Privacy Policy
Effective from 13 August 2026
This policy describes the rules for processing the personal data of users of the website piotr-rogacki.pl, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter: the GDPR).
1. Data controller
Piotr Rogacki Digital Square
NIP (Polish tax identification number): 7773378394
E-mail: kontakt@piotr-rogacki.pl
For all matters concerning the processing of personal data, you may contact the Controller at the e-mail address above.
The Controller has not appointed a Data Protection Officer — the duties related to the protection of personal data are performed by the Controller personally.
2. Scope and purposes of data processing
Personal data are processed only to the extent necessary to achieve the purposes indicated below.
| Purpose | Scope of data | Legal basis |
|---|---|---|
| Responding to an enquiry submitted via the contact form | first name and surname, e-mail address, optionally company name and telephone number, content of the message | Art. 6(1)(b) GDPR — steps taken at the request of the data subject prior to entering into a contract, and Art. 6(1)(f) GDPR — legitimate interest consisting in conducting correspondence |
| Entering into and performing a collaboration, if the contact leads to one | contact details and data necessary for the performance of the service | Art. 6(1)(b) GDPR — performance of a contract |
| Protecting the form against spam and abuse | IP address, technical browser data, result of the anti-bot verification | Art. 6(1)(f) GDPR — legitimate interest consisting in protecting the website |
| Demonstrating that consent was given and defending against possible claims | record of acceptance of the privacy policy together with the date and IP address | Art. 6(1)(f) GDPR — legitimate interest consisting in demonstrating the lawfulness of processing |
Providing data is voluntary; however, providing your first name and surname, e-mail address and the content of the message is necessary to send an enquiry and receive a reply. The “company” and “telephone” fields are optional.
3. Data retention period
- Correspondence from the contact form — for the period necessary to respond and conduct discussions, and thereafter for a maximum of 24 months from the last contact.
- Data related to a concluded contract — for the duration of the contract and for the period required by tax and accounting regulations (as a rule, 5 years counting from the end of the calendar year in which the tax payment deadline expired).
- Data processed on the basis of legitimate interest — until an objection is effectively raised or the interest ceases to exist.
4. Recipients of data
Data may be entrusted to entities that support the Controller in operating the website, solely to the extent necessary for the provision of their services:
- dhosting.pl sp. z o.o. — website hosting and e-mail services (servers located within the European Union),
- Cloudflare, Inc. — the Cloudflare Turnstile service protecting the form against automated spam,
- Google Ireland Ltd. / Google LLC — provision of Google Fonts typefaces,
- Adobe Inc. — provision of typefaces via the Adobe Fonts (Typekit) service,
- entities providing accounting and legal services — to the extent required by law.
Data may also be disclosed to public authorities where such an obligation arises from generally applicable provisions of law.
5. Transfer of data outside the European Economic Area
The use of the Cloudflare, Google and Adobe services may involve the transfer of technical data (including the IP address) to the United States. These entities ensure an adequate level of data protection on the basis of the European Commission's adequacy decision under the Data Privacy Framework or on the basis of standard contractual clauses approved by the European Commission.
6. Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it,
- have your data rectified (corrected),
- have your data erased (the “right to be forgotten”),
- have the processing of your data restricted,
- receive your data in a portable format (data portability),
- object to processing based on the Controller's legitimate interest,
- withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise the above rights, simply send a message to kontakt@piotr-rogacki.pl. A reply is provided without undue delay, at the latest within one month of receiving the request.
7. Cookies and similar technologies
The website does not use its own analytical, marketing or profiling cookies. It does not use Google Analytics or advertising pixels.
Cookies or data in the browser's storage may be saved by the Cloudflare Turnstile service — solely for the purpose of distinguishing a human from a bot when the form is submitted. These are cookies necessary for the correct and secure operation of the form. You can change your cookie settings in your browser options.
The hosting server keeps standard access logs (IP address, date and time of the request, browser type), used solely for technical and security purposes.
8. Automated decision-making
Personal data are not used for automated decision-making, including profiling which produces legal effects or similarly significantly affects the data subject.
9. Data security
The Controller applies technical and organisational measures appropriate to the risk, in particular: encryption of the connection using the HTTPS/TLS protocol, encrypted transmission of messages from the form, anti-spam protection, and restricting access to data solely to persons and entities for whom it is necessary.
10. Changes to the privacy policy
This policy may be updated in connection with changes in legal provisions or in the scope of the services provided. The current version is always available at piotr-rogacki.pl/en/privacy-policy.html, together with the effective date stated at the beginning of the document.
← Back to homepage