Privacy Policy and Personal Data Protection
Effective Date: January 22, 2026
Last Updated: January 22, 2026
§ 1. GENERAL INFORMATION
This Privacy Policy sets out the principles for processing and protecting personal data provided by Users in connection with their use of services offered through the website https://bartoszsergot.com.
The Data Controller is:
Bartosz Sergot
Address: Słowiańska 1/66, 85-163 Bydgoszcz, Poland
Contact:
Email: info@bartoszsergot.com
Website: https://bartoszsergot.com
§ 2. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING
The Controller processes Users’ personal data for the following purposes:
2.1. Service Provision
- Contact inquiries – responding to inquiries submitted via contact form or email (legal basis: Art. 6(1)(f) GDPR – legitimate interest)
- Portfolio presentation – displaying project portfolio and professional information (legal basis: Art. 6(1)(f) GDPR – legitimate interest)
- Service delivery – processing data for potential collaboration or freelance projects (legal basis: Art. 6(1)(b) GDPR – performance of a contract)
2.2. Marketing and Communication
- Newsletter – sending informational and marketing communications to the provided email address (legal basis: Art. 6(1)(a) GDPR – consent of the data subject)
- Direct marketing – presenting offers of services (legal basis: Art. 6(1)(f) GDPR – legitimate interest)
2.3. Legal and Tax Purposes
- Accounting and tax documentation – fulfilling obligations arising from legal regulations (legal basis: Art. 6(1)(c) GDPR)
- Pursuing claims and defense against claims (legal basis: Art. 6(1)(f) GDPR)
2.4. Analytics and Statistics
- Website traffic analysis – using tools such as Google Analytics 4, Google Tag Manager (legal basis: Art. 6(1)(f) GDPR)
- Service improvement – analyzing how the website is used (legal basis: Art. 6(1)(f) GDPR)
§ 3. SCOPE OF PROCESSED DATA
Depending on the purpose, the Controller may process the following personal data:
3.1. Basic Data:
- Name and surname
- Email address
- Phone number (if provided)
- Company name (if applicable)
- Professional information (if provided)
3.2. Technical Data:
- IP address
- Web browser information
- Operating system
- Date and time of website use
- Device information
- How the website is used (visited subpages, time spent on the site)
- Traffic source (where the user came from)
§ 4. DATA RECIPIENTS
Users’ personal data may be transferred to:
- Data processors – companies providing hosting, IT system management, and marketing services
- State authorities – based on applicable legal regulations (e.g., tax office, police, court)
- Legal offices – in case of pursuing claims
- Google LLC – in connection with using Google Analytics 4 and Google Tag Manager
- WordPress hosting providers – for website hosting and maintenance
§ 5. DATA RETENTION PERIOD
Personal data is stored for:
- Contact form data – for the period necessary to process the inquiry, no longer than 2 years from last contact
- Data related to contracts – for 5 years from the end of the year in which the transaction took place (tax obligation)
- Newsletter data – until consent is withdrawn
- Google Analytics data – for 26 months
- Data related to claims – until the statute of limitations expires
§ 6. RIGHTS OF DATA SUBJECTS
Each person whose data is processed has the right to:
- Access to data – obtaining information about processed data and receiving a copy
- Rectification of data – correcting incorrect or incomplete data
- Erasure of data (“right to be forgotten”) – requesting deletion of data when there are no grounds for processing
- Restriction of processing – requesting limitation of data processing in specific cases
- Data portability – receiving data in a structured format or transferring it to another controller
- Object – objecting to data processing based on legitimate interest
- Withdraw consent – at any time, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with the President of the Personal Data Protection Office (UODO)
To exercise your rights, please contact:
Email: info@bartoszsergot.com
§ 7. COOKIES AND TRACKING TECHNOLOGIES
7.1. What are cookies?
Cookies are small text files that are stored on the User’s device while using the website. They serve to remember preferences, analyze traffic, and improve website functionality.
7.2. Types of cookies used:
Necessary cookies
- Required for proper website functioning, session management, and privacy preferences.
Functional cookies
- Remember user preferences (language, region, site settings).
Analytical cookies
- Used to analyze how the website is used (Google Analytics 4).
7.3. Details of analytical tools:
Google Analytics 4 & Google Tag Manager
- Collect anonymous data about website traffic, traffic sources, and user behavior.
- Cookies: _ga, ga*, _gid, _gat
7.4. Cookie management
Users can manage cookies through:
- Browser settings – ability to block or delete cookies
- Cookie banner – preference selection on first visit
- Opt-out tools:
- Google Analytics: https://tools.google.com/dlpage/gaoptout
Note: Disabling some cookies may affect website functionality and prevent use of certain services.
§ 8. DATA SECURITY
The Controller applies appropriate technical and organizational measures to ensure the security of personal data, in particular:
- Data transmission encryption (SSL/TLS)
- Regular backups
- Access restriction to authorized persons only
- Regular system and software updates
- Monitoring of IT system security
- Use of secure hosting services
§ 9. DATA TRANSFERS TO THIRD COUNTRIES
In connection with the use of Google Analytics, data may be transferred to servers located in the United States and other countries. These entities apply appropriate safeguards in accordance with:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions issued by the European Commission
- Certification programs compliant with GDPR requirements
§ 10. OBLIGATION TO PROVIDE DATA
Providing personal data is:
- Voluntary – for contact forms, newsletters, and general inquiries
- Necessary – for executing service contracts (statutory and contractual requirement)
Failure to provide required data prevents the conclusion and execution of a contract.
§ 11. AUTOMATED DECISION-MAKING
The Controller does not use automated decision-making, including profiling, that would produce legal effects or similarly significantly affect Users.
§ 12. CHANGES TO THE PRIVACY POLICY
The Controller reserves the right to make changes to the Privacy Policy. Users will be informed about all changes by posting information on the website’s main page. Changes take effect on the date of publication.
§ 13. FINAL PROVISIONS
In matters not regulated by this Privacy Policy, the provisions of GDPR and other provisions of Polish law shall apply.
This Privacy Policy is available at https://bartoszsergot.com/privacy-policy
CONTACT FOR DATA PROTECTION MATTERS
If you have questions regarding the processing of personal data, please contact:
Contact details:
Email: info@bartoszsergot.com
Website: www.bartoszsergot.com
Correspondence address:
Bartosz Sergot
Słowiańska 1/66
85-163 Bydgoszcz
Poland