Privacy policy

The controller of your personal data is Kamil Nawrot, running a sole proprietorship trading as Netizo, ul. Wiosny Ludów 12 lok. 8, 63-600 Kępno, Poland, tax ID (NIP) 6192060508, REGON 527974955 (“Netizo”, “we”).

For anything about your personal data, email kontakt@netizo.pl, call +48 884 343 924 or write to the address above. We have not appointed a data protection officer, as we are not required to.

This policy covers netizo.pl in Polish and English. For clients who have signed a contract with us, the terms of that contract apply to their data as well.

Filling in a form is voluntary, but we can’t reply without the fields marked as required. Every submission also records the language of the site it came from, so we can answer in the same language.

• Quick message: name, email, subject and message. We reply to your message. Legal basis: our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR) and, when you ask about working with us, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Project brief: your answers about the project (type, features, industry, design, timeline, technologies, budget, notes), your name and email and, if you provide them, phone, company, job title, website, how you heard about us and how you prefer to be contacted. We prepare a quote and contact you about it. Legal basis: steps before entering into a contract (Art. 6(1)(b) GDPR).
• We’ll call you back: your phone number. We call you back to talk about your request. Legal basis: Art. 6(1)(b) GDPR or, when the call isn’t about working with us, Art. 6(1)(f) GDPR.
• Newsletter: your email address. We send the newsletter at most once a month. Legal basis: the consent you give by signing up (Art. 6(1)(a) GDPR). You can unsubscribe at any time by emailing kontakt@netizo.pl.
• Partner program application: your name, email, who you are (e.g. an agency or a freelancer), who you want to refer and, if you provide it, your phone number; we also record which version of the program terms was accepted with it. We review the application and, once it is accepted, run your participation in the program and pay your commissions. Before the first payout, we ask by email for your bank account number and, if you don’t run a business, your address, PESEL number and tax office. Legal basis: entering into and performing the contract formed by the program terms (Art. 6(1)(b) GDPR) and, for the tax details, a legal obligation (Art. 6(1)(c) GDPR).

We don’t store your IP address or browser details with a submission. Your IP address only protects the forms from spam: we count how many submissions came from it within a minute.

We use Google Analytics 4 to see which pages people read and where visitors come from. It runs only after you accept analytics cookies in the banner (Art. 6(1)(a) GDPR). Until then, the Google script isn’t loaded at all and Google Consent Mode stays set to denied.

With your consent, Google Analytics collects, among other things, the pages you visit and how long you stay, how you got here (e.g. a search engine or a link), your device type, operating system and browser, your approximate location (country or city) and an identifier stored in a cookie. Google Analytics 4 doesn’t store IP addresses. We only look at aggregate statistics and never combine them with form data.

The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); data may also reach Google LLC in the USA. We keep Google Analytics data for no longer than 14 months. You can withdraw consent at any time with the “Change cookie settings” button in section 4.

We don’t use session recording or heatmap tools (such as Microsoft Clarity), advertising pixels (Meta, Google Ads, TikTok) or remarketing.

Cookies are small files a website stores in your browser. Essential cookies are set without consent, because without them the site wouldn’t work properly or remember your choices. Analytics cookies are set only after you consent (Art. 399 of the Polish Electronic Communications Law). Here is the full list:

We also keep the theme you picked in your browser’s storage (localStorage, key appearance). Cloudflare, which protects the site, may set technical cookies to tell people from bots (e.g. __cf_bm, cf_clearance); they aren’t used for tracking.

You can change or withdraw your consent at any time: the button below clears your saved choice and shows the banner again. Once you withdraw consent, Google Analytics stops loading, and you can delete any _ga cookies already set in your browser. You can also block cookies in your browser settings; without the essential ones, parts of the site may not work.

The site and its database run on a hosting company’s server, which stores data on our behalf under a data processing agreement. Traffic to the site goes through Cloudflare (Cloudflare, Inc., USA), which speeds it up and protects it from attacks; to do so, it processes your IP address and the technical details of each request.

The server logs technical details of visits: IP address, date and time, page address, response code and browser name. We use them only to diagnose errors and keep the site secure (Art. 6(1)(f) GDPR) and keep them briefly, usually up to 30 days, unless they are needed to investigate an incident. For the length of a session (up to 2 hours of inactivity) we also store your IP address and browser name with the session identifier.

Fonts and images load from our own server, so your browser doesn’t connect to Google Fonts. The links to our social media profiles are plain links that don’t load any scripts from those services. Once you follow one, that service’s privacy policy applies.

We don’t sell data or share it with other companies for their marketing. Only these may receive it:

• the hosting company whose server runs the site and the database;
• Cloudflare, Inc.: speeding up and protecting the site;
• Google Ireland Limited and Google LLC: Google Analytics statistics, only with your consent (section 3);
• the email and phone providers we reply and call through;
• our accountants and lawyers, if we sign a contract or need to pursue claims;
• public authorities, when the law requires it.

Google LLC and Cloudflare, Inc. are based in the USA, so data may leave the European Economic Area. Such transfers rely on the European Commission’s adequacy decision of 10 July 2023 for the EU-US Data Privacy Framework (for companies certified under it) or on standard contractual clauses approved by the Commission (Art. 45 and 46 GDPR). Email kontakt@netizo.pl for a copy of these safeguards.

• Quick message, brief and callback request: up to 12 months after our last contact about it. If we sign a contract, the data becomes part of its records: we keep it for the duration of the contract, then until claims expire and for as long as tax law requires.
• Partner program application: up to 12 months after you apply if we don’t accept it. We keep a partner’s data for as long as they take part in the program and commissions are settled, then until claims expire; settlement records for as long as tax law requires.
• Newsletter: until you unsubscribe or withdraw consent.
• Google Analytics: no longer than 14 months.
• Server logs: usually up to 30 days.
• Cookies: as listed in the table in section 4.

We keep data longer only when it is needed to establish, pursue or defend legal claims, and only to that extent.

At any time, you can:

• access your data and get a copy of it (Art. 15 GDPR);
• correct or complete it (Art. 16);
• have it erased (Art. 17);
• restrict its processing (Art. 18);
• take the data we process based on consent or a contract to another provider (Art. 20);
• object to processing based on our legitimate interest (Art. 21);
• withdraw your consent to the newsletter or analytics; this doesn’t affect the lawfulness of processing before you did.

Email kontakt@netizo.pl. We will reply without undue delay, within a month at the latest, free of charge. We may ask for information that confirms the request comes from you.

You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your own EU country.

We don’t make decisions about you based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you (Art. 22 GDPR). We only look at Google Analytics statistics in aggregate.

We update this policy when the way we process data changes, for example when we add a form or a tool. The current version is always on this page, with the date it took effect. We will email newsletter subscribers about significant changes that affect them. How you can use the site is set out in our terms of service.