PRIVACY POLICY

I. KEY DEFINITIONS

1. Controller – the data controller responsible for processing your personal data: Michał Glinka, conducting business activity at Zalipie 7a, 04-625 Warsaw, Poland, NIP: 9521964857, REGON: 141794485, email: hello@michalglinka.com.
2. User – any natural person or sole trader whose personal data is processed by the Controller.
3. Personal Data – all information about an identified or identifiable natural person, including device IP addresses, location data, online identifiers, and data collected via cookies and similar technologies.
4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
5. Website – the website located at michalglinka.com, operated by the Controller.
6. Processing – any operation performed on personal data, such as collection, recording, storage, adaptation, retrieval, disclosure, or erasure.

II. PROCESSING OF PERSONAL DATA

1. Preparation or performance of a contract entered into with the User (e.g. provision of consulting, marketing, or demand generation services) – legal basis: Art. 6(1)(b) GDPR.
2. Sending a Newsletter or marketing communications regarding the Controller’s services – legal basis: Art. 6(1)(b) GDPR.
3. Handling complaints and enquiries in connection with services provided – legal basis: Art. 6(1)(b) and (c) GDPR.
4. Compliance with legal obligations incumbent on the Controller in connection with running a business, including financial reporting and tax obligations – legal basis: Art. 6(1)(c) GDPR.
5. Establishing, pursuing, or defending legal claims – legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller).
6. Responding to contact form enquiries submitted via the Website – legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to messages sent by Users).
7. Promoting the Controller’s personal brand and services via social media platforms (LinkedIn, YouTube, Facebook, Instagram) – legal basis: Art. 6(1)(f) GDPR (legitimate interest in brand promotion and community building).

III. YOUR RIGHTS

1. Right of access – to receive comprehensive information about the personal data processed by the Controller.
2. Right to rectification – to have incomplete, inaccurate, or outdated data corrected or updated.
3. Right to erasure – to request deletion of data whose processing is no longer necessary for the purpose for which it was collected.
4. Right to restriction of processing – to require the Controller to cease certain processing operations on the User’s data.
5. Right to data portability – to receive data processed on the basis of a contract or consent in a structured, machine-readable format, or to have it transmitted to another controller.
6. Right to object to marketing processing – to object at any time to the processing of personal data for marketing purposes.

1. By email: hello@michalglinka.com
2. By post: Michał Glinka, Zalipie 7a, 04-625 Warsaw, Poland

IV. COOKIES AND ANALYTICS TOOLS

1. The Website uses cookies – small text files stored on the User’s end device that are necessary for the Website to function and improve the User experience.
2. The entity placing cookies on the User’s device and accessing them is the Controller.
3. Cookies are used for the following purposes:
4. generating statistics to help understand how Users interact with the Website;
5. maintaining the User session (after login) so that re-entry of credentials is not required on each page;
6. building User profiles for personalised advertising within ad networks, in particular Google’s network.
7. The Website uses two types of cookies: session cookies (temporary, deleted when the browser is closed) and persistent cookies (stored for a defined period or until manually deleted by the User).
8. Users may configure their browser to block or delete cookies at any time. Please note that restricting cookies may affect the functionality of certain features of the Website.
9. The Controller uses Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to collect website statistics. Google has certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection. Users may opt out by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout/
10. The Controller may use marketing tools provided by Meta Platforms, Inc. (Facebook/Instagram Pixel) for advertising personalisation. Information gathered via the Pixel is anonymous and does not allow direct identification of the User. Meta Platforms has certified under the EU-US Data Privacy Framework. Meta’s privacy policy is available at: https://www.facebook.com/privacy/explanation

V. SERVER LOGS

1. Use of the Website involves sending requests to the server on which the Website is hosted. Each request is recorded in the server logs.
2. Server logs include the User’s IP address, server date and time, browser type, and operating system. Logs are stored on the server.
3. Data recorded in server logs is not associated with specific individuals and is used solely for the purpose of administering the Website. Log contents are not disclosed to anyone other than persons authorised to administer the server.

VI. DATA SECURITY

1. physical and logical separation of data;
2. real-time data replication mechanisms;
3. regular incremental and full data backups;
4. access controls limiting data access to authorised persons and systems only;
5. accountability mechanisms enabling specific actions to be attributed to specific individuals or systems.

VII. FINAL PROVISIONS