Privacy and Cookie Policy

Data controller

The controller of personal data processed in connection with sledzpolski.pl is Patrycja Kownacka (Śledź polski, Białystok, Poland). For any questions about personal data, write to sledzpolski@gmail.com.

Hosting and server logs

The site is hosted on Firebase Hosting (Google). Each visit is automatically logged with technical data such as the IP address, date and time of the request, the page address and browser information. This data is processed to deliver the site and keep it secure, based on the controller's legitimate interest (Article 6(1)(f) GDPR). Google keeps these logs as a processor only for as long as needed to serve requests, maintain security and detect abuse, under the Firebase data processing terms; I do not use them to identify visitors.

Email contact

If you write to sledzpolski@gmail.com, I process your email address, name and message to answer your enquiry and, at your request, take steps before entering into a contract (Article 6(1)(b) GDPR), or to carry on correspondence based on legitimate interest (Article 6(1)(f) GDPR). Email is provided by Google (Gmail). Messages are kept for the duration of the correspondence and then until any possible claims become time-barred.

Google Analytics and cookies

Only with your consent (Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law) do I use Google Analytics 4, provided by Google Ireland Limited, to understand visit numbers and how the site is used. Google Analytics sets the _ga and _ga_GRQGCR4WYB cookies (valid for up to 2 years) and processes, among other things, cookie identifiers, IP address, approximate location, device and browser information, and pages visited. Advertising features and Google Signals are disabled. User-level and event-level data is deleted automatically after the retention period set in Google Analytics (14 months). Aggregated statistics (such as total visits) do not identify individuals and may be kept longer.

Google may transfer data to the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, for which the European Commission has found an adequate level of protection (Article 45 GDPR). More information: policies.google.com/privacy.

Without your consent, Google Analytics is not loaded. Your choice is stored in your browser (localStorage); after 12 months it is deleted together with the Google Analytics cookies, and the site asks again.

Consent and withdrawal

On your first visit, you can accept or reject analytics cookies. You can withdraw consent at any time by clicking “Cookie settings” in the page footer, which also deletes the Google Analytics cookies. Withdrawal does not affect the lawfulness of processing carried out before it. You can also delete or block cookies in your browser settings.

External resources and social media

The site loads libraries (Bootstrap, Bootstrap Icons, Swiper, Typed.js) from the jsDelivr network, so your browser shares your IP address with its operators to deliver the files (Article 6(1)(f) GDPR). Links to Instagram and Facebook lead to services of Meta Platforms Ireland Limited, which process data under their own policies once you visit them.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability, and to object to processing based on legitimate interest (Articles 15–21 GDPR). To exercise these rights, write to sledzpolski@gmail.com. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

Voluntary provision and automated decisions

Providing data is voluntary. Data is not used for automated decision-making, including profiling.