Privacy policy

1. Data controller

The controller of personal data is Grzegorz Kowalski. For privacy and data processing matters, contact: info@grzegorzkowalski.com.pl.

2. Data that may be processed

When you browse the website, the server may automatically record technical information such as the IP address, request date and time, requested URL, browser type, operating system and error information.

If you contact me by email, the data contained in your message will be processed, in particular your name, email address, enquiry content and information about the planned event.

Analytics or marketing data is collected only if you consent to the relevant category in the privacy settings.

3. Purposes and legal bases

Correspondence data is processed to respond, prepare an offer and take steps before entering into a contract under Article 6(1)(b) GDPR, and to establish or defend possible claims under the controller's legitimate interest pursuant to Article 6(1)(f) GDPR.

Technical server data may be processed to ensure website security, stability and diagnostics under Article 6(1)(f) GDPR.

Google Analytics 4, Meta Pixel, Google Tag Manager and optional tracking code are activated on the basis of voluntary consent under Article 6(1)(a) GDPR and the applicable electronic communications rules.

4. Cookies and similar technologies

The website stores an essential localStorage entry named “gk_privacy_consent” containing the consent mechanism version, selected categories and decision date. It remains valid for no more than 180 days and is used only to remember your privacy choice.

Analytics and marketing technologies are disabled by default. You may accept all categories, reject optional technologies or make your own selection. Consent is not required to use the website and may be withdrawn at any time using the “Privacy settings” button.

After analytics consent, Google Analytics 4 may use “_ga”, “_ga_*”, “_gid” or “_gat” cookies to distinguish visits and measure website usage. Their lifetime depends on the service configuration and may be up to 2 years.

After marketing consent, Meta Pixel may use “_fbp” and “_fbc” cookies, usually for up to 3 months. Google Tag Manager is itself a tag management system, but tools configured within it may create additional identifiers described by their providers.

After consent is withdrawn, the website stops loading optional tools on subsequent page views and removes common Google and Meta cookies accessible to it. Some third-party data or cookies may also need to be removed through your browser settings.

5. Data recipients

Data may be accessed by hosting, email and technical support providers only to the extent necessary to provide their services.

If you provide the relevant consent and the controller configures these services in the CMS, recipients may also include Google Ireland Limited in connection with Google Analytics 4 or Google Tag Manager and Meta Platforms Ireland Limited in connection with Meta Pixel.

6. Retention periods

Correspondence is retained for the time needed to handle the enquiry, prepare and deliver the service, and then for the period required by law or until possible claims expire.

Technical logs are retained according to the hosting configuration and security needs. Privacy preferences are remembered for up to 180 days. Retention periods used by Google and Meta depend on the configuration and policies of those services.

7. Your rights

Depending on the legal basis, you may request access to your data, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawing consent is as easy as giving it by using the persistent privacy settings button.

If you believe that your data is processed unlawfully, you may lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority.

8. Transfers outside the EEA

Google and Meta may process some data outside the European Economic Area. If these tools are activated after consent, transfers take place under the safeguards used by the relevant provider, in particular an applicable adequacy decision or standard contractual clauses.

9. Security

The controller applies technical and organisational measures appropriate for the website, including encrypted HTTPS connections, restricted administrative access, session protection, revision backups and validation of uploaded files.

10. Changes to this policy

This policy may be updated when the website, service configuration or applicable law changes. The current version and its effective date are always published on this page.

11. Privacy contact

Questions and requests concerning personal data may be sent to: info@grzegorzkowalski.com.pl.