Last updated: · Wersja polska
This policy explains how we process personal data on budujacliderow.pl: what we collect, why, for how long, who we share it with and what rights you have. It also describes cookies and the consent banner. The Polish version is the binding one; this is a translation.
1. Data controller
The controller of your personal data is Linis IT Dariusz Wit, ul. Polki 1/30, 02-826 Warszawa, Poland, tax ID (NIP) 831-155-69-04, REGON 389340444 (“we”). Contact on data protection matters: kontakt@budujacliderow.pl or by post at the address above. We have not appointed a data protection officer.
2. What data, for what purpose and on what legal basis
- “Write to us” chat. Your first name (if you give it), email address or phone number and the message, as well as the title and address of the page you write from, the page language and the date. We use them only to reply. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
- Email correspondence. Your email address, name and the content of your message when you write to us directly. Legal basis: Art. 6(1)(b) or (f) GDPR, as above.
- Newsletter. Your email address (and first name, if you give it) when you sign up through a MailerLite form. We send messages only with your consent. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 398 of the Polish Electronic Communications Law). You can withdraw consent at any time using the link in every message; this does not affect the lawfulness of mailings sent before withdrawal.
- User account. If you create an account (e.g. to take courses once they are launched): username, email address, password (stored as an encrypted hash) and the details you enter in your profile. Legal basis: the contract for the account service (Art. 6(1)(b) GDPR).
- Visit statistics. If you consent in the banner: information about the pages you visit, approximate location (country, city), device and browser, collected by Google Analytics 4 with a pseudonymous identifier. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law).
- Website security. IP address, date and time of the request, browser information (server and Wordfence firewall logs), a one-way hash of the IP address kept for one hour to limit the number of chat messages, and the Google reCAPTCHA score on the login and registration pages (bot protection). Legal basis: our legitimate interest in securing the website (Art. 6(1)(f) GDPR).
- Cooperation and accounting. If a conversation leads to a contract, we process the data needed to perform it and to keep accounts and tax records. Legal basis: Art. 6(1)(b) and (c) GDPR.
- Claims. Where necessary, establishing, pursuing or defending legal claims. Legal basis: Art. 6(1)(f) GDPR.
3. How long we keep data
- Chat messages and correspondence that did not lead to cooperation: 12 months from the last contact.
- Newsletter: until you withdraw consent. After that we keep only your email address on the unsubscribe list so that we do not write to you again (Art. 6(1)(f) GDPR).
- User account: until it is deleted (you can ask for this at any time).
- Google Analytics statistics: 14 months.
- Server and firewall logs and anti-spam data: no longer than security requires, usually up to 30 days; the chat IP hash: 1 hour.
- Contracts and accounting documents: for the period required by tax and accounting law (as a rule 5 years from the end of the year in which the tax obligation arose) and until claims become time-barred.
4. Who we share data with
We do not sell data or share it for other companies’ marketing. The following providers process data on our behalf, under data processing agreements or the providers’ data processing terms:
- dhosting.pl (website hosting, servers in Poland);
- Microsoft Ireland Operations Ltd (Microsoft 365 email, including messages sent by the website). Microsoft stores data in the EU (EU Data Boundary); in limited situations (technical support, security) data may be transferred to the USA under the EU–US Data Privacy Framework and standard contractual clauses;
- UAB MailerLite (Vilnius, Lithuania; newsletter and sign-up forms). Data is stored in the EU;
- Google Ireland Limited and Google LLC (Google Analytics 4 after your consent, and reCAPTCHA). Data may be transferred to the USA under the EU–US Data Privacy Framework;
- Defiant Inc. (USA; Wordfence firewall and login protection). Transfer to the USA under the European Commission’s standard contractual clauses;
- Automattic Inc. (USA; Jetpack and Akismet, WordPress protection and maintenance) and Incsub LLC (USA; WPMU DEV maintenance tools). Transfer to the USA under the EU–US Data Privacy Framework.
Telegram. Messages from the “Write to us” chat reach Dariusz Wit through the Telegram messenger (Telegram Messenger Inc., based outside the European Economic Area; data of EEA users is stored in data centres in the Netherlands). Telegram does not act under a data processing agreement with us and does not participate in the EU–US Data Privacy Framework. We pass a message to it only when you send it yourself, and only in order to reply (Art. 49(1)(b) GDPR). If you do not want this, please write to us by email.
Data may also be received by our accounting office, legal advisers or public authorities where the law requires it.
5. Your rights
You have the right to access your data, to rectify, erase and port it, to restrict processing and to object to processing based on our legitimate interest. You can withdraw consent (newsletter, cookies) at any time, without affecting the lawfulness of processing before withdrawal. To exercise your rights, write to kontakt@budujacliderow.pl. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl) or with the supervisory authority in your country.
6. Do you have to provide data?
Providing data is voluntary, but without contact details and a message we cannot reply in the chat, without an email address we cannot send the newsletter, and without account details you cannot create an account. We do not make automated decisions and do not profile.
7. Cookies, browser storage and the consent banner
Consent banner. On your first visit we show a banner where you choose cookie categories: necessary (always on; the website does not work properly without them), analytics and marketing (off by default). We load analytics and marketing scripts only after you consent. We store your choice in the linis_zgody cookie on budujacliderow.pl (a first-party cookie, not shared with other companies). We pass your choice to Google services as consent signals (Google Consent Mode v2). You can change or withdraw consent at any time using the “Cookie settings” link in the page footer.
Necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
linis_zgody | budujacliderow.pl | remembers your choice in the consent banner | 182 days |
wordpress_test_cookie | budujacliderow.pl | checks whether the browser accepts cookies (login) | session |
wordpress_logged_in_*, wordpress_sec_* | budujacliderow.pl | keeps you logged in | session or 14 days (“Remember me”) |
wp-settings-*, wp-settings-time-* | budujacliderow.pl | dashboard settings of a logged-in user | 1 year |
wfwaf-authcookie-* | budujacliderow.pl (Wordfence) | lets the firewall recognise a logged-in user | 12 hours, logged-in users only |
_GRECAPTCHA | Google (reCAPTCHA) | protects login and registration against bots | 6 months, login and registration pages only |
Analytics (only with consent)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google (Google Analytics 4) | distinguishes visitors in statistics | 2 years |
_ga_9Y4QY2PJZ0 | Google (Google Analytics 4) | keeps the session state in statistics | 2 years |
sbjs_migrations, sbjs_current_add, sbjs_first_add, sbjs_current, sbjs_first, sbjs_udata, sbjs_session | budujacliderow.pl (WooCommerce order attribution) | records where you came to the website from | session, sbjs_session 30 minutes |
Marketing (only with consent)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
mailerlite_forms_shown_* | MailerLite | remembers that the newsletter sign-up window has already been shown | according to the form setting |
mailerlite_forms_submitted_* | MailerLite | remembers that you have already signed up, so the window is not shown again | up to 9999 days |
Browser storage. The bl-theme entry in browser storage (localStorage) remembers the light or dark theme; it never leaves your device. The “Write to us” chat does not set cookies or store data in the browser.
You can also delete cookies and browser storage at any time in your browser settings; the website will keep working and the banner will ask for consent again.
8. Changes
We will publish changes to this policy on this page, with the date of the last update.