About Products Blog Contact
// Legal

Privacy Policy

Last updated: 9 March 2026

Data Controller

The controller of your personal data is:

EntityTomasz Szumski Consulting
NIP5273186354
REGON542969939
VATPL5273186354
AddressWarszawa, Poland
szumski@gopolska.com

What Data We Collect

When you submit our contact form, we collect the following data:

  • Email address (required)
  • Name and surname / company name (provided by you)
  • Phone number (optional)
  • Subject of inquiry (selected by you)
  • Message content (required)
  • Language preference (detected automatically)

When you visit the site, Google Analytics may also collect anonymised technical data — see section 9.

Purpose of Processing

We process your personal data solely for:

  • Responding to your business enquiry
  • Providing consulting, training, or AI platform services
  • Fulfilling legal and accounting obligations
  • Improving our website and understanding visitor behaviour (analytics only)

Legal Basis

We process your data under the following legal bases:

  • Legitimate interest (Art. 6(1)(f) GDPR) — to respond to business enquiries submitted via the contact form
  • Consent (Art. 6(1)(a) GDPR) — for analytics cookies, where your consent is collected via our cookie banner
  • Legal obligation (Art. 6(1)(c) GDPR) — for accounting and tax records where required by Polish law

Data Storage & Transfers

Contact form submissions are delivered via our email infrastructure and stored in our business email account. Data is processed within the European Union.

Google Analytics data is processed by Google LLC. Google provides Standard Contractual Clauses (SCCs) as a safeguard for transfers outside the EEA. You can opt out at any time via our cookie settings.

Retention Period

We retain your personal data for:

  • Up to 3 years from last contact, for enquiry correspondence
  • Up to 5 years for records required under Polish accounting law
  • Until you withdraw consent, for analytics data

Your Rights

Under GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability
  • Object to processing based on legitimate interest
  • Withdraw consent at any time (without affecting prior processing)
  • Lodge a complaint with the Polish supervisory authority: UODO (uodo.gov.pl)

To exercise any right, contact us at szumski@gopolska.com with the subject line "GDPR Request".

Data Sharing

We do not sell or share your personal data for marketing purposes. Data may be disclosed to:

  • Email service providers (infrastructure only, no marketing access)
  • Government or tax authorities, upon lawful request under Polish law

Cookies & Analytics

This website uses two categories of cookies:

  • Essential cookies — store your language preference (EN/PL). No consent required. These do not track you.
  • Analytics cookies — Google Analytics 4, used to understand how visitors use the site (page views, session duration, geography). These are only activated after you accept via the cookie banner.
Google Analytics is configured with IP anonymisation enabled. We do not use Google Analytics for advertising or remarketing. You can withdraw analytics consent at any time by clicking "Cookie Settings" in the footer.

Security

We implement appropriate technical and organisational measures including:

  • SSL/TLS encryption on all data in transit
  • Access limited to the data controller only
  • No third-party marketing access to contact data
  • Regular review of data handling practices

Contact

For any data protection matter, please contact:

Emailszumski@gopolska.com
SubjectGDPR Request
WhatsApp+48 780 752 536

We will respond within 30 days as required by GDPR Art. 12.