Skip to content
Polski
Back to the website

Updated: 15 September 2026

Privacy policy

This page explains the data needed to run this website and handle enquiries, and how to choose whether analytics is enabled.

Who is responsible for personal data

The data controller is Szymon Dawidziuk, trading under the business name:

DAWIDZIUK.ME Szymon Dawidziuk

al. Jerozolimskie 123A/18P - Atlas Tower
02-017 Warszawa
NIP: 5372674708 · REGON: 525452514
szymon@dawidziuk.me

Email enquiries

Contact links open an email application. The website has no contact form, and clicking a link does not send a message. When an email arrives, I process the sender's address and the information included in the message to respond and discuss the support required. Providing data is voluntary, but a contact address and details of the enquiry are needed to reply.

The legal basis is taking steps at a person's request before entering into a contract (GDPR Article 6(1)(b)), or my legitimate interest in handling correspondence, including enquiries from company representatives (Article 6(1)(f)). I retain messages for as long as needed to handle the enquiry. Where they document a business relationship, they may also be retained to meet legal requirements or establish, exercise or defend legal claims.

Running the website

To display the website, the server processes connection information, including an IP address and the requested page address. Technical data is used to deliver content and maintain security. The legal basis is my legitimate interest in operating a reliable and secure website (GDPR Article 6(1)(f)).

Hosting infrastructure and email providers take part in delivering these services to the extent needed to operate the website and handle correspondence. I do not sell visitors' personal data.

Analytics with consent

I use Google Analytics 4 through Google Tag Manager to understand interest in the services and improve the website. Analytics may include pages visited, referral sources, language, basic device and browser information, and clicks on email contact links. The website does not send message contents or the sender's email address to analytics.

GTM and analytics load only after consent. Before a choice is made, and after rejection, the website does not start these tools. Analytics processing is based on consent (GDPR Article 6(1)(a)). Rejecting analytics does not limit access to content or contact options.

The integration does not grant consent for advertising cookies, advertising use of personal data or personalised advertising. Cookie expiry, described below, does not specify how long Google retains data on its servers.

This website's GA4 settings retain event data for 2 months and user data for 14 months. The user data period also applies to key events. Reset on new activity is enabled: another event renews the user identifier's 14-month period. This reset does not apply to event data. These periods concern detailed data used in tools such as explorations and funnel reports. They do not mean that data is removed from most standard aggregated reports.

What the browser stores

Your analytics choice is stored locally so the website can respect it on future visits. This record is not used for tracking and is not sent as a visitor identifier.

dawidziuk-consent-revoked

A fallback refusal flag in sessionStorage, used only if the browser cannot save the choice in localStorage.

Until the tab session ends or a subsequent choice is saved successfully.

dawidziuk-consent-v1

Browser local storage (localStorage). Records the analytics choice and the date it was saved.

The choice remains valid for 180 days. The website then asks again. The record can be removed earlier through browser settings.

_ga and _ga_<identifier>

Google Analytics cookies, enabled after consent. They help distinguish browsers and group events into sessions.

Google specifies a default expiry of 2 years. Service settings and browser restrictions can change this. Cookie expiry is separate from the retention period for reports.

Google Analytics cookie documentation

Consent can be withdrawn or given again at any time using the “Privacy settings” button in the website footer. Withdrawal stops further analytics in that browser. The choice applies to the current browser and device; it needs to be set separately on other devices.

Withdrawal does not affect the lawfulness of processing carried out before it and does not automatically erase data already collected by the service. Requests to erase data or exercise other rights can be sent to the email address on this page.

Google and international transfers

Google's service provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When providing analytics, Google group companies and subprocessors may also process data outside the EEA, including in the United States.

Google describes its transfer mechanisms and safeguards, including Standard Contractual Clauses and the EU–US Data Privacy Framework, in the documents below. They also explain Google's processing and the available protections.

Personal data rights

Where the conditions in the GDPR apply, individuals have the right to access, rectify or erase personal data, restrict processing and receive portable data. Processing based on legitimate interests may be objected to on grounds relating to a person's particular situation. Analytics consent can be withdrawn at any time.

Requests can be sent to szymon@dawidziuk.me. There is also a right to lodge a complaint with Poland's Personal Data Protection Office (UODO), or the competent supervisory authority. I do not use data from this website to make automated decisions that produce legal or similarly significant effects on an individual.