PLGet in touch

Documents

Privacy policy

How I process personal data and which cookies the semurai.pl website uses.

This is an English translation for convenience; the Polish version prevails in case of discrepancies.

This privacy policy sets out the rules under which we process information about you, including personal data and cookies.

1. General information

  1. This policy applies to the website operating at the URL: semurai.pl
  2. The operator of the website and the controller of personal data is: Tomasz Stopka, running a business under the name Tomasz Stopka SEMURAI, ul. Rotm. Witolda Pileckiego 20/33, 32-005 Niepołomice, Poland, Tax ID (NIP) 6792982481, REGON 360972550.
  3. The operator’s contact email address: tomek@semurai.pl
  4. The operator is the controller of your personal data in respect of data provided voluntarily on the website.
  5. The website uses personal data for the following purposes:
    • Running the comment system – on the basis of the Controller’s legitimate interest in enabling discussion under articles and protecting against spam (Article 6(1)(f) GDPR)
    • Handling enquiries sent through forms and correspondence – to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and in the Controller’s legitimate interest in replying to messages (Article 6(1)(f) GDPR)
    • Providing ordered services – to perform a contract (Article 6(1)(b) GDPR)
    • Invoicing, accounting and tax records – to comply with legal obligations (Article 6(1)(c) GDPR)
    • Debt collection and establishing, exercising or defending legal claims – in the Controller’s legitimate interest (Article 6(1)(f) GDPR)
    • Presenting offers or information – in the Controller’s legitimate interest in marketing its own services (Article 6(1)(f) GDPR)
    • Statistical analysis of website traffic using cookies (Google Analytics, Microsoft Clarity) – only on the basis of your consent (Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law)
  6. The website obtains information about users and their behaviour in the following ways:
    1. Through data entered voluntarily in forms, which is entered into the Operator’s systems.
    2. By storing cookie files (“cookies”) on end devices.

2. Selected data protection methods used by the Operator

  1. Places where you log in or enter personal data are protected at the transmission layer (SSL certificate). As a result, personal data and login details entered on the site are encrypted on the user’s computer and can only be read on the destination server.
  2. User passwords are stored in hashed form. The hash function works one way – it cannot be reversed, which is the current standard for storing user passwords.
  3. The Operator periodically changes its administrative passwords.
  4. To protect data, the Operator makes regular backups.
  5. An important element of data protection is regularly updating all software used by the Operator to process personal data, which in particular means regular updates of software components.

3. Hosting

  1. The website is hosted (technically maintained) on the servers of the hosting provider: MyDevil (mydevil.net, ADMIN.NET.PL)

4. Your rights and additional information on how data is used

  1. In some situations the Controller has the right to share your personal data with other recipients if this is necessary to perform a contract concluded with you or to fulfil the Controller’s obligations. This applies to the following groups of recipients:
    • persons authorised by us, employees and associates who need access to personal data to perform their duties,
    • the hosting company,
    • an accounting office,
    • companies handling email mailings,
    • companies handling SMS messages,
    • companies the Controller works with on its own marketing,
    • couriers,
    • insurers,
    • law firms and debt collectors,
    • banks,
    • payment operators,
    • public authorities.
  2. Your personal data is processed by the Controller for no longer than necessary to carry out the related activities specified in separate regulations (e.g. on accounting). Marketing data will not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • access to personal data concerning you,
    • its rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. Where processing is based on your consent (e.g. statistics cookies), you may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal. The easiest way is the “Cookie settings” link in the website footer.
  5. You have the right to object to the processing of your personal data based on the Controller’s legitimate interest (Article 6(1)(f) GDPR); however, the right to object cannot be exercised where there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  6. You may lodge a complaint about the Controller’s actions with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
  7. Providing personal data is voluntary, but it is necessary to reply to your enquiry, publish a comment, or conclude and perform a contract.
  8. You are not subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).
  9. Some data (e.g. statistical data, IP address) may be transferred to service providers based in the USA: Google LLC (Google Analytics, reCAPTCHA), Microsoft Corporation (Microsoft Clarity) and Automattic Inc. (Jetpack – statistics, backups and image delivery via CDN; Akismet; Gravatar – profile pictures next to comments). The transfer takes place on the basis of the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework), which these providers have joined, or standard contractual clauses.

5. Information in forms

  1. The website collects information provided voluntarily by the user, including personal data, if provided.
  2. The website may record information about connection parameters (timestamp, IP address).
  3. Data provided in a form is processed for the purpose resulting from the function of that form, e.g. handling a service request or business contact, registering services, etc. In each case the context and description of the form clearly state what it is for.
  4. The contact form in the form of an enquiry wizard collects: first name, email address, optionally company name, phone number and website address, as well as answers to questions about the scope, timing and budget of the service. I process this data to reply to the enquiry and prepare an offer (Art. 6(1)(b) GDPR – steps taken at your request before entering into a contract) and to contact you (Art. 6(1)(f) GDPR).
  5. Based on the answers in the wizard, the system automatically prepares an internal summary of the enquiry and a draft reply for me. It makes no decisions about you – I prepare the reply and the offer personally. Form data is not passed to external artificial intelligence tools.
  6. After submitting the form you will receive an email with a confirmation and a summary of your answers. I keep wizard submissions in the website’s admin panel for as long as needed to handle the enquiry, and no longer than 12 months from the last change – after that they are deleted automatically. If we conclude a contract, I continue to process the data in accordance with the law (e.g. accounting regulations).
  7. I keep submissions from the contact form (on the Polish home page and in the English version of the website) in the website’s admin panel for no longer than 12 months from submission – after that they are deleted automatically. I keep comments together with the name and email address for as long as the comment is published under the article, or until a successful objection or a request for deletion.

6. Administrator logs

  1. Information about user behaviour on the website may be logged. This data is used to administer the website.

7. Relevant marketing techniques

  1. The Operator uses statistical analysis of website traffic through Google Analytics 4 (Google LLC / Google Ireland Ltd.). Google Analytics cookies are stored only after you give consent in the cookie banner; without consent Google receives only anonymous cookieless signals (Consent Mode). More information: Google Privacy Policy.
  2. The Operator uses Microsoft Clarity (Microsoft Corporation) – a tool that creates heatmaps and anonymous session recordings that help improve the site. Clarity runs only after you consent to statistics cookies. Data and passwords typed into forms are not recorded. More information: Microsoft Privacy Statement.
  3. The Operator uses Jetpack Stats (Automattic Inc.), which count page views in aggregate, without profiling users.
  4. The contact form is protected by Google reCAPTCHA, and forms and comments by the Akismet anti-spam service (Automattic Inc.). These services may process your IP address and browser information solely to protect against spam and abuse.

8. Information about cookies

  1. The website uses cookies.
  2. Cookies are IT data, in particular text files, which are stored on the end device of the website’s User and are intended for using the website’s pages. Cookies usually contain the name of the website they come from, how long they are stored on the end device and a unique number.
  3. The entity placing cookies on the User’s end device and accessing them is the website operator.
  4. Cookies are used for the following purposes:
    1. maintaining the website user’s session (after logging in), so the user does not have to re-enter their login and password on every page;
    2. achieving the purposes set out above in the section “Relevant marketing techniques”;
  5. The website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the User’s end device until they log out, leave the website or close the software (web browser). Persistent cookies are stored on the User’s end device for the time specified in the cookie parameters or until the User deletes them.
  6. Web browsing software (a web browser) usually allows cookies to be stored on the User’s end device by default. Website users can change these settings. The web browser lets you delete cookies. Cookies can also be blocked automatically. Detailed information is available in your web browser’s help or documentation.
  7. Restricting the use of cookies may affect some features available on the website.
  8. Cookies placed on the User’s end device may also be used by entities cooperating with the website operator, in particular: Google (Google Analytics, reCAPTCHA), Microsoft (Microsoft Clarity) and Automattic (Jetpack, Akismet) – to the extent described in section 7.

9. Managing cookies – how to give and withdraw consent in practice

  1. On your first visit we display a banner in which you can accept or decline statistics cookies (Google Analytics, Microsoft Clarity). Without your consent they are not stored. You can change your decision at any time by clicking the Cookie settings link in the site footer. Cookies necessary for the site to work (e.g. remembering your decision, form protection) do not require consent.
  2. If a user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may make it difficult, and in extreme cases impossible, to use websites.
  3. To manage cookie settings, choose the web browser you use from the list below and follow the instructions:Mobile devices: