Privacy Policy

1. Data controller

The controller within the meaning of Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection is:

• Bc. Andrej Lacko - PsyLab
• place of business: 082 35 Bertotovce 105, Slovak Republic
• Company ID (IČO): 57885753
• registered in the Trade Register of the District Office Prešov, trade register number 750-73206
• email: info@psylab.sk

Personal data is any information relating to an identified or identifiable person. For data protection matters, contact us at the email above.

2. General information

Encryption. The website uses SSL/TLS encryption. You can recognize it by the address starting with https:// and the lock icon in your browser. Complete protection against third-party access during internet transmission cannot be guaranteed.

How long we keep data. Unless a different period is stated for a specific processing activity, we keep data for as long as the purpose lasts, until you raise a justified objection, or until you withdraw consent. We keep it longer only where the law requires it or where it is needed to establish or defend legal claims.

Data transfers to the USA. Some of the tools we use are operated by companies based in the USA. The transfer relies on the European Commission's adequacy decision (EU-US Data Privacy Framework) where the provider is certified under it, and otherwise on standard contractual clauses.

3. Hosting and server logs

The website is hosted by an external hosting provider that processes data only on our instructions. On each visit, technical data is recorded automatically: browser type and version, operating system, referring page, time of the request and IP address. It is used to run the website securely and without errors and is not combined with other data. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies and visitor statistics

The website does not use cookies for analytics or marketing and does not use advertising or tracking tools (such as Google Analytics or Meta Pixel).

We measure traffic with Cloudflare Web Analytics (Cloudflare, Inc., USA). The service sets no cookies, builds no visitor profiles and gives us aggregate statistics only. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR).

5. Google Fonts

For consistent typography the website loads fonts from Google servers (Google Ireland Limited). Your browser connects to Google's servers in the process, which means they learn your IP address. The legal basis is our legitimate interest in a consistent appearance of the website (Art. 6(1)(f) GDPR).

6. Contact and order form

Through the form we process the data you enter: first and last name, email, phone, address, the selected product or service, your answer to the question about tapering medication, and an optional note.

We use the data to handle your order or answer your question. The form is technically provided by Formspree (Formspree, Inc., USA), which delivers the data to our email and processes it as our processor.

The legal basis is performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), for other inquiries our legitimate interest in handling them (point f), and your consent (point a) where you have given it.

7. Contact by email

If you email us, we process your message and contact details in order to handle it. The legal basis and retention are the same as for the form. We do not pass the data on without your consent.

8. Orders and contract data

When you order a test, a dietary supplement or a consultation, we process identification and contact details, order and payment data, and our communication with you. The purposes are:

• handling the order and arranging the test with a partner laboratory or supplier,
• communicating with you before and after the order is handled,
• meeting legal obligations (accounting, taxes).

The legal basis is performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (point c). Payment data is also processed by the bank or payment service provider through which you pay.

9. Health data

Health data is a special category of personal data. We process it only if you provide it to us or if it arises from a service you ordered. This mainly includes:

• symptoms and other information you state in the note or in communication with us,
• laboratory test results that we arrange for you or that you send us,
• the content of a consultation,
• information about medication you take, when we arrange medication tapering.

We process this data only for the service you ordered and on the basis of your explicit consent (Art. 9(2)(a) GDPR). You can withdraw consent at any time by email; withdrawal does not affect processing carried out before it. We do not use health data for marketing and we do not sell it.

10. Orientation questionnaire

Your answers in the free orientation questionnaire stay in your browser. They are not sent to us or to anyone else, and we do not store them.

11. Online consultations

Consultations take place by phone or video call (Zoom, Google Meet). During a call, the providers of these services process contact details, technical data (IP address, device, connection type) and meeting data (time, duration). The providers are Zoom Communications, Inc. (USA) and Google Ireland Limited. The legal basis is performance of a contract (Art. 6(1)(b) GDPR).

12. Social media

The website contains only ordinary links to our profiles on Facebook, Instagram and Spotify. The website itself embeds no modules from these networks, so it sends them none of your data when you visit. If you visit a profile, your data is processed by the operator of that network under its own policy; for the Facebook and Instagram profiles we are jointly responsible with Meta Platforms Ireland Limited for some of the processing.

13. Who we share data with

• partner laboratories in the EU — to process the sample and deliver the result,
• dietary supplement suppliers and carriers — to deliver the order,
• a specialized pharmacy, doctor or therapist — only if you order a service they provide,
• the technical service providers listed above (hosting, form, email, video calls),
• an accounting service provider — to issue and keep records,
• public authorities to the extent required by law.

We do not sell data or pass it to third parties for marketing. We do not use automated decision-making or profiling.

14. Retention periods

• order data and accounting records: 10 years under the Slovak Accounting Act,
• inquiries without an order: for as long as needed to handle them,
• health data: for as long as the service is provided, at the latest until consent is withdrawn, unless the law requires further retention.

After these periods we delete the data securely.

15. Your rights

• Access (Art. 15) — to learn, free of charge, what data we process about you, where it comes from, who receives it and for what purpose.
• Rectification (Art. 16) — to have inaccurate data corrected or incomplete data completed.
• Erasure (Art. 17) — to have data deleted where there is no longer a reason to process it.
• Restriction of processing (Art. 18) — for example while we verify the accuracy of the data or your objection.
• Data portability (Art. 20) — to receive data processed by automated means on the basis of consent or a contract in a common machine-readable format.
• Objection (Art. 21) — to object to processing based on legitimate interest on grounds relating to your particular situation.
• Withdrawal of consent (Art. 7(3)) — at any time and without giving reasons; statutory retention duties remain unaffected.
• Complaint (Art. 77) — to lodge a complaint with a supervisory authority.

The supervisory authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. You may also complain to the authority in your country of residence.

Send a request to exercise any of these rights to info@psylab.sk. We will reply within 30 days.

Disclaimer

PsyLab is an intermediary for laboratory tests and a consultation service — not a medical practice or a psychiatric clinic. We do not provide healthcare, do not make diagnoses, and do not prescribe treatment. We arrange laboratory tests from certified European partners, arrange the delivery of nutritional supplements, and offer an educational consultation with a consultant.

The content provided here is intended solely for informational and educational purposes. The texts do not claim to be complete, and the accuracy, timeliness, or balance of the information provided cannot be guaranteed. Under no circumstances do these texts replace professional medical assistance from a physician, psychiatrist, or pharmacist, and they should not be used as a basis for self-diagnosis or for starting, changing, or discontinuing any treatment. If you have any health questions or concerns, always consult your treating physician.

Always consult exclusively with your psychiatrist or treating physician before making any changes to the use of psychiatric medication (antidepressants, antipsychotics, sedatives, mood stabilizers, and others). Discontinuing medication on your own may be hazardous to your health.

In acute situations — thoughts of self-harm, acute psychosis, or sudden deterioration — please contact your physician directly, the nearest psychiatric clinic, or an emergency line (Nezábudka Helpline 0800 800 566, IPčko chat at ipcko.sk, Emergency Medical Service 155 / 112).

PsyLab does not accept liability for damages arising from the use of the information provided here. Prices and terms are subject to change depending on suppliers and current legislation.

Last updated: October 2026.