Privacy Policy
I care about your privacy and the security of your data. This Privacy Policy explains how I collect, use, and protect your personal data when you use my website www.dawidwnukowski.com and the services I offer.
1. Definitions
- Administrator (I/Me): Dawid Wnukowski, Tax ID: PL5842766679
- Personal Data: Any information relating to an identified or identifiable natural person. This may include your name, surname, email address, phone number, IP address, as well as data collected through cookies and other similar technologies.
- Policy: This Privacy Policy.
- GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
- Service: My website available at www.dawidwnukowski.com.
- User (You): Any natural person visiting the Service or using my services.
2. Data Processing
I process your data to the extent necessary to provide my services and to improve the operation of the Service.
- Using the Service:
- The legal basis for analytics is your consent (Article 6(1)(a) GDPR). With your consent, I use Google Analytics 4 to understand visits and use of this website. Google Analytics does not load before analytics is accepted. You can withdraw consent using “Cookie settings” at the bottom of every page.
- Your activity may be recorded in system logs for technical, administrative, and security purposes.
- Purchasing Services (via email contact):
- If you decide to purchase a service via email contact, I will ask for your data necessary to fulfill the order (e.g., name, surname, email address, billing details). I process this data for the purpose of contract performance (Article 6(1)(b) GDPR) and to fulfill legal obligations (e.g., tax regulations, Article 6(1)(c) GDPR).
- Email contact:
- This website has no contact form. When you send an email, I process the sender address and information in the message to answer your inquiry or prepare and perform a contract. The basis is Article 6(1)(b) GDPR for contractual matters or Article 6(1)(f) GDPR for other correspondence (the legitimate interest in responding to inquiries). I do not send email contents to Google Analytics.
3. Marketing
- Direct Marketing (email messages):
- I may send you email messages with information about my services, promotions, discount codes, or affiliate links. This will only occur if you give your consent. You can withdraw your consent at any time.
- Social Media:
- If you visit my profiles on social media (e.g., YouTube), I process your data in connection with maintaining these profiles, to inform about my activity and promote services. The basis for this is my legitimate interest (Article 6(1)(f) GDPR).
4. Cookies and Similar Technologies
Cookies are small text files stored on your device. They help facilitate website use, for example, by remembering your preferences.
- Local storage and analytics cookies:
- Your analytics choice is saved in your browser’s local storage for 180 days. Rejecting analytics does not limit use of the website.
- After you accept analytics, Google Analytics stores cookies and receives visit data, including the page URL without query parameters or fragments, and browser and device information. Advertising features are disabled in the website tag. Learn more: How Google uses information from partner sites.
- Managing Cookies:
- You can accept or reject analytics using “Cookie settings”. Withdrawing consent stops measurement and removes Google Analytics cookies accessible to this website. It does not delete previously collected data.
- The site also stores your chosen language in browser local storage (until site data is cleared) and dismissal of the language suggestion in session storage. These settings remember your choices and are not used for analytics.
5. Data Processing Period
Your data is processed for the period necessary to provide the service or fulfill the order, until you withdraw your consent (if required) or effectively object to the processing. The processing period may be extended if it is necessary to establish, assert, or defend claims, as well as when required by law. After this period, your data is irreversibly deleted or anonymized.
Google Analytics cookies (_ga and _ga_*) are configured in the website tag to expire after 180 days without renewal on every visit. This is separate from retention in Google Analytics: current property settings are 2 months for event data and 14 months for user data, with user-data retention reset on new activity. These settings do not apply to most standard aggregate reports.
6. Your Rights
In connection with the processing of your personal data, you have the following rights:
- Right to Information: You can request information about the processing of your data.
- Right of Access: You can receive a copy of the processed data.
- Right to Rectification: You can request the correction or completion of your data.
- Right to Erasure (“right to be forgotten”): You can request the deletion of data if it is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing: You can request the restriction of data processing in specific situations.
- Right to Data Portability: You can receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Right to Object: You can object to the processing of data for direct marketing purposes or other purposes based on my legitimate interest (in this case, with justification).
- Right to Withdraw Consent: If processing is based on your consent, you have the right to withdraw it at any time. This does not affect the lawfulness of processing carried out before the withdrawal of consent.
- Right to Lodge a Complaint: If you believe that the way I process your personal data violates the GDPR or other data protection regulations, you can lodge a complaint with the President of the Personal Data Protection Office in Poland or the relevant authority in your country.
7. Data Recipients
I use providers as needed to operate the site and handle contact: Cloudflare (website hosting, CDN and traffic protection), Hostinger (email), and Google (Google Analytics 4 after consent, and YouTube after you start a video). Accounting and payment providers may receive order data as needed for the relevant service. Provider information: Cloudflare, Hostinger, Google.
8. Data Transfer Outside the EEA
Use of providers’ global infrastructure, in particular Google and Cloudflare, may involve processing outside the EEA, including in the United States. This does not mean all data remains in Poland or the EU. Providers describe transfer mechanisms, including adequacy decisions and standard contractual clauses, in their terms: Google data processing terms and Cloudflare data processing addendum. Contact me for information about the safeguards applicable to your data.
9. Data Security
I take all necessary steps to ensure that your personal data is processed securely – primarily ensuring that only authorized persons have access to your data and only to the extent necessary for their tasks. I require my subcontractors and partners to guarantee the application of appropriate security measures whenever they process your personal data on my behalf.
10. Contact Details
For all matters referred to in this policy, particularly those related to the processing of your personal data, you can contact me via email: [email protected]
Portfolio videos load from YouTube in privacy-enhanced mode (youtube-nocookie.com) only when you click play. Before that, thumbnails are served by this site. Starting a video connects your browser to Google/YouTube and sends technical data such as your IP address. Google Analytics consent is separate from use of the YouTube player.
Updated: 9 October 2026.