How we process your data

1. Data controller

The controller of your personal data is Marcin Ołdak (MJ.OLDAK). Contact regarding data protection: biuro@mjoldak.pl.

Contact: biuro@mjoldak.pl

2. What data we collect and why

Newsletter

• Email address — to send the newsletter (no more than once per month).
• IP address, user-agent, form path, timestamp — to reliably document consent (GDPR Art. 7(1) — accountability principle).
• Versio of this privacy policy in effect at the moment consent was given.

Legal basis: consent (GDPR Art. 6(1)(a)).

Contact form / pilot projects

• Name, email, phone (optional), problem description — to respond and possibly schedule a call.

Legal basis: pre-contractual measures at the request of the individual (GDPR Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) — responding to an inquiry.

3. How long we retain data

• Newsletter: Until you withdraw consent (clicking the unsubscribe link in the footer of each message, or emailing biuro@mjoldak.pl). Consent log (IP + timestamp + user-agent) retained for 24 months after withdrawal, for evidentiary purposes.
• Contact form: For the period necessary to respond and any subsequent collaboration; no longer than 24 months from the last contact if no agreement was reached.

4. Your rights

You have the right to:

• Access your data (learn what we hold, receive a copy)
• Rectification (if data is inaccurate or outdated)
• Erasure ("right to be forgotten") — when we no longer need the data
• Restriction of processing (e.g., during verification of a dispute)
• Data portability (receiving data in an electronic format)
• Withdraw consent at any time — without affecting the lawfulness of prior processing
• Lodge a complaint with a supervisory authority in your jurisdiction — if you believe processing violates GDPR

To exercise any of these rights — write: biuro@mjoldak.pl. We will respond within 30 days.

5. Who we share data with

Newsletter subscribers' data is stored in Cloudflare D1 (EU region, encryption at rest). Mail delivery via Resend (USA) — the email address is passed to the provider solely for message delivery. Resend is compliant with DPA and Standard Contractual Clauses (SCC).

We do not sell data. We do not pass it to marketing firms, data brokers, or other entities beyond providers essential to operating the newsletter.

6. Cookies and analytics

The site mjoldak.pl uses cookies for technical purposes (Cloudflare load balancing) and analytics.

For visit statistics we use Google Analytics 4 (Google Ireland Limited). GA4 records anonymous traffic data (visited pages, entry source, general engagement) — IP addresses are anonymised. We do not collect identifying data (name, email, phone number) through GA4. Data may be processed on Google servers outside the EU on the basis of Standard Contractual Clauses (SCC). We do not use marketing cookies or third-party ad trackers.

7. Changes to this policy

Every change receives a new version (e.g. 2026-10-19-v2). At the moment you give consent, we record the version you accepted — so it is clear exactly what you agreed to.

Active newsletter subscribers are notified of changes by email.