Privacy policy

1. Data controller

The controller of your personal data is Actum Krzysztof Ploch, registered at ul. Irzykowskiego 3/15, 01-317 Warsaw, Poland, VAT ID PL5222208821, REGON 015269213.

For any matter concerning personal data you can reach us at contact@ploch.ai or by telephone on +48 533 051 519.

2. What data we process

This site has no contact forms and requires no account. We process the following data:

• Correspondence data — if you email or call us: your email address, telephone number, name, and the content of your message.
• Analytics data — if you consent to analytics: the pages you visited, approximate location, device and browser type, and how you arrived at the site.
• Server technical data — IP address and basic request information, recorded automatically in server logs by the hosting provider.

3. Purposes and legal bases

• Replying to your message and handling correspondence — Art. 6(1)(f) GDPR, our legitimate interest in communicating with people interested in our services. Where correspondence leads to a contract, the basis becomes Art. 6(1)(b) GDPR.
• Visit statistics (Google Analytics 4) — Art. 6(1)(a) GDPR, your freely given consent expressed through the consent banner. You may withdraw it at any time.
• Keeping the site secure and working correctly — Art. 6(1)(f) GDPR (server logs).

4. Cookies and analytics

The site uses no marketing or profiling cookies. Until you give consent, no request is sent to Google servers and no analytics cookie is written — we use Google Consent Mode v2 in basic mode, in which all consent signals default to denied.

Every asset needed to render the site — the typeface, the stylesheets and the interface scripts — is served from our own server, so no third-party provider (such as Google Fonts or a content delivery network) is contacted and your IP address is not disclosed to any of them. The only external connection the site can make is the Google Analytics script described below. It loads only where you have consented to analytics — including automatically on later visits, for as long as that consent remains stored in your browser.

Once you consent, the Google Analytics 4 script is loaded and writes the _ga and _ga_<identifier> cookies, which distinguish sessions and users. We do not collect advertising consent (ad_storage, ad_user_data, ad_personalization) and those signals remain denied.

Your choice is stored locally in your browser (localStorage, key ploch-consent) — that record never leaves your device. The consent state itself is, however, communicated to Google through Consent Mode once the analytics script has loaded.

You can change your choice at any time using the Privacy settings button in the site footer. Withdrawing consent stops any data being sent to Google Analytics immediately, without needing to reload the page. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Recipients of the data

Your data may be entrusted to the following categories of recipients:

• Google Ireland Limited and Google LLC — the Google Analytics 4 service, only after you have given consent.
• Hosting provider (GoDaddy) — operation of the server hosting this site.
• Email service provider — handling of email correspondence.

6. Transfers outside the EEA

Using Google Analytics 4 may involve transferring data to the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, and Standard Contractual Clauses approved by the European Commission apply in addition. If you do not consent to analytics, no data is transferred to Google.

7. Retention periods

• Correspondence — for as long as needed to reply and handle the matter, and thereafter until any related claims become time-barred.
• Analytics data — a maximum of 14 months in Google Analytics 4. Withdrawing consent stops further collection and clears the cookies from your browser, but it does not erase data already collected — that remains in Google Analytics until the retention period expires. If you want it deleted sooner, write to us at contact@ploch.ai.
• Server logs — in line with the hosting provider's policy.

8. Your rights

In connection with the processing of your data you have the right to:

• access your data and obtain a copy of it,
• rectify (correct) your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time — for analytics, use the Privacy settings button in the footer.

To exercise these rights, write to us at contact@ploch.ai. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you believe we process your data unlawfully.

9. Provision of data and automated decisions

Providing data is voluntary. Not providing contact details only means we cannot reply to your message. We do not take decisions about you based solely on automated processing, including profiling.

10. Changes to this policy

If the scope of processing changes, we will update this policy and change the date shown at the top of the page. We encourage you to review it periodically.

This English text is a translation provided for convenience. The Polish version at ploch.ai/polityka-prywatnosci/ is authoritative and governs in the event of any discrepancy.

Home