Hello!

If you’ve landed here, it’s a sure sign that you value your privacy. I understand that completely, which is why I’m handing you a document that sets out, in one place, the rules for processing personal data and for using cookies and other tracking technologies in connection with the operation of the website www.plndesign.com.

First, the formal part: the website is operated by PLN Design Marcin Kieliszek, Przędzalniana 55/2U, 90-347 Łódź, Poland, VAT ID: PL726-247-89-01, REGON: 363992049.

This privacy policy is written as a series of questions and answers. I chose this format to keep the information clear and easy to read. Below you’ll find a table of contents corresponding to the questions I answer in turn.

If you have any questions about this privacy policy, you can contact me at any time by writing to [email protected].

PLNDesign participates in and complies with all IAB Europe Transparency & Consent Framework Specifications and Policies and uses Consent Management Platform No. 92.

You can change your choices at any time by clicking here.

#1: Who is the controller of your personal data?

The controller of your personal data is PLN Design Marcin Kieliszek, Przędzalniana 55/2U, 90-347 Łódź, Poland, VAT ID: PL726-247-89-01, REGON: 363992049.

#2: Whom can you contact about the processing of your personal data?

When implementing data protection in my organisation, I decided not to appoint a Data Protection Officer, as this is not mandatory in my situation. For matters relating to personal data protection and privacy in the broad sense, you can contact me at [email protected].

#3: What information do I hold about you?

Depending on the purpose, I may process the following information about you:

first name and surname,
email address,
phone number,
data contained in email correspondence,
details of orders placed in the online shop,
bank account number,
IP address,
approximate location,
statistics relating to the newsletters you receive,
your preferred email client,
interest in specific topics,
the content of comments / reviews posted on the website.

The scope of the data processed is described precisely for each processing purpose. You will find this information further on in this policy.

In addition, I use tools that collect a range of information about you relating to your use of my website. This includes, in particular:

information about your operating system and web browser,
the subpages you view,
time spent on the website,
navigation between individual subpages,
clicks on individual links,
the source from which you arrived at the website,
your age range,
your gender,
your approximate location, limited to your town or city,
your interests, determined on the basis of your online activity.

This information is referred to later in this privacy policy as “Anonymous Information“.

In my view, Anonymous Information is not in itself personal data, because it does not allow me to identify you and I do not combine it with the typical personal data I collect about you. However, given the strict case law of the Court of Justice of the European Union and the divided opinions among lawyers, as a precaution — in case Anonymous Information is deemed to be personal data — this privacy policy also includes detailed explanations of how this information is processed.

Because Anonymous Information is collected by external tools I use (described in detail later in this privacy policy), it is also processed by the providers of those tools in accordance with their own terms of service and privacy policies.

The providers of these tools also use Anonymous Information to deliver and improve their services, manage them, develop new services, measure advertising effectiveness, protect against fraud and abuse, and personalise the content and ads displayed on their services, websites and apps.

#4: Where do I get your personal data from?

In most cases, you provide it yourself. This happens when you:

register a user account,
place an order,
submit a complaint or withdraw from a contract,
sign up for the newsletter,
post a comment / review,
contact me by email,
follow my social media profiles or interact with content published on social media.

In addition, some information about you may be collected automatically by the tools I use:

the website and newsletter system collect your IP address,
the newsletter system collects information about your activity in relation to the content sent to you in the newsletter, such as email opens, link clicks, etc.,
external tools using cookies (described in detail later in this privacy policy) collect Anonymous Information relating to your actions on the website.

#5: Is your data safe?

I take care to keep your personal data secure. I have analysed the risks associated with each process in which your data is processed and implemented appropriate security and data protection measures. I continuously monitor the state of the technical infrastructure, train staff, review the procedures in place and introduce the necessary improvements. If you have any questions about your personal data, I am at your disposal at [email protected].

#6: For what purposes do I process your personal data?

There is more than one purpose. Below is a list, followed by a more detailed discussion. Each purpose is matched with the relevant legal basis for processing:

managing user accounts – Article 6(1)(b) GDPR,
processing orders – Article 6(1)(b) GDPR,
recovering abandoned carts – Article 6(1)(f) GDPR,
handling complaints or contract withdrawals – Article 6(1)(f) GDPR,
running the newsletter – Article 6(1)(a) and Article 6(1)(f) GDPR,
handling correspondence – Article 6(1)(f) GDPR,
fulfilling tax and accounting obligations – Article 6(1)(c) GDPR in conjunction with the applicable tax laws,
creating an archive in case it becomes necessary to defend, establish or pursue claims – Article 6(1)(f) GDPR,
creating audiences on Facebook – Article 6(1)(f) GDPR,
managing social media – Article 6(1)(f) GDPR,
analytics and statistics using Anonymous Information only – Article 6(1)(f) GDPR,
marketing my own products and services using Anonymous Information only – Article 6(1)(f) GDPR,
ensuring the operation of the YouTube and SoundCloud players, social plugins and Disqus comments using Anonymous Information only – Article 6(1)(f) GDPR.

User account – details

When creating a user account, you must provide the data required to set it up: your email address and a password. Providing this data is voluntary but necessary to create an account.

When editing your account details, you may provide further data, in particular data that may be used when placing orders, such as your first name and surname, residential or business address, Tax ID number and phone number.

If you create an account by linking it to a social media account, then — based on your prior authorisation — I will gain access to certain data held in that social media account (first name and surname, email address, profile picture).

In addition, the system I use to manage user accounts records the IP address from which you registered your account.

You can change the information you provided when registering your user account at any time. However, if you created your account by linking it to a social media account, the data retrieved from that social media service cannot be modified.

The data you provide when creating an account is processed in order to provide you with an electronic service consisting of access to a user account. This service is provided under a contract concluded on the terms set out in the terms of service, which means that the legal basis for processing your personal data in this respect is Article 6(1)(b) GDPR.

The data will be stored for as long as the user account exists and thereafter until the limitation period for claims relating to the user account service expires.

Newsletter – details

When you sign up for the newsletter, you provide your first name and email address. Providing this data is voluntary but necessary to sign up.

In addition, the system used to run the newsletter records the IP address from which you signed up, determines your approximate location and the email client you use, and tracks your actions in relation to the messages sent to you. As a result, I also have information on which messages you opened, which messages you clicked links in, and so on.

The data you provide when signing up for the newsletter is used to send you the newsletter, and the legal basis for processing it is your consent (Article 6(1)(a) GDPR), given when you signed up.

As for the processing of information that does not come from you but is collected automatically by the mailing system, I rely on my legitimate interest (Article 6(1)(f) GDPR), consisting in analysing the behaviour of newsletter subscribers in order to optimise my mailing activities.

You can unsubscribe from the newsletter at any time by clicking the dedicated link in every newsletter message or simply by contacting me.

Even after you unsubscribe, your data will remain in the database in order to identify returning subscribers and to defend against any claims relating to the newsletter, in particular to demonstrate that you gave consent to receive it and when you withdrew that consent. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

You can change the data you provided for the newsletter at any time by clicking the relevant link in every newsletter message or simply by contacting me.

Correspondence – details

When you contact me by email, you naturally provide the personal data contained in your message, in particular your email address and name. Providing this data is voluntary but necessary to get in touch.

In this case, your data is processed in order to communicate with you, and the legal basis for processing is Article 6(1)(f) GDPR, i.e. legitimate interest. After the correspondence ends, the legal basis for processing is also a legitimate interest in the form of archiving the correspondence so that I can demonstrate certain facts in the future (Article 6(1)(f) GDPR).

The content of correspondence may be archived, and I cannot say definitively when it will be deleted. You have the right to request a copy of the history of your correspondence with me (if it has been archived) and to request its deletion, unless archiving it is justified by overriding interests, such as defence against potential claims on your part.

Tax and accounting obligations – details

If I issue an invoice to you, it becomes part of the accounting records, which will be kept for the period required by law. In this case, your personal data is processed in order to fulfil my tax and accounting obligations (Article 6(1)(c) GDPR in conjunction with the applicable tax and accounting regulations).

Archive – details

The description of each processing purpose sets out how long personal data is retained. These periods are often linked to archiving certain data so that I can demonstrate specific facts in the future, reconstruct the course of cooperation with a client or correspondence exchanged, and defend, establish or pursue claims. In this respect, I rely on legitimate interest within the meaning of Article 6(1)(f) GDPR.

Audiences – details

Your email address stored in the newsletter database or the shop database may be sent to Facebook in order to create an advertising audience using that email address.

When this feature is used, the email address is hashed before being sent to Facebook to create the audience.

The email address will be used in a matching process carried out by Facebook.

Facebook does not share the email address with third parties or other advertisers and deletes it promptly after the matching process is complete.

Facebook has implemented processes and procedures to ensure the confidentiality and security of the email address sent to it and of the set of Facebook user IDs making up the audience created using that email address, including through technical and physical safeguards.

Creating a Facebook advertising audience using your email address constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. You can object to your email address being used for this purpose at any time — just write to me at [email protected].

Social media – details

If you follow my social media profiles or interact with content I publish on social media, I naturally see your data that is publicly available on your social media profile. I process this data only within the social media platform concerned and only for the purpose of managing my presence on that platform, which constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Your use of social media platforms is governed by the terms of service and privacy policies of their operators, who provide electronic services to you entirely on their own and independently.

I encourage you to use social media mindfully and to protect your privacy there, in particular by carefully choosing what you make public and managing your privacy settings.

Analytics and statistics – details

I carry out analytics and statistical activities using the tools described in detail later in this privacy policy. Within these analytics tools, I have access to Anonymous Information only.

As mentioned earlier, in my view Anonymous Information is not in itself personal data, because it does not allow me to identify you and I do not combine it with the typical personal data I collect about you. However, given the strict case law of the Court of Justice of the European Union and the divided opinions among lawyers, as a precaution — in case Anonymous Information is deemed to be personal data — this privacy policy also includes detailed explanations of how this information is processed.

I base the processing of Anonymous Information on legitimate interest within the meaning of Article 6(1)(f) GDPR. This legitimate interest consists in creating, reviewing and analysing statistics on user activity on the website in order to draw conclusions that allow the website to be optimised.

I cannot give you access to Anonymous Information about you, because none of the Anonymous Information can be attributed to any specific user. The external tools give us access only to aggregate statistics and information not attributed to specific individuals.

You can, however, object to the processing of Anonymous Information about you by disabling external tools’ cookies in the cookie settings, which you can open via the relevant link in the website footer.

Own marketing – details

I carry out marketing activities using the external tools described in detail later in this privacy policy. Within these marketing tools, I have access to Anonymous Information only.

I base the processing of Anonymous Information on legitimate interest within the meaning of Article 6(1)(f) GDPR. This legitimate interest consists in creating Custom Audiences based on Anonymous Information and targeting ads based on Anonymous Information, as part of marketing my own products and services.

Additional tools – details

I base the processing of Anonymous Information on legitimate interest within the meaning of Article 6(1)(f) GDPR. In this case, the legitimate interest consists in enabling you to use additional features on the website.

#7: How long will I keep your personal data?

Retention periods are specified separately for each processing purpose. You will find this information in the details for each purpose. Most data is deleted once the limitation period for claims has expired.

#8: Who receives your personal data?

I’d venture to say that no modern business can manage without services provided by third parties. I use such services too, and some of them involve processing your personal data. The external service providers involved in processing your personal data are:

the hosting provider, which stores data on its server,
the cloud computing provider, where files that may contain your personal data are stored,
the mailing system provider, where your data is stored if you subscribe to the newsletter,
the CRM provider, where I store your data to streamline customer service and for archiving purposes,
the invoicing system provider, where your data is stored in order to issue invoices,
the accounting firm, which processes your data shown on invoices,
the technical support provider, which gains access to data if technical work concerns areas where personal data is held,
other subcontractors, who gain access to data if the scope of their work requires it.

All the entities listed above process your data under data processing agreements and guarantee an appropriate level of personal data protection.

If necessary, your data may be disclosed to a legal adviser or attorney bound by professional secrecy. This may be necessary when I need legal assistance that requires access to your personal data.

Your personal data may also be transferred to tax offices to the extent necessary to fulfil tax, settlement and accounting obligations. This applies in particular to any returns, reports, statements and other accounting documents containing your personal data.

In addition, where necessary, your personal data may be disclosed to entities, authorities or institutions entitled to access data under the law, such as the police, security services, courts and public prosecutors.

Furthermore, Anonymous Information is accessible to the providers of the tools or plugins that collect it. These providers are independent controllers of the data collected in their tools and may share that data on the terms set out in their own terms of service and privacy policies, over which I have no control.

#9: Do I use profiling? Do I make automated decisions based on your personal data?

I do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

I do use tools that may take certain actions depending on information collected through tracking mechanisms, but I consider that these actions do not significantly affect you, as they do not change your situation as a customer, do not affect the terms of any contract you may conclude, and so on.

Using certain tools, I may, for example, show you personalised ads based on your previous actions on the website or suggest products that may interest you. This is known as behavioural advertising. I encourage you to learn more about behavioural advertising, particularly with regard to privacy. You can find detailed information, along with options for managing your behavioural advertising settings, here.

I would stress that within the tools I use, I have access to Anonymous Information only. This information is stored on the servers of the respective tool providers, and these servers may be located anywhere in the world.

#10: What rights do you have in connection with the processing of your personal data?

The GDPR grants you the following potential rights in connection with the processing of your personal data:

the right to access your data and obtain a copy of it,
the right to rectification (correction) of your data,
the right to erasure (if you believe there are no grounds for your data to be processed, you can request its deletion),
the right to restriction of processing (you can request that processing be restricted to storage only or to activities agreed with you, if you believe I hold inaccurate data or am processing it without grounds),
the right to object to processing (you have the right to object to processing based on legitimate interest; you should indicate the particular situation which, in your view, justifies ending the processing you object to; I will stop processing your data for those purposes unless I demonstrate that the grounds for processing override your rights or that I need your data to establish, pursue or defend claims),
the right to data portability (you have the right to receive, in a structured, commonly used and machine-readable format, the personal data you provided under a contract or on the basis of your consent; you can ask for this data to be sent directly to another entity),
the right to withdraw your consent to the processing of personal data, if you previously gave it,
the right to lodge a complaint with a supervisory authority (if you find that I am processing data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO), Poland’s data protection authority, or another competent supervisory authority).

The rules for exercising these rights are set out in detail in Articles 16–21 GDPR, which I encourage you to read. For my part, I think it’s worth explaining that these rights are not absolute and will not apply to every processing activity involving your personal data.

I would stress that one of the rights listed above is always available to you: if you believe that the processing of your personal data has infringed data protection law, you can lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office).

You can also always request information about what data I hold about you and for what purposes I process it. Just send a message to [email protected]. That said, I have done my best to set out the information you may be interested in comprehensively in this privacy policy. You can also use the email address above if you have any questions about the processing of your personal data.

#11: Do I use cookies, and what exactly are they?

My website, like almost every other website, uses cookies.

Cookies are small pieces of text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by my IT system (first-party cookies) or by third parties’ IT systems (third-party cookies). Certain information may be saved and stored in cookies, which IT systems can then access for specific purposes.

Some of the cookies used are deleted when your browser session ends, i.e. when you close your browser (session cookies). Other cookies remain on your end device and allow your browser to be recognised the next time you visit the website (persistent cookies).

If you’d like to learn more about cookies in general, you can read, for example, this article.

#12: On what basis do I use cookies?

I use cookies on the basis of your consent, except where cookies are necessary to properly provide an electronic service to you.

Cookies that are not necessary for the proper provision of an electronic service remain blocked until you consent to their use. On your first visit to the website, I display a message asking for your consent, together with the option to manage cookies, i.e. to decide which cookies you accept and which you want to block.

Please remember that disabling or restricting cookies may prevent you from using some of the features available on the website and may make it difficult to use this website, as well as many other websites that use cookies. For example, if you block social media plugin cookies, the buttons, widgets and social features on the website may not be available to you.

#13: Can you disable cookies?

Yes, you can manage cookie settings in your web browser. You can block all or selected cookies. You can also block cookies from specific websites. You can also delete previously stored cookies and other site and plugin data at any time.

Web browsers also offer an incognito mode. You can use it if you don’t want information about the pages you visit and the files you download to be saved in your browsing and download history. Cookies created in incognito mode are deleted when you close all incognito windows.

There are also browser extensions that let you control cookies, such as Ghostery. Cookie control may also be provided by additional software, in particular antivirus suites, etc.

In addition, there are online tools that let you control certain types of cookies, in particular to manage behavioural advertising settings collectively.

I also give you the option of controlling cookies directly from my website. I have implemented a dedicated cookie management mechanism that lets you block the cookies you don’t want.

#14: For what purposes do I use first-party cookies?

First-party cookies are used to ensure that the website’s various mechanisms work properly, such as remembering the contents of your cart for a certain time after you add products to it, correctly submitting the forms on the website, handling newsletter forms, etc.

First-party cookies also store information about the cookie settings you have chosen using the cookie management mechanism.

#15: Which third-party cookies are used?

The following third-party cookies are used on the website:

Google Analytics,
Google Ads,
Google AdSense,
Hotjar,
Facebook Custom Audiences,
Facebook Connect and other social plugins,
YouTube.

Details of each of these third-party cookies are set out below.

Google Analytics – details

I use Google Analytics, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. I do so on the basis of legitimate interest, consisting in creating and analysing statistics in order to optimise the website.

To use Google Analytics, a special Google Analytics tracking code has been implemented in the website’s code. The tracking code uses Google LLC cookies relating to the Google Analytics service. You can block the Google Analytics tracking code at any time by installing the browser add-on provided by Google.

Google Analytics automatically collects information about your use of the website. The information collected in this way is usually transferred to and stored on Google servers, which may be located anywhere in the world.

Because IP anonymisation is enabled, your IP address is truncated before being passed on. Only in exceptional cases is the full IP address transferred to Google servers and truncated there. As a rule, the anonymised IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

I would stress that within Google Analytics, I have access to Anonymous Information only.

Google Analytics and Google Analytics 360 have been certified under the independent ISO 27001 security standard. ISO 27001 is one of the most widely recognised standards in the world and certifies that the systems supporting Google Analytics and Google Analytics 360 meet the relevant requirements.

If you are interested in details of how Google uses data from websites and apps that use its services, I encourage you to read this information.

Hotjar – details

I use Hotjar to better understand your needs and to optimise the website for your experience of using it, which constitutes a legitimate interest. The tool is provided by an external entity, Hotjar Limited, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta.

Hotjar records every visitor to the website and makes it possible to replay a video of their movements on the site, as well as to generate heatmaps. Within Hotjar, I do not have access to information that would allow you to be identified, as Hotjar does not record the process of filling in forms. The information I have access to in Hotjar includes, in particular:

information about the operating system and web browser you use,
the subpages you view on the website,
time spent on the website and its subpages,
navigation between subpages on the website,
the source from which you arrived at the website,
where you click with your mouse.

To use Hotjar, a special Hotjar tracking code has been implemented in the website’s code. The tracking code uses Hotjar Limited cookies. The information collected through these cookies is stored by Hotjar in a pseudonymous user profile. Neither Hotjar nor I use this information to identify you.

You can object to Hotjar creating a user profile for you, storing information about your use of my website and using Hotjar cookies here: https://www.hotjar.com/legal/compliance/opt-out.

If you are interested in details of data processing in Hotjar, I encourage you to read Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy.

Google Ads – details

I use the remarketing features of the Google AdWords system operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. I do so on the basis of legitimate interest, consisting in marketing my own products or services.

When you visit my website, a Google remarketing cookie is automatically placed on your device, collecting information about your activity on the website. The information collected in this way allows me to show you ads on the Google network depending on your behaviour on the website. For example, if you view a product, this is recorded by the remarketing cookie, which allows me to show you an ad for that product or any other ad we consider appropriate. The ad will be shown to you on the Google network as you use the internet, browse other websites, etc.

I would stress that when using Google Ads, I use Anonymous Information only.

When using Google AdWords, I can only define the audiences I would like our ads to reach. On this basis, Google decides when and how to show you an ad.

Further processing of information takes place only if you have agreed with Google to link your browsing history to your account and to use information from your Google account to personalise the ads shown on websites. In that case, Google will use your data to create and define target audience lists for cross-device remarketing. To do so, Google temporarily combines the information collected with other data it holds in order to create target audiences.

If you do not want to receive personalised ads, you can manage your ad settings directly with Google: https://adssettings.google.com/.

If you are interested in details of how Google uses data from websites and apps that use its services, I encourage you to read this information: https://policies.google.com/technologies/partner-sites.

Facebook Custom Audiences – details

Within the Facebook Ads advertising system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, I use the Custom Audiences feature to deliver targeted advertising messages to specific groups of users. I do so on the basis of legitimate interest, consisting in marketing my own products or services.

To show you ads personalised to your behaviour on the website, the Facebook Pixel has been implemented on the website; it automatically collects information about your use of the site. The information collected in this way is usually transferred to Facebook servers, which may be located anywhere in the world, in particular in the United States of America (USA).

The information collected by the Facebook Pixel is anonymous, i.e. it does not allow me to identify you. Depending on your activity on the website, you may be placed in a particular audience, but I do not identify the individual people in these audiences in any way.

The Facebook Pixel may track and record, among other things, the following actions:

viewing the content of a specific page,
proceeding to checkout in the shop,
completing a purchase in the shop,
filling in a specific form, e.g. signing up for the newsletter.

Please note, however, that Facebook may combine the information collected with other information about you gathered through your use of Facebook and use it for its own purposes, including marketing. Such activities by Facebook are beyond my control; you can find information about them directly in Facebook’s privacy policy. You can also manage your privacy settings from your Facebook account. You’ll find useful information on this here.

Facebook Connect and other social plugins – details

My website uses plugins, buttons and other social tools, hereinafter collectively referred to as “plugins”, provided by social media platforms such as Facebook, Instagram, LinkedIn and Twitter.

When you view a page containing a plugin from a given social media platform, your browser sends information about the visit to the operator of that platform. Because the plugin is a piece of the social media platform embedded in the page, your browser sends a request to load that platform’s content onto the page.

Plugins collect certain information about you, such as your user ID, the website visited, the date and time, and other information relating to your web browser.

Social media operators use some of this information to personalise how you view my website. For example, when you visit a page with a “Like” button, the social media operator needs to know who you are in order to show you which of your friends also like my page.

The information collected by plugins may also be used by social media operators for their own purposes, such as improving their products, creating user profiles, analysing and optimising their activities, and targeting ads. I have no real influence over how the information collected by plugins is subsequently used by social media operators. You can find details in the terms of service and privacy policies of the individual platforms.

Social media plugins collect information and pass it on to the platform operators even when you browse my website without being logged in to your social media account. In that case, however, your browser sends a more limited set of information.

If you are logged in to one of the social media platforms, its operator will be able to link your visit to my website directly to your profile on that platform.

If you do not want social media platforms to link data collected during your visit to my website directly to your profile on that platform, you must log out of that platform before visiting the website. You can also prevent plugins from loading on the website altogether by using appropriate browser extensions, e.g. script blockers.

In addition, using some plugins may involve publishing certain information on your social media profiles. For example, information about clicking the “Like” button may be visible on your Facebook timeline. And of course, if you share content on your social media using plugins embedded on my website, that share will naturally be visible on your profile.

For details of how social media operators process the information collected by plugins — in particular the purpose and scope of data collection, its further processing and use by the operators, how to contact them, your rights in this respect and the settings available to protect your privacy — please see the privacy policies of the individual service providers:

YouTube – details

My pages include embedded YouTube widgets that let you play videos available on YouTube directly from my pages. YouTube is operated by Google LLC.

Videos are embedded on the website in privacy-enhanced mode. According to information provided by YouTube, this means that no cookies are stored on your device and Google does not collect any information about you until you play a video.

When you play a video, YouTube stores cookies on your device and receives information that you played the video from a specific website, even if you do not have a Google account or are not currently logged in. If you are logged in to your Google account, the service provider will be able to link your visit to my website directly to your account. The purpose and scope of data collection, its further processing and use by Google, how to contact Google, your rights in this respect and the settings available to protect your privacy are described in Google’s privacy policy.

If you do not want Google to link data collected while playing a video directly to your profile, you must log out of your account before playing the video. You can also prevent plugins from loading on the website altogether by using appropriate browser extensions, e.g. script blockers.

The information collected through cookies relating to YouTube videos embedded on my pages is used by Google to ensure the proper and secure operation of the widget, to analyse and optimise the services provided by YouTube, and for personalisation and advertising purposes.

Please remember that when you play videos available on YouTube, you are using electronic services provided by Google LLC. Google LLC is a separate, independent entity providing electronic services to you. You can find details of the rules for using YouTube, including privacy protection, in the documents provided directly by YouTube:

#16: Do I track your behaviour on my website?

Yes, I use Google Analytics, Google AdWords, Hotjar and Facebook Custom Audiences, which involve collecting information about your activity on my website. These tools are described in detail under the question on third-party cookies, so we will not repeat that information here.

#17: Do I show you targeted ads?

Yes, I use Facebook Ads and Google Ads, which allow me to target ads at specific audiences defined on the basis of various criteria such as age, gender, interests, occupation, job, and actions previously taken on our website. These tools are described in detail under the question on third-party cookies, so I will not repeat that information here.

#18: How can you manage your privacy?

The answer to this question can be found in many places in this privacy policy, in the descriptions of individual tools, behavioural advertising, cookie consent, etc. Nevertheless, for your convenience, I have gathered this information in one place once more. Below is a list of ways to manage your privacy:

cookie settings in your web browser,
browser extensions that help manage cookies, e.g. Ghostery,
additional cookie management software,
incognito mode in your web browser,
behavioural advertising settings, e.g. youronlinechoices.com,
the cookie management mechanism on my website,
Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout,
Google Ads Settings: https://adssettings.google.com/,
Facebook Ads Settings: https://www.facebook.com/ads/settings,
Hotjar Opt-out: https://www.hotjar.com/legal/compliance/opt-out

#20: What are server logs?

Using the website involves sending requests to the server on which the website is hosted. Every request sent to the server is recorded in the server logs.

The logs include, among other things, your IP address, the server date and time, and information about the web browser and operating system you use. The logs are recorded and stored on the server.

The data recorded in server logs is not associated with specific people using the website and is not used to identify you.

Server logs serve solely as auxiliary material for administering the website, and their content is not disclosed to anyone other than persons authorised to administer the server.

#21: Is there anything else you should know?

As you can see, the processing of personal data, the use of cookies and privacy management in general are fairly complex subjects. I have done my best to ensure this document gives you as much information as possible on the issues that matter to you. If anything is unclear, if you’d like to know more, or if you simply want to talk about your privacy, write to [email protected].

#22: Can this privacy policy change?

Yes, I may amend this privacy policy, in particular due to technological changes and changes in the law. If you are a registered user, you will receive a message about any change to the privacy policy. In addition, all archived versions of the privacy policy will be linked below.