will find the full list of cookies with descriptions in the cookie settings window. You can change or withdraw your consent at any time by opening the cookie settings on the website or by clearing cookies in your browser. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
We record your cookie decision in a consent log (date, scope of consent, technical identifier of the decision), without your name, email address or any other data that would allow you to be identified. The log serves to demonstrate that consent has been obtained (Article 7(1) GDPR).
4. Recipients of data
Data may be passed on to entities that provide services to us and process data on our behalf, and to entities we work with in carrying out the transport:
- hosting and email providers (servers for the website and mailboxes),
- Google Ireland Limited (Google Analytics, Google Tag Manager, Google Maps), only to the extent described in this policy,
- a software development company, to the extent necessary for the technical maintenance of the website,
- the medical teams, carriers and medical facilities we work with, to the extent necessary to carry out the transport,
- insurers and assistance companies, where they are the ones commissioning or funding the transport.
Google may also process data outside the European Economic Area (EEA), including in the USA. The transfer takes place on the basis of the European Commission decision on the EU-US data protection framework (EU-US Data Privacy Framework) and standard contractual clauses. We do not sell data or share it with other entities for marketing purposes.
5. External resources and server logs
We load the website fonts from our own server. Icons are downloaded from the Font Awesome server (Fonticons, Inc., USA), which receives your IP address and technical information about your browser in the process, because this is necessary to deliver the files. Font Awesome does not store any cookies when doing so. The basis is our legitimate interest in displaying the website correctly (Article 6(1)(f) GDPR).
The hosting server keeps standard logs (IP address, date and time, page address, browser type) to ensure security and diagnose errors. We keep the logs for the period set by the hosting provider, for no longer than 12 months.
6. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy of it,
- rectification of your data,
- erasure of your data,
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, write to help@medicalcare24.pl or to the address given in section 1. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, the Polish data protection authority), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
7. Automated decision-making
We do not make decisions about you based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you.
8. Changes to the privacy policy
The policy may be updated, for example when the tools used on the website change. The current version is always available at this address.
Last updated: 10 November 2026