Last updated: September 30, 2026

This Privacy Policy explains how personal data is collected and used when you visit miro-szymanski.eu or contact me through it. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is Miro Szymanski Consulting (Mirosław Szymański). For any question about your personal data, or to exercise your rights, email contact@miro-szymanski.eu.

2. What data I collect and why

Contact form. When you send a message, I collect your first and last name, email address and the content of your message. I use this only to reply to your enquiry and, if you wish, to arrange a call or prepare an offer. Legal basis: steps taken at your request before entering into a contract, and my legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).

Blog comments. If you comment on an article, the name, email address and comment you submit are stored, together with your IP address and browser user agent to help detect spam. Your comment and name are shown publicly. Legal basis: your consent and my legitimate interest in running and protecting the blog (Art. 6(1)(a) and (f) GDPR).

Server logs. Like most websites, the server automatically records technical data such as your IP address, browser type, date and time of access and the pages requested. This is needed to deliver the site securely and to diagnose problems. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

I do not use your data for automated decision-making or profiling, and I do not sell it.

3. Cookies

This website uses only a small number of cookies:

  • Necessary cookies: remember your cookie consent choice and keep the site working securely. These cannot be switched off.
  • Comment cookies: if you choose to, your name and email are saved for one year so you do not have to re-enter them when commenting again.
  • Preference cookies: may remember your language choice.

No analytics or advertising cookies are used at present. If that changes, they will only be set after you give consent in the cookie banner. You can change or withdraw your consent at any time using the cookie settings link on the site, or by deleting cookies in your browser.

4. Who your data is shared with

Your data is only shared with service providers that help run this website, acting on my instructions:

  • the hosting provider that stores the website and its data;
  • the email service used to deliver contact form messages;
  • Gravatar (Automattic Inc.), which may receive an anonymized hash of your email address if you comment, to display a profile picture. See Automattic’s privacy policy.

Some providers may process data outside the European Economic Area. Where this happens, the transfer is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

5. How long data is kept

  • Contact form messages: for as long as needed to handle your enquiry, and no longer than 3 years after our last contact, unless we start working together (then as long as required by law, for example for accounting).
  • Blog comments: until you ask for them to be removed, or the article is taken down.
  • Server logs: typically up to 30 days.
  • Cookie consent choice: up to 12 months.

6. Your rights

Under the GDPR you have the right to:

  • access your personal data and receive a copy of it;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to processing, including processing based on legitimate interest;
  • data portability;
  • withdraw consent at any time, without affecting processing that took place before withdrawal.

To exercise any of these rights, email contact@miro-szymanski.eu. I will reply within one month.

You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl). You may also contact the authority in your own EU country.

7. Is providing data required?

No. Providing your data is voluntary, but without your name and email address I cannot reply to your message.

8. Security

The website uses an encrypted (HTTPS) connection, and access to the data is limited to what is needed to answer you and run the site.

9. Changes to this policy

This policy may be updated from time to time, for example when new tools are added to the website. The current version is always available on this page, with the date of the last update shown at the top.