Privacy policy — przemekdrozniak.pl

§1 General provisions

This Policy is a personal data protection policy within the meaning of the GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1).

The Policy describes processing purposes, recipients, retention periods, User rights, and the use of cookies and other storage mechanisms on the device.

The Controller of the website and of personal data provided through it, as well as under any contracts that may be concluded, is DEPENDABLES sp. z o.o., ul. św. Siostry Faustyny 9/3, 32-090 Słomniki, Poland, tax ID (NIP) 6821813687, KRS 0001236800, REGON 544556740.

If you have any questions regarding this Privacy Policy and Cookies Policy, please contact the Controller by e-mail: hello@przemekdrozniak.pl

We update this Policy when our services or data processing change. The date appears below. We explain material changes of purpose before using data for the new purpose; updating this document does not replace consent.

§2 Definitions

Controller — DEPENDABLES sp. z o.o., ul. św. Siostry Faustyny 9/3, 32-090 Słomniki, Poland, NIP 6821813687, KRS 0001236800, REGON 544556740
User — any person visiting and using the website, and submitting data through website forms.
Website — the website available at przemekdrozniak.pl
Newsletter — a free electronic service provided by the Controller, consisting of sending e-mails with information about events, services and products.
Form — places on the Website that allow the User to submit personal data.
GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

§3 Personal data and processing rules

For what purposes and on what legal grounds do we process data?

User personal data may be processed for the following purposes:

performing a contract with the User or taking steps at their request before a contract, including a requested offer and appointment booking — Art. 6(1)(b) GDPR
answering other enquiries and communicating with business representatives — Art. 6(1)(f) GDPR; our interest is handling correspondence and business contacts
issuing invoices and fulfilling tax obligations — Art. 6(1)(c) GDPR
granting discounts or informing about promotions — Art. 6(1)(a) GDPR (consent)
handling contractual complaints — Art. 6(1)(b) GDPR; meeting legal obligations relating to complaints — Art. 6(1)(c) GDPR
establishing, pursuing or defending claims — Art. 6(1)(f) GDPR
analytics (Google Analytics via Google Tag Manager, Microsoft Clarity and Vercel measurement) — Art. 6(1)(a) GDPR (statistics consent)
advertising and remarketing (Meta Pixel) — Art. 6(1)(a) GDPR (consent)
using optional cookies and storing settings — based on consent; mechanisms necessary to provide a requested service do not require this consent
sending the newsletter and its marketing content — Art. 6(1)(a) GDPR and prior consent to electronic communications under Art. 398 of the Polish Electronic Communications Law
securing the website and dashboard and preventing abuse — Art. 6(1)(f) GDPR; our interest is service security
keeping minimal consent and unsubscribe records after withdrawal — Art. 6(1)(f) GDPR; our interest is respecting the withdrawal and demonstrating proper consent handling, without further marketing

How is data collected?

We process information submitted by the User and technical data associated with using the website. Technical data may include IP addresses and HTTP request information, as well as data from measurement tools and cookies, depending on how the tool operates and the consent choices made.

What rights does the User have?

The User has the following rights, subject to the conditions in the GDPR:

the right to access their data
the right to portability of data provided by the User when processed automatically on the basis of consent or a contract
the right to rectification
the right to erasure, if there is no basis for processing
the right to restriction of processing
the right to object to processing based on legitimate interests
the right to lodge a complaint with the President of the Personal Data Protection Office (UODO)

To exercise these rights, the User can contact the Controller by e-mail: hello@przemekdrozniak.pl. We provide information about action taken without undue delay and no later than one month after receiving the request. Where justified by the complexity or number of requests, this period may be extended by two further months. We inform you of any extension and its reasons within the first month.

Is providing data mandatory?

Contacting us and subscribing are voluntary. Without an email address we cannot reply by email or send the newsletter. Required fields are needed to handle the selected feature; other fields may be omitted. Contract or invoice details are required to conclude the contract or meet the applicable legal obligation. Refusing measurement or marketing consent does not prevent browsing the website or sending an enquiry.

Do we make automated decisions?

We do not make solely automated decisions producing legal or similarly significant effects on the User. Following marketing consent, advertising tools may group audiences by website activity to tailor advertisements. Consent can be withdrawn in cookie settings.

Can the User withdraw their consent?

Yes. Consent can be withdrawn at any time. Unsubscribing stops further marketing emails; use the unsubscribe link in a newsletter or contact hello@przemekdrozniak.pl. Unsubscribing does not automatically erase all data, including the unsubscribe record needed to respect that choice. We consider erasure requests separately, taking account of any grounds for retaining data. Withdrawal does not affect the lawfulness of processing performed before the withdrawal.

How long do we store the data?

ordinary enquiries that did not lead to a client relationship — for 12 months after the conversation ends; data needed to meet legal obligations or establish, pursue or defend claims is subject to separate retention periods
for the duration of the service and cooperation, and for the statute of limitations on claims
for the period required by tax law
technical and security data — for the time needed to operate and protect services and investigate a specific incident; objections to legitimate-interest processing are assessed under Art. 21 GDPR
until consent is withdrawn or the processing purpose is achieved — for data processed on the basis of consent
after newsletter unsubscribe — marketing stops immediately and unnecessary profile data is removed within 30 days; we keep the minimal unsubscribe record and consent evidence for up to 3 years solely to respect the withdrawal and demonstrate accountability, reviewing the need annually; data necessary for specific claims is assessed separately

Correspondence retention and newsletter profile minimisation are handled through a manual monthly review. The periods of 12 months, 30 days and up to 3 years are our organisational rules, rather than universal statutory deadlines. Exceptions require a specific reason and review.

§4 Forms

Newsletter sign-up form — collects a first name and email address. Subscribing means consent to receive marketing and commercial information electronically. Consent is voluntary and can be withdrawn at any time. Data is sent to the MailerLite platform (MailerLite Limited, Ireland) under a data processing agreement. A sign-up notification containing the name and email address is also forwarded through Resend to the Controller's mailbox hosted in Google Workspace.

The newsletter is sent for an indefinite period, from activation until consent is withdrawn.

Contact form — lets the User send a message to the Controller electronically. We use the data (name, e-mail address, optional phone number and message content) to handle the enquiry. Resend forwards the message to hello@przemekdrozniak.pl, a mailbox hosted in Google Workspace. Sending an enquiry does not subscribe the User to the newsletter.

Website X-ray and the calculator are currently unavailable and do not accept new requests. Earlier enquiries and reports are subject to the retention rules above. The descriptions below concern their earlier operation; providers and information will be reviewed before relaunch.

Website X-ray form (site audit) — collected company, city and industry information and the contact details entered in the form, including name, email and phone number, to prepare the report and handle the request. Earlier messages and report copies are limited to data needed to handle the enquiry, fulfil legal obligations or address a specific claim. Any newsletter subscription is a separate purpose requiring separate consent.

Pricing calculator — required an e-mail address. The data is processed to send a response about an earlier indicative website quote request. Messages in the Controller's mailbox follow the correspondence retention rules. Any relaunch will not make a quote conditional on newsletter subscription.

The Controller may entrust the processing of personal data to third parties under a processing agreement. Data obtained from forms cannot be shared with third parties without a legal basis.

§5 Cookies Policy

The Controller's website uses cookies, which makes it possible to improve the website to meet users' needs. Cookies are not the only way technical data is processed: connection data is also handled by the hosting provider and embedded services.

Cookies are small text files stored on the User's end device. They may be first-party cookies or third-party cookies.

Cookie categories

Cookies and local entries on the Website are divided into four categories. An inventory with descriptions is available on the Cookie declaration page.

Necessary (always on) — required for the Website to work correctly. Consent choices are stored in localStorage; separate cookies secure the owner's login. These mechanisms do not require consent.
Preferences (optional) — remember User settings, such as the site theme. Consent is required.
Statistics (optional) — allow traffic analysis using Google Analytics (provider: Google Ireland Limited). Measurement identifiers may constitute personal data. Consent is required.
Marketing (optional) — allow personalised ads to be displayed on third-party platforms. Used by Meta Pixel (provider: Meta Platforms Ireland Limited) for remarketing and measuring the effectiveness of ad campaigns. Consent is required.

Google Tag Manager

The Website uses Google Tag Manager (GTM) — a container managing analytics and advertising tags tools. The User's choice is communicated through Google Consent Mode v2 and category settings. GTM, Google Analytics, Microsoft Clarity and Vercel traffic and performance measurement only load after statistics consent. Meta Pixel requires separate marketing consent. Refusing measurement does not disable services needed to display the website, handle forms or schedule meetings.

Google Consent Mode v2

The Website implements Google Consent Mode v2, which means:

by default all analytics and marketing cookies are blocked (status: denied)
without statistics consent, Google tags are not loaded and no cookieless measurement signals are sent to them
withdrawing consent reloads the page to stop previously loaded measurement scripts

Website and meeting services

Vercel — website hosting and the Web Analytics and Speed Insights tools for traffic and performance measurement.
Resend and Google Workspace — forwarding and handling form enquiries and newsletter sign-up notifications.
Cal.com — meeting scheduling. The embedded calendar may connect to the provider before a booking starts. A booking processes information entered in the form and the selected appointment time.
Microsoft Clarity — website behaviour analysis, including heatmaps and session recordings. The tool is assigned to the statistics category.

Provider information: Vercel, Resend, Google Workspace — data information, Cal.com, Microsoft.

Links to social media

The Website contains links to the Controller's social media profiles. When a User clicks a link, they are taken to the external provider's site. The Controller has no control over the data processed by those platforms.

Facebook: fb.com/przemek.drozniak
Instagram: instagram.com/przemek.drozniak
LinkedIn: linkedin.com/in/przemekdrozniak
YouTube: youtube.com/@przemek.drozniak

§6 Cookie consent and managing preferences

On their first visit to the Website, the User sees an information banner with three options:

Accept all — consent to all cookie categories
Customize — open a settings panel to choose individual categories
Reject all — consent only to cookies necessary for the Website to work

The User can change their cookie preferences at any time by clicking the cookie management icon visible in the bottom-left corner of the Website. Withdrawing consent for active measurement automatically reloads the page. Save any unfinished message before changing these settings.

User preferences are stored in the browser (localStorage) and contain: the format version, the date consent was given and the selected categories. This data is not sent to the Controller's server. The saved choice is valid for 365 days; after expiry we ask for a new choice. The ebook theme is stored in localStorage only with preferences consent, also for 365 days.

Regardless of the Cookie Consent Manager settings, the User can also manage cookies through their web browser settings — disabling or deleting cookies at any time.

§7 Owner dashboard and provider processing

The private dashboard uses Supabase for the owner's email login, authenticator verification, sessions and stored audit history. Connected tools (Google Search Console, Analytics, Tag Manager, Bing, Localo and MailerLite) provide reports and configuration within the granted permissions. These dashboard connections do not themselves track every website visitor.

Hosting and service providers may process technical request data. Resend handles form and report emails; its documented email and log retention is 30 days for Free, Pro and Scale plans. Resend stores data in the United States even when the email sending region is in Europe. Its DPA includes Standard Contractual Clauses. Other providers may also use subprocessors outside the EEA; applicable safeguards depend on their contracts and the particular recipient.

Earlier reports contain business visibility information. The website report viewer is currently unavailable. Stored public JSON reports omit the requester's name and email; links should still be treated as confidential. The earlier seven-day display limit did not automatically delete stored files or provider backups.

Provider references: Resend retention and transfers, Supabase DPA, MailerLite DPA, Vercel DPA. Contact hello@przemekdrozniak.pl for information about safeguards relevant to your data.

Published: 2025-01-21 | Last update: 2026-10-11

GDPR & Cookies Policy