Privacy policy
This policy explains what personal data I collect through the website https://efekto-reklama.pl, including the blog at https://efekto-reklama.pl/blog (together: the "Website"), why I collect it, how long I keep it and what rights you have. I've tried to keep it plain and readable.
1. Data controller
The controller of your personal data is:
Adam Staniszewski, running a sole proprietorship under the business name AS INVESTMENTS Adam Staniszewski (trading as Efekto), ul. Stefana Batorego 7, 09-200 Sierpc, Poland.
Tax ID (NIP): 7761706786, REGON: 388397933. Registered in the Polish Central Register and Information on Economic Activity (CEIDG).
Contact for all matters related to personal data:
- email: kontakt@efekto-reklama.pl
- phone: +48 665 062 711
I process personal data in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR),
- the Polish Personal Data Protection Act of 10 May 2018,
- the Polish Act on Providing Services by Electronic Means of 18 July 2002,
- the Polish Electronic Communications Law of 12 July 2024.
2. What data I collect and why
Contact form
I collect your name, email address, optionally your phone number, and the content of your message.
Purpose: to reply to your enquiry and, if relevant, prepare a quote.
Legal basis: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (my legitimate interest in handling enquiries).
Free audit form
I collect the address of your website, your email address and optionally your phone number.
Purpose: to manually prepare a visibility report for your website, send it to the email address you provide (usually within 24 hours) and get in touch about the report. Submitting the form does not trigger any automatic crawling or analysis of your website - I prepare the audit myself based on publicly available information.
In the email with your report I may briefly mention that I can help you implement the recommendations. I do not send separate marketing messages or newsletters without your explicit consent.
Legal basis: Article 6(1)(b) GDPR (providing the service you requested) and Article 6(1)(f) GDPR (my legitimate interest in contacting you about the report).
Data from both forms is sent directly to my email address. The Website does not store it in any database.
Providing your data in either form is voluntary, but without an email address I cannot reply or send the report.
Phone and email contact
If you call or email me directly, I process the data you share (e.g. your name, phone number, email address, the content of the conversation or message) to communicate with you.
Legal basis: Article 6(1)(b) and (f) GDPR.
Working together and invoicing
If we decide to work together, I process the data needed to provide the service, issue invoices and keep accounting records.
Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (obligations under tax and accounting law).
Technical data
The server keeps standard logs: IP address, date and time of the request and browser type. The forms have a hidden field that people never see, which filters out submissions sent automatically by bots.
Purpose: Website security, spam protection and troubleshooting.
Legal basis: Article 6(1)(f) GDPR.
Establishing, pursuing or defending legal claims
Legal basis: Article 6(1)(f) GDPR.
3. Analytics and advertising
Google Analytics 4
With your consent, I use Google Analytics 4 to see how many people visit the Website, where they come from and which pages they read. This may include a truncated IP address, device and browser information, approximate location (country, city), pages visited, time on site and clicks on selected buttons.
Legal basis: Article 6(1)(a) GDPR (your consent given in the cookie banner).
I use Google Consent Mode v2. Until you give consent, analytics cookies stay switched off.
Fonts
Fonts are stored on the Website's own server and loaded locally. Your browser does not connect to Google or any other font provider, so your IP address is not passed on to anyone.
Google Search Console
I use Google Search Console to check how the Website performs in Google search results. It does not set cookies on the Website and only gives me aggregated statistics (e.g. the search phrases people use to find the Website), with no way of identifying individual people.
Advertising tools
The Website may use advertising tools from Google (Google Ads) and Meta (Facebook, Instagram) to measure campaign performance and show ads to people who have visited the Website (remarketing). These tools only run if you consent to marketing cookies in the banner.
Legal basis: Article 6(1)(a) GDPR (your consent).
4. Cookies and browser storage
The Website uses cookies and browser storage (localStorage and sessionStorage). I use three categories:
Necessary - required for the Website to work, e.g. remembering your cookie banner choices, your accessibility panel settings (text size, contrast, colours), whether the preloader has already been shown in this session, and the choice you made in the site guide. These do not require consent. Settings kept in browser storage never leave your device.
Analytics - Google Analytics 4. Only active after you give consent.
Marketing - Google and Meta advertising tools. Only active after you give consent.
You can change your choices at any time using the "Cookie settings" link in the Website footer. You can also block and delete cookies in your browser settings, but disabling necessary cookies may stop some parts of the Website from working properly.
Blog
The blog is part of the Website, so the same rules and the same consent banner apply there as on the rest of the Website.
Projects shown in frames
The portfolio section displays my clients' websites in frames. When they load, your browser connects to those websites' servers, and they may set their own cookies and show their own consent banners under their own privacy policies. I have no control over what data those websites collect.
5. Who I share data with
I do not sell your data and I do not pass it on to other companies for their own marketing. Your data may only go to parties that help me run the Website and my business:
- my hosting and domain email provider (vh.pl),
- Google (Gmail, to which messages sent to kontakt@efekto-reklama.pl are forwarded, as well as Google Analytics, Google Search Console and - once enabled - Google Ads),
- Meta Platforms Ireland Ltd. (advertising tools - only with your consent, if enabled),
- my accounting office,
- IT service providers and legal advisers, where their help is needed.
I may also disclose data to public authorities entitled to receive it under the law (e.g. courts, tax authorities) if they request it.
6. Transfers outside the European Economic Area
Using Google and Meta services may involve transferring data to the United States. Such transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
7. How long I keep data
- contact form enquiries and correspondence, if we don't end up working together - up to 12 months from the last contact,
- audit form data, if there is no further contact - up to 12 months from sending the report,
- data related to working together - for the duration of the cooperation, then for the period required by tax law (as a rule, 5 years from the end of the year in which the tax obligation arose) and until any claims become time-barred,
- Google Analytics data - up to 14 months,
- data processed on the basis of consent - until you withdraw it,
- server logs - for the period set by the hosting provider, usually a few weeks.
8. Your rights
You have the right to:
- access your data and receive a copy,
- have your data corrected,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on my legitimate interest,
- withdraw your consent at any time (this does not affect the lawfulness of processing before withdrawal).
To exercise your rights, email kontakt@efekto-reklama.pl or call +48 665 062 711. I will reply without undue delay and no later than within one month.
You also have the right to lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl. If you live in another EU country, you can also contact the data protection authority in your country.
9. Social media
I run Efekto profiles on Facebook and Instagram. If you message me there or react to my posts, I process your data to the extent needed to talk to you and promote my business. The privacy rules of those platforms also apply.
10. Security
The Website runs over an encrypted connection (HTTPS), the forms are protected against bots, and access to my mailbox and hosting panel is secured. I only work with data processors under agreements or terms that guarantee the protection of your data.
11. Changes
If I change how I process data, I will update this page and the date at the top.