§ 1. General Provisions & Data Controller
1. This Privacy and Cookies Policy sets out the principles of processing and protecting personal data provided by Users in connection with their use of the website available at https://jakub-az.pl (hereinafter: the "Service").
2. The Data Controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, hereinafter: "GDPR") is:
3. The Controller exercises special diligence to safeguard the interests of data subjects, ensuring that personal data is processed lawfully, fairly, and transparently, collected for specified, explicit, and legitimate purposes, and limited to what is necessary (data minimization principle).
§ 2. Purposes, Legal Grounds, and Retention Periods
Users' personal data may be processed for the following purposes and under the following legal bases:
1. Contact inquiries, project briefs, and email communication
- Legal basis: Art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest of the Controller in conducting business communications).
- Data scope: Full name / company name, email address, phone number, website URL, message content / brief specifications.
- Retention period: For the duration of the correspondence and as long as necessary to provide comprehensive information or defend against potential claims (up to 3 years).
2. Contract conclusion and execution of digital consulting services
- Legal basis: Art. 6(1)(b) GDPR (performance of a contract to which the data subject is party).
- Data scope: Identification data, company details (Tax ID / VAT number, address), billing information, project deliverables history.
- Retention period: For the duration of the contract and until the expiration of the limitation period for contractual claims.
3. Compliance with legal and tax/accounting obligations
- Legal basis: Art. 6(1)(c) GDPR in conjunction with applicable national tax and accounting regulations.
- Data scope: Data required on invoices and financial records.
- Retention period: For the statutory period mandated by tax law (typically 5 years from the end of the calendar year in which the tax obligation arose).
4. Traffic analytics, statistics, and UX optimization (Google Consent Mode v2)
- Legal basis: Art. 6(1)(a) GDPR (freely given, specific, informed, and unambiguous user consent via the cookie banner).
- Data scope: Anonymized IP addresses, cookie identifiers, technical device and browser parameters, page engagement duration.
- Retention period: Until consent is revoked by the User or until cookie expiration (up to 14 months in Google Analytics 4).
§ 3. Data Recipients & International Transfers
1. For the purpose of maintaining the Service and delivering services, the Controller engages trusted third-party processors operating under formal Data Processing Agreements:
- Hosting and email infrastructure providers: Hosting facilities situated within the European Union.
- Web analytics providers: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — regarding Google Analytics 4.
- Communication and form services: Providers assisting with inquiry processing (Tally.so / FormSubmit) enforcing encrypted TLS connections.
2. Where certain processors (such as Google LLC) process data outside the European Economic Area (EEA), transfers are governed by appropriate legal safeguards, notably the Standard Contractual Clauses (SCC) approved by the European Commission or the EU-US Data Privacy Framework (DPF).
§ 4. User Rights under GDPR
Under GDPR regulations, every User is entitled to the following rights:
Obtain confirmation on whether your personal data is processed and request a copy.
Request immediate correction of inaccurate or incomplete personal data.
"Right to be forgotten" under circumstances outlined in the GDPR.
Request suspension of data processing during dispute verification.
Receive your personal data in a structured, commonly used, machine-readable format.
Object at any time to processing based on legitimate interests.
To exercise any of the above rights, simply send an email to: kontakt@jakub-az.pl. The Controller will address your request within a maximum of 30 days.
Users also have the right to lodge a complaint with a competent Data Protection Supervisory Authority (in Poland: the President of the Personal Data Protection Office — PUODO, ul. Stawki 2, 00-193 Warsaw).
§ 5. Cookie Policy & Google Consent Mode v2
1. The Service uses cookies and browser local storage (localStorage) to ensure proper website functionality, preserve user preferences, and collect anonymous analytics.
2. In compliance with the latest Google Consent Mode v2 standard, the default state for analytical and marketing tags is set to denied prior to explicit user consent. Data collection only occurs after your explicit approval.
Cookie Categories in Use:
| Category | Name / Provider | Purpose & Function | Expiry | Consent Required |
|---|---|---|---|---|
| Essential (Technical) | jakub_az_cookie_consent |
Stores the user's selected cookie consent preferences. | 12 months (localStorage) | No (Always active) |
| Analytics | _ga, _ga_* (Google Analytics 4) |
Anonymous measurement of page visits, traffic sources, and engagement metrics. | Up to 14 months | Yes (Optional) |
| Marketing | ad_user_data, ad_personalization |
Conversion attribution and ad effectiveness tracking in Google Ads. | Session / 90 days | Yes (Optional) |
3. Managing & changing preferences: You can change or revoke your cookie choices at any time by clicking the button below or using the footer link:
4. You may also block or delete cookies directly through your browser settings (Chrome, Safari, Firefox, Edge, Opera).
§ 6. Security & Data Integrity
1. The Controller implements high-grade technical and organizational measures to ensure data security commensurate with identified operational risks.
2. All data transmitted between the User's device and the Service is encrypted using 256-bit SSL/TLS protocol.
3. Access to personal data is strictly limited to authorized personnel subject to confidentiality commitments.
§ 7. Amendments to the Privacy Policy
1. The Controller reserves the right to amend this Privacy Policy to reflect statutory updates, technological upgrades, or new features in the Service.
2. The current version of this document is permanently available at: https://jakub-az.pl/en/privacy-policy.