Privacy policy

Effective 13 October 2026

1. Who is the data controller

The controller of your personal data is me, Marek Ryguła, operating a sole proprietorship registered in Poland as SAMIL Marek Ryguła.

I have not appointed a Data Protection Officer. For anything related to your data, write to me directly at info@samil.pl.

2. What data I process, why, and on what legal basis

Providing data in the form is voluntary. Without your name, email address and a description of the issue, the form won't send and I can't reply. The store URL is optional. Consent to visitor statistics is voluntary too - the site works the same without it.

I don't make decisions about you based solely on automated processing, including profiling.

3. How long I keep data

If you validly request erasure or object to processing, I'll delete the data sooner, unless I need to keep it because of legal claims or a legal obligation.

4. Who receives your data

I don't sell your data or pass it to other companies for marketing.

Some data is processed on my behalf by service providers I use for the site and the form. I have a data processing agreement (Art. 28 GDPR) with each of them, so they act only on my instructions.

I don't currently use Google Analytics for advertising. If that changes, I'll update this policy and ask for separate consent.

Public authorities may also receive data where the law requires it.

5. Transfers outside the European Economic Area

Cloudflare is based in the USA. I rely on European Commission Implementing Decision (EU) 2023/1795, which finds an adequate level of protection under the EU-US Data Privacy Framework, to the extent the provider is certified under it. The Cloudflare agreement also includes the Standard Contractual Clauses approved by the European Commission (Decision 2021/914), which apply if that certification lapses.

If you consent to visitor statistics, Google Ireland Limited may transfer Google Analytics data to Google LLC in the USA. Google relies on the same EU-US Data Privacy Framework decision, with Standard Contractual Clauses as a fallback. Google uses your IP address on servers in the European Union to work out an approximate location, then discards it without storing it.

The Commission's Data Privacy Framework decision has been challenged, and the case is pending before the Court of Justice of the EU. If the legal basis for transfers changes, I'll update this policy.

To get a copy of the safeguards in place, email info@samil.pl.

6. Your rights

You have the right to:

• access your data and get a copy of it,
• have inaccurate data corrected,
• have your data erased,
• restrict processing,
• data portability for data I process under a contract or with your consent.

Right to object. You can object at any time, on grounds relating to your particular situation, to processing based on my legitimate interest (Art. 6(1)(f) GDPR). I'll then stop, unless I can show compelling legitimate grounds or need the data to establish, exercise or defend legal claims.

Withdrawing consent. You can withdraw your consent to visitor statistics at any time, as easily as you gave it: use the cookie icon in the bottom-left corner of the screen or the "Cookie settings" link in the footer of every page. Withdrawal doesn't affect the lawfulness of processing carried out before you withdraw it.

To exercise any of these rights, email info@samil.pl. I'll reply without undue delay and within one month at the latest.

7. Complaints to a supervisory authority

If you believe I process your data unlawfully, you can lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live or work (Art. 77(1) GDPR). In Poland, where my business is registered, this is the President of the Personal Data Protection Office (UODO, uodo.gov.pl).

8. Security

• The connection to the site is encrypted (HTTPS).
• The form script doesn't store messages on the web server and doesn't store IP addresses (the IP address only reaches the server logs described in section 2). It passes the message straight on for delivery to my mailbox.
• The site doesn't load fonts, scripts or embedded content from third-party servers. The only exception is the Google Analytics script, and only after you consent (section 9).

9. Cookies and browser storage

Cookies and browser storage (localStorage) are small files and entries a site saves on your device. Under Article 399 of the Polish Electronic Communications Law, which implements Article 5(3) of the EU ePrivacy Directive, without your consent I save only the strictly necessary ones, which remember your theme and your cookie choice. Visitor statistics need your consent.

The Google Analytics script loads only after you click "Accept all" or switch analytics on in the cookie settings and save your choices. Without consent, Google receives no data from this site. With JavaScript turned off, the script doesn't load either.

You can change your choice at any time using the cookie icon in the bottom-left corner of the screen or the "Cookie settings" link in the footer. When you withdraw consent, I delete the Google Analytics cookies from your browser, the page reloads once and the Google script no longer loads.

10. Links to other sites

The link to LinkedIn and other links to external sites are plain links. Until you click them, nothing is passed to those services. Once you do, their own privacy policies apply.

11. Changes to this policy

I update this policy when the way I process data changes, for example when I add a tool or change a provider. The current version is always at this address, with its date at the top.

12. Contact

For anything about your personal data: info@samil.pl, or by post: SAMIL Marek Ryguła, ul. Słoneczna 16c, 43-243 Wisła Wielka, Poland. The rules for using the contact form are set out in the Contact form terms.