Information on the processing of personal data

Acting as the Administrator of your personal data, please read the information necessary for collecting personal data, pursuant to Art. 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals in connection with the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (GDPR, General Data Protection Regulation). The processing of personal data is carried out in accordance with the GDPR and national rules concerning, in particular, the protection of personal data and the rights of the patient.

Personal Data Administrator

Personal Data Administrator is the Invicta Group (hereinafter referred to as Invicta), acting as co-administrator of personal data (Invicta Management Sp. z o.o., Medyczne Laboratoria Diagnostyczne Invicta (Invicta Medical Diagnostic Laboratories) Sp. z o.o., Klinika Antiaging Invicta (Invicta Antiaging Clinic) Sp. z o.o., Invicta Software Sp. z o.o. with its registered office in Sopot (81-740) at Polna 64, Invicta spółka z o.o. with its registered office in Gdańsk (80-172), at Trzy Lipy 3, tel. 58 58 58 58 800.

Inspector of Personal Data Protection

Inspector of Personal Data Protection:

Basis and purpose of processing personal data

Your personal data will be processed on the basis of: Art. 9 (2)(h) of GDPR (for medical diagnosis and health prevention) Art. 6 (1)(b) of GDPR (for the purpose of concluding the contract to which you are a party) Art. 6 (1)(a) of GDPR (for contact or enquiry) Art. 6 (1)(a) of GDPR (for marketing and promotional purposes and/or for transferring commercial information of own products and services by e-mail and/or telephone – if such consent has been expressed)

Recipients of personal data

The recipients of your personal data may be: authorised employees of the Data Administrator, entities to whom have been entrusted personal data under the contract of entrustment by the Administrator, and who participate in the support of the treatment process, persons authorized by the processing entity.

Transfer of personal data to a third country

Transfer of personal data to a third country will only be possible at your express request.

Storage of personal data

Your personal data will be stored until you withdraw your consent for data processing or for the period required by law for retaining medical and/or accounting records.

Rights of the person whose personal data is processed

Providing personal data is completely voluntary, but necessary for the execution of the order/inquiry.
  • You have the right to request the access to your personal data from the Administrator, to rectify it, delete or restrict its processing, object to its processing, as well as the right to transfer data and to be forgotten. Please submit your requests by email to
  • You have the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office) if you believe that the processing of your personal data violates the GDPR laws.
  • You have the right to withdraw your consent to processing your personal data at any time without affecting the lawfulness of the processing that was done on the basis of the consent prior to its withdrawal.
The right to delete data and to withdraw consent to processing data does not apply to personal data which must be retained according to the provisions of law, in particular in respect of retaining and archiving medical records and/or accounting records.