SZUMMAKER · PRIVACY

Privacy Policy

Last updated: 21 October 2026

This policy explains how I process data connected with your use of szummaker.pl, enquiries about working together and booking a call.

1. Data controller and contact

The data controller is Karolina Paduch, trading as Karolina Paduch Marketing, Warsaw, Poland, Polish tax identification number (NIP): 9512491313, operating under the SZUMMAKER brand. For privacy matters, email hello@szummaker.pl.

2. Data I receive

When you email me, contact me through WhatsApp or book a call, I receive the information you provide, such as your name, email address, telephone number, information about your brand, selected appointment time and the content of your enquiry. The exact scope depends on the channel you choose. Please do not send information that is not needed to discuss your project.

The website infrastructure may process technical data such as your IP address, request time, visited URL, browser and device information, and connection errors. This information is used to deliver and secure the website.

3. Purposes and legal bases

• Responding to enquiries and business contact: Article 6(1)(f) GDPR; my legitimate interest is handling correspondence and developing business relationships.
• Preparing an offer at your request, arranging a consultation and entering into or performing a contract: Article 6(1)(b) GDPR. When communicating with a company representative, the basis is Article 6(1)(f) GDPR, namely communication and management of cooperation with that company.
• Accounting and legal obligations: Article 6(1)(c) GDPR, if we work together.
• Website security and establishing, pursuing or defending claims: Article 6(1)(f) GDPR; the legitimate interest is protecting the website and the controller’s rights.

Contacting me does not subscribe you to a newsletter or give consent to marketing unrelated to your enquiry.

4. Service providers and external services

Where necessary, data is handled by service providers: OpenAI, which provides ChatGPT Sites hosting and infrastructure; home.pl, which provides email services; and Google, which handles Calendar bookings and online meetings. Data may also be disclosed to authorised public bodies and to accounting or legal providers where required for our work or the protection of claims.

The WhatsApp button opens the external WhatsApp service, while booking a call opens a Google page. These services are not embedded in this website. Once you visit them, their providers also process data under their own privacy policies. The email button opens your email application.

More information: OpenAI, Google, WhatsApp and home.pl.

5. Processing outside the European Economic Area

Using global hosting services, Google and WhatsApp may involve processing outside the EEA. The location and safeguards depend on the service and the provider’s terms. Transfers that require safeguards take place under mechanisms provided by Chapter V GDPR, such as a relevant adequacy decision or Standard Contractual Clauses, depending on the recipient. Information about safeguards is available from the controller and in the provider documentation linked above. I do not claim that all data is stored exclusively in Poland or the EU.

6. Retention

I keep correspondence relating to enquiries that do not lead to collaboration for up to 12 months after our last contact, unless it is required to establish or defend specific claims. Data connected with ongoing work is retained for the duration of the collaboration and then for the period required by record-keeping laws or until the relevant limitation period expires. As a rule, tax documentation is retained for five years from the end of the year in which the tax payment deadline occurred, subject to statutory exceptions.

Technical data is stored for as long as needed to operate and secure the infrastructure, under the provider’s rules. I do not maintain a separate visitor database for advertising purposes.

7. Your rights

Where provided by the GDPR, you may request access to your data, rectification, erasure, restriction of processing and data portability. You may object to processing based on a legitimate interest. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, email hello@szummaker.pl. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office: uodo.gov.pl.

8. Voluntary provision and automated decisions

Providing contact details is voluntary, but without them I cannot answer your enquiry or handle a booking. Data needed to enter into a contract or complete accounting obligations is required for those purposes. I do not make decisions about website visitors that produce legal or similarly significant effects based solely on automated processing, and I do not conduct advertising profiling on this website.

9. Cookies and policy changes

I do not run Google Analytics, Meta Pixel or other advertising tracking tools in the website code. Fonts and logos are loaded from the website’s own assets. The hosting provider may use essential technical mechanisms to deliver and protect the service. External services opened after a click have their own cookie rules.

If I add analytics, advertising tools or new ways of collecting data, I will update this policy and provide any required information and choices before they are activated.