← Back to home

LEGAL DOCUMENT

Privacy Policy

Last updated: October 3, 2026

1. Data Controller

The controller of personal data of Users of the polandsecrets.com website is [COMPANY NAME], with its registered office at [ADDRESS], Tax ID: [TAX ID], e-mail: hello@polandsecrets.com (the "Controller").

2. Categories of Data Collected

The Controller processes the following categories of personal data:

  • Data provided voluntarily — e-mail address (when subscribing to the newsletter), name (if provided), message content (in e-mail correspondence).
  • Data collected automatically — IP address, browser type, operating system, visit time, visited pages, entry source (Google Analytics).
  • Data from cookies — see the Cookie Policy.

3. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

  • Providing the Newsletter service — Art. 6(1)(a) GDPR (consent).
  • Responding to contact inquiries — Art. 6(1)(f) GDPR (legitimate interest).
  • Traffic analysis and statistics — Art. 6(1)(a) GDPR (consent) in the case of Google Analytics 4.
  • Direct marketing — Art. 6(1)(f) GDPR (legitimate interest) — only regarding our own services.
  • Pursuing or defending against claims — Art. 6(1)(f) GDPR.

4. Data Retention Period

Data is stored for the following periods:

  • Newsletter data — until unsubscription or for 3 years from the last activity.
  • Contact data — for the period necessary to provide a response, no longer than 12 months.
  • Analytical data — according to Google Analytics 4 settings (default 14 months).
  • Data for defense against claims — until expiration of limitation periods (usually 3–6 years).

5. User Rights

The User has the following rights:

  • Right of access to personal data and to receive a copy.
  • Right to rectification of incorrect or incomplete data.
  • Right to erasure ("right to be forgotten").
  • Right to restriction of processing.
  • Right to data portability to another controller.
  • Right to object to processing based on legitimate interest.
  • Right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
  • Right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise these rights, please contact the Controller at: hello@polandsecrets.com. The Controller will respond within 30 days.

6. Data Recipients

Personal data may be transferred to the following categories of recipients:

  • IT service providers — hosting, e-mail, CRM systems.
  • Analytics tool providers — Google (Google Analytics 4, Google Tag Manager).
  • Newsletter tool providers — e.g. Mailchimp, MailerLite, ConvertKit (depending on the platform used).
  • State authorities — only on the basis of applicable law.

7. Transfer of Data Outside the EEA

Some service providers (e.g. Google) are based outside the European Economic Area. In such cases, data is transferred on the basis of Standard Contractual Clauses (SCC) approved by the European Commission.

8. Data Security

The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure. In particular:

  • Encryption of connections (SSL/TLS).
  • Restricting access to data only to authorized persons.
  • Regular backups.

9. Automated Decision-Making

The Controller does not use profiling or automated decision-making with respect to Users.

10. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Users will be notified of significant changes 14 days in advance.

11. Contact

For matters related to personal data protection, please contact: hello@polandsecrets.com.