Privacy Policy

1. Controller Details

2. Types of Data We Process

• Newsletter data: email address provided in subscription forms.
• Comment data: name/nickname, comment content, language version, and anti-spam technical metadata.
• Technical data: IP-based server logs, browser/device data, and cookie identifiers.
• Analytics data gathered through measurement tools (e.g., website traffic statistics).

3. Purposes and Legal Bases (GDPR Art. 6)

• Website operation, security, abuse prevention, and diagnostics - legitimate interest (Art. 6(1)(f)).
• Newsletter delivery - consent (Art. 6(1)(a)); consent can be withdrawn at any time.
• Comment publication/moderation - consent and legitimate interest (Art. 6(1)(a) and 6(1)(f)).
• Compliance with legal obligations (e.g., accounting or lawful requests) - legal obligation (Art. 6(1)(c)).

4. Data Recipients and Processors

We use trusted service providers that process data on our behalf, for example:

• hosting and infrastructure providers
• analytics providers (e.g., Google Analytics)
• email/newsletter provider (MailerLite)

Each processor receives only the data necessary to perform specific services under contractual safeguards.

5. International Transfers

If data is transferred outside the EEA/UK, we apply safeguards required by GDPR, such as Standard Contractual Clauses (SCCs) or equivalent lawful mechanisms.

6. Data Retention

We retain personal data only as long as needed for the purposes stated above, legal obligations, and defense of claims. Newsletter data is kept until unsubscribe, and comment/security metadata for moderation and abuse prevention periods.

7. Your GDPR Rights

You have the right to:

• access your data
• rectify inaccurate data
• erase data ("right to be forgotten")
• restrict processing
• data portability where applicable
• object to processing based on legitimate interest
• withdraw consent at any time (without affecting prior lawful processing)

8. Cookies and Similar Technologies

We use cookies for:

• essential website functionality and security
• measuring traffic and improving content performance
• remembering selected settings (if available)

You can manage cookies in your browser settings. Blocking some cookies may impact site functionality.

9. Automated Decision-Making

We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

10. Data Security

We apply organizational and technical measures appropriate to the risk, including access controls, secure communication, and anti-abuse protections.

11. Complaints to a Supervisory Authority

You have the right to lodge a complaint with your local data protection authority, including the Polish authority: President of the Personal Data Protection Office (UODO).

12. Contact Regarding Privacy

For any privacy request, please contact the Administrator.

13. Policy Updates

This policy may be updated to reflect legal, technical, or operational changes. Last update: 18 March 2026.