Privacy Policy

#Privacy and cookies policy of WPPoland.com

This Privacy Policy explains how WPPoland processes personal data of users of wppoland.com, the contact form, and related communication channels.

#§1. Data controller and contact

The data controller is Mariusz Szatkowski, operating as WPPoland Mariusz Szatkowski, ul. Starowiejska 16/2, 81-356 Gdynia, Poland, Tax ID (NIP): 7393037445.

Contact for privacy matters:

• e-mail: [email protected]
• postal address: WPPoland Mariusz Szatkowski, ul. Starowiejska 16/2, 81-356 Gdynia, Poland

#§2. Scope and definitions

1. This policy applies to users of wppoland.com in all language versions.
2. Definitions:
   • Service: the website wppoland.com.
   • User: a natural person using the Service or contacting the Controller.
   • GDPR: Regulation (EU) 2016/679.

#§3. Purposes and legal bases

We process personal data only where we have a legal basis:

1. Contact and handling inquiries (form/e-mail):
   • Art. 6(1)(b) GDPR (steps prior to entering into a contract),
   • Art. 6(1)(f) GDPR (legitimate interest: communication and inquiry handling).
2. Security and stability of the Service (logs, abuse protection):
   • Art. 6(1)(f) GDPR.
3. Traffic analytics and Service development:
   • Art. 6(1)(f) GDPR (legitimate interest in anonymous traffic analytics; our analytics is first-party, cookieless and anonymous, collects no personal data and does not track users across sites). You can object by enabling a Do Not Track or Global Privacy Control signal in your browser, which we honor by not sending analytics events.
4. Compliance with legal obligations (e.g., tax/accounting):
   • Art. 6(1)(c) GDPR.
5. Establishing, exercising, or defending legal claims:
   • Art. 6(1)(f) GDPR.

#§4. Categories of data

1. Data provided by the User via form or e-mail, such as name, e-mail address, message content, and any other data submitted voluntarily.
2. Automatically collected technical data: IP address, device type, operating system, browser, connection time, server logs, and cookie identifiers.

#§5. Contact form and processors

1. The contact form is technically operated by Web3Forms.
2. Web3Forms acts as a technical provider (processor or separate controller under its own terms), and form data are forwarded to the Controller.
3. The Controller processes received form data for the purposes described in this policy.
4. Web3Forms privacy policy: https://web3forms.com/privacy.

#§6. Data recipients and transfers outside the EEA

1. Data may be shared with entities supporting the Controller, in particular hosting providers, analytics/security providers, and IT service providers.
2. Because contact-form data are handled via Web3Forms and the Service is hosted on Cloudflare, some data may be transferred outside the EEA (e.g., to the USA) with safeguards required by GDPR, including Standard Contractual Clauses (SCCs), and where applicable also based on the EU-U.S. Data Privacy Framework. Analytics is first-party and runs on Cloudflare, our existing host, so it introduces no separate analytics processor or additional data transfer beyond the hosting relationship already described above.
3. Data are disclosed to public authorities only where legally required.

#§7. Retention periods

1. Contact data: for the period necessary to handle an inquiry and follow-up communication, then for the limitation period for claims (typically up to 3 years unless a longer period is required by law).
2. Data processed due to legal obligations (e.g., accounting/tax): for statutory retention periods (typically 5 years from the end of the relevant tax year).
3. Analytics data: our first-party analytics collects anonymized, cookieless usage statistics and stores no personal data; you can opt out of analytics via a Do Not Track or Global Privacy Control signal.
4. Server logs and security data: for as long as necessary to ensure security and investigate incidents, typically no longer than 12 months unless needed longer for legal defense.
5. Data processed under legitimate interest: until an effective objection is raised or the purpose ceases.

#§8. User rights

Users have the right to:

1. access personal data,
2. rectify data,
3. erase data,
4. restrict processing,
5. data portability (where applicable),
6. object to processing based on Art. 6(1)(f) GDPR,
7. withdraw consent at any time (without affecting lawfulness before withdrawal),
8. lodge a complaint with a competent supervisory authority, including the President of the Personal Data Protection Office (UODO) in Poland (ul. Stawki 2, 00-193 Warsaw), or your local EU/EEA authority.

Requests can be sent to: [email protected]. We respond without undue delay, usually within 1 month from receipt. For complex requests, the deadline may be extended by up to 2 additional months, and we will inform you of the reasons. We may request identity verification before completing a request.

#§9. Cookies and similar technologies

1. The Service uses:
   • necessary cookies (operation and security),
   • functional/security cookies where required for Service operation.
2. Analytics is first-party: the Service sends lightweight usage events to its own same-origin endpoint, which records only the event name, the page path, and declared properties (for example a CTA source). It is cookieless and anonymous, sets no tracking cookies, collects no personal data, and does not track Users across sites. It runs under our legitimate interest, and events are not sent when the browser sends a Do Not Track or Global Privacy Control signal.
3. Non-essential technologies are used based on User consent where required by law.
4. Consent can be changed or withdrawn in cookie settings and browser settings.

#§10. Security and incidents

1. We apply technical and organizational safeguards appropriate to risk, including HTTPS, access control, and security monitoring.
2. In case of a personal data breach, we act in accordance with GDPR, including notification to the supervisory authority where required (typically within 72 hours of becoming aware of the breach).
3. We do not use solely automated decision-making, including profiling, that produces legal effects concerning users or similarly significantly affects them.

#§11. Policy updates

1. This policy may be updated due to legal, technological, or organizational changes.
2. The current version is always available on wppoland.com.
3. Material changes are communicated on the Service.

#Legal notice

WPPoland Mariusz Szatkowski
ul. Starowiejska 16/2
81-356 Gdynia, Poland
E-mail: [email protected]

#Image credits

The photographs of Mariusz Szatkowski used on this website were taken by Marta Weronika Pawłowska.