Privacy policy
This document explains what data I collect through adriangac.pl, why, and what rights you have.
1. Data controller
The data controller is Adrian Gac. For data matters, email contact@adriangac.pl.
2. What data I process
The data you provide in the contact form or by email: your name, email address, company name, message and, if you select them, your areas of interest and how you heard about me. Providing data is voluntary, but without your name and email address I cannot reply to your inquiry. With your consent I also process data about how you use the site, collected through cookies (sections 8–10).
3. Purpose and legal basis
I process data to answer your inquiry and prepare an offer (Art. 6(1)(b) GDPR), and on the basis of the consent you give in the form (Art. 6(1)(a) GDPR). I use analytics and marketing cookies only on the basis of your consent (Art. 6(1)(a) GDPR), and cookie-free visit statistics on the basis of my legitimate interest in knowing which content is useful (Art. 6(1)(f) GDPR).
4. Retention
I keep data for as long as our correspondence lasts and, if we do not work together, for up to 12 months after the last contact. If we sign a contract, for the period required by tax law.
5. Recipients
Data may be entrusted to the service providers I use for email, website hosting and statistics (Vercel), sending contact form messages (Resend) and, if you consent to cookies, Google and Meta (sections 9 and 10). I do not sell data. If a provider processes data outside the European Economic Area, this is based on a European Commission adequacy decision or standard contractual clauses.
6. Your rights
You have the right to access, rectify, erase, restrict and port your data, to object, and to withdraw consent at any time. You may also lodge a complaint with the Polish data protection authority (UODO).
7. Automated decisions
I do not make automated decisions. If you consent to marketing cookies, Meta may use information about your visit to tailor the ads it shows you.
8. Cookies
Cookies are small files stored in your browser. Necessary: I store your cookie choice in browser storage (localStorage) for 12 months so the consent window does not appear on every visit. Analytics and marketing cookies run only after you consent in the window shown on your first visit. If you do not consent, the site works the same.
9. Google Analytics and Google Tag Manager
With your consent to analytics cookies I use Google Analytics 4, loaded through Google Tag Manager. The provider is Google Ireland Limited. It collects information about pages viewed, traffic source, device, browser and approximate location, without storing the full IP address. It uses the _ga and _ga_* cookies, valid for up to 2 years. I keep Google Analytics data for 14 months.
10. Meta Pixel
With your consent to marketing cookies I use Meta Pixel. The provider is Meta Platforms Ireland Limited. The pixel sends Meta information about pages viewed and form submissions, which lets me measure the effectiveness of ads on Facebook and Instagram and show them to people who visited the site. It uses the _fbp cookie, valid for up to 3 months. I am jointly responsible with Meta for collecting and transmitting this data. Meta then processes it as a separate controller under its own privacy policy.
11. Vercel statistics
Vercel Web Analytics (Vercel Inc.) counts page views without cookies and without storing anything in your browser. It does not identify people or track them across other sites. It runs regardless of cookie consent.
12. Changing or withdrawing consent
You can change or withdraw consent at any time with the Cookie settings button in the site footer or below. Withdrawing consent does not affect the lawfulness of processing before withdrawal. You can also delete cookies in your browser settings.