Privacy Policy

I. General provisions

1. This privacy policy sets out how the personal data of Users necessary to provide services by electronic means via the websites marcindakowski.pl and dobreprzywodztwo.com, as well as the application forms (Tally) linked to these websites (hereinafter: the Website) are collected, processed and stored.
2. The Website collects only the personal data necessary to provide and develop the services offered on it.
3. Personal data collected via the Website are processed in accordance with the GDPR and the Polish Personal Data Protection Act of 10 May 2018.

II. Data controller

The controller of the personal data collected via the Website is Marcin Dakowski, ul. Tyniecka 18, 02-630 Warsaw, Tax ID (NIP): 536 178 77 22, email: kontakt@marcindakowski.pl (hereinafter: the Controller).

III. Purpose of collecting personal data

Personal data are used in order to:

• present an offer, where an enquiry sent via the contact form includes a request for an offer - on the basis of Article 6(1)(b) GDPR - processing necessary to take steps at the request of the data subject prior to entering into a contract;
• respond to a User's question, handle the matter the correspondence concerns and, where applicable, pursue claims or defend against them - on the basis of Article 6(1)(f) GDPR - i.e. the Controller's legitimate interest in maintaining proper relations with Clients / prospective Clients or other people getting in touch;
• send commercial information (newsletter) by email - on the basis of Article 6(1)(a) GDPR - i.e. the User's separate, voluntary consent given by ticking the relevant checkbox in the form.

Providing your data is voluntary, but necessary to enter into a contract or to use other features of the Website.

IV. Type of personal data processed

The Controller may process the following personal data of the User: first and last name, email address, telephone number.

V. Period of processing personal data

Users' personal data will be processed for the period:

• where the basis for processing is performance of a contract - until claims become time-barred after its performance;
• where the basis for processing is consent - until it is withdrawn, and after withdrawal until claims become time-barred.

In both cases the limitation period is 6 years, and for claims for periodic payments and claims connected with running a business - 3 years (unless a specific provision states otherwise).

VI. Sharing personal data

1. Users' personal data may be passed to entities cooperating with the Controller to the extent necessary to provide the services, in particular: the newsletter provider (MailerLite), the application form and submission tool provider (Tally), the analytics provider (Google Ireland Limited - Google Analytics 4), the cookie consent management provider, the Website's hosting and infrastructure providers (Lovable / Cloudflare), providers of artificial intelligence tools supporting service operations and communication (including message analysis and drafting responses), law firms and postal service providers.
2. The User's personal data are not passed to third parties other than those entitled to process data on the basis of legal provisions or on the basis of a data-processing agreement with the Controller.
3. The Website uses Google Analytics 4 (provider: Google Ireland Limited) solely to produce aggregated, anonymous visit statistics. The tool is loaded only after the User consents to analytics cookies. Until consent is given, Google Analytics does not save cookies or collect data that would identify the device (Google Consent Mode v2). Google Analytics 4 does not record the User's full IP address (IP anonymisation by default) and is not used for advertising or profiling.
4. Some tools used by the Controller (including Tally, Cloudflare, Google Analytics, artificial intelligence tools) may involve transferring data outside the European Economic Area, in particular to the United States. In such cases the Controller ensures the appropriate safeguards required by the GDPR, in particular Standard Contractual Clauses (SCC) or other mechanisms provided for by law.

VII. Users' rights

1. A User of the Website has the right to: access their personal data, rectify it, erase it, restrict its processing, transfer it, object to its processing, and withdraw consent at any time (which does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal).
2. A request to exercise any of the above rights should be sent to kontakt@marcindakowski.pl.
3. The Controller fulfils or refuses to fulfil the request without undue delay - within a maximum of one month of receiving it.
4. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing infringes their rights and freedoms (GDPR).

VIII. Cookies

1. The Website uses Google Analytics 4 analytics cookies (including _ga and _ga_*) only after the User has given consent. They serve to produce aggregated, anonymous visit statistics and are not used for advertising purposes or to build a User profile.
2. On the first visit the Website displays a consent banner where the User can accept or reject analytics cookies. Rejecting is just as easy as, and equivalent to, accepting. Until consent is given, no analytics cookies are saved on the User's device.
3. Data collected by Google Analytics is retained for 14 months, after which it is deleted or anonymised.
4. The User can change or withdraw consent at any time using the „Cookie settings" link in the Website footer, and can also set the level of cookie access to their device in their browser settings.
5. Video material is embedded from YouTube in privacy-enhanced mode (youtube-nocookie). YouTube may save cookies only after the User starts playing a video.

IX. Automated decision-making and profiling

Users' data are not processed in an automated way that could result in any decisions being taken about them. The Website does not profile Users.

The Controller uses artificial intelligence tools to support service operations and communication (including message analysis and drafting responses). These tools assist the Controller but do not take decisions about Users on their own - final decisions and responses remain with the Controller (human oversight).

X. Newsletter terms

1. The newsletter service is provided by the Controller electronically, free of charge.
2. The service consists of periodically sending information about the Controller's content, products and services to the email address provided.
3. Regardless of whether the newsletter subscription was made on marcindakowski.pl or dobreprzywodztwo.com, the service is provided by the same Controller, and messages are sent from an address in the marcindakowski.pl domain.
4. Subscription is made via the form in the Website and requires confirmation by clicking the activation link sent to the provided address (double opt-in).
5. The User may unsubscribe at any time by clicking the „unsubscribe" link in the footer of each message or by sending a request to kontakt@marcindakowski.pl.
6. Complaints regarding the newsletter can be sent to kontakt@marcindakowski.pl; the Controller handles them within 14 days.

XI. Final provisions

1. The Controller has the right to make changes to this privacy policy, provided that Users' rights will not be limited.
2. Information about any changes will appear as a notice available on the Website.
3. In matters not covered by this privacy policy, the provisions of the GDPR and Polish law apply.