Privacy policy
Version: v1.0 · August 21, 2026
JackGranatowski.com – Jacek Granatowski · ul. Cegielskiego 6/5, 62-010 Pobiedziska, Poland · NIP 6040020265 · [email protected]
The controller is JackGranatowski.com – Jacek Granatowski (CODE/), address as above. Providing personal data is voluntary but necessary for the purpose concerned. Without that data the relevant service cannot be provided.
1. Purposes, legal bases, and retention
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Website analytics | Art. 6(1)(a) (consent) | up to 14 months |
| Marketing and remarketing | Art. 6(1)(a) (consent) | up to 180 days (6 months) |
| Website security and abuse prevention — CDN, attack protection, form anti-bot | Art. 6(1)(f) (site security, protection against spam and abuse) | up to 12 months |
| Getting in touch, submitting an enquiry (brief) and booking a call | Art. 6(1)(b) (steps taken at your request prior to entering a contract); for enquiries not directed at concluding a contract — Art. 6(1)(f) (responding to your enquiry) | 12 months from the last communication, or until a contract is concluded |
| Clients — performing the contract and billing | Art. 6(1)(b); after the contract ends — Art. 6(1)(c) (tax and accounting retention) and Art. 6(1)(f) (defending against claims) | the term of the contract, then the periods of limitation for claims and of statutory tax and accounting retention |
| Client representatives and contact persons | Art. 6(1)(f) (contract performance, keeping in contact) | as above |
Of client representatives and contact persons we process name, business email, phone and role, obtained from the client rather than from those individuals (Art. 14 GDPR).
2. Recipients and transfers
Personal data may be disclosed to hosting and IT providers, analytics and marketing providers, project management, communication and scheduling tools, accounting and tax advisers, subcontractors bound by confidentiality, and public authorities where required by law.
Some providers process data in the USA, on the basis of the EU-US Data Privacy Framework with standard contractual clauses as a fallback. A copy of the safeguards is available at [email protected].
3. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and where processing rests on consent, the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal. Requests: [email protected].
Right to object. Where processing rests on legitimate interests — site security, the contact form anti-bot check, responding to enquiries not directed at concluding a contract, contact with client representatives, and retaining client records to defend against claims — you may object at any time on grounds relating to your particular situation.
You may lodge a complaint with the President of the Personal Data Protection Office (UODO).
4. Cookies
We use necessary cookies, which require no consent, and analytics and marketing cookies, set only once you consent. The tools setting them are named in the cookie settings on the Website, where you can change or withdraw your consent at any time.
We make no automated decisions producing legal effects concerning you or similarly significantly affecting you (Art. 22 GDPR).