Privacy Policy.

The controller of personal data processed through this website (brandowy™) is:

In this policy, “I” and “me” refer to the controller. For any question about your data, or to exercise your rights, write to hello@brandowy.pl.

Depending on how you use the website, this may include:

• Contact enquiries: your name, email address, phone number (optional), company or project name (optional), the scope you select (optional) and the content of your message.
• Email correspondence: your email address, name and anything you choose to include when you write to me directly.
• Technical data: when you open the website, the hosting infrastructure processes data such as your IP address, browser and device type, the requested address and the time of the request, typically in server logs.
• Analytics data: only if you accept analytics (see section 04).

The website has no user accounts, no newsletter and no payments.

When you send the contact form, the details you enter are used to handle your enquiry. You can also write to me directly at hello@brandowy.pl.

I use the data you send, whether through the form or by email, to:

• reply to your enquiry;
• communicate with you about your project;
• prepare a possible cooperation, such as a scope or a proposal.

Providing this data is voluntary, but without your name, an email address and a message I cannot reply. Your phone number is optional; if you give it, I may use it to reply or to arrange a call about your enquiry.

The website is prepared to use Google Analytics 4 to understand, in aggregate, how it is used: which pages are visited, how visitors arrive, and what device, browser and approximate location (derived from the IP address) they have.

• Analytics are optional and start only after you choose Accept. Before you decide, and if you choose Essential only, the Google Analytics script is not loaded at all.
• Analytics also run only once a Google Analytics property is connected to the website. Until then, no analytics data is collected, even if you accept.
• Advertising storage, ad personalisation and advertising user data are switched off in the configuration.
• Refusing analytics does not limit anything on the website.
• You can change your decision at any time (see section 11).

Essential storage. Your analytics decision is kept in your browser’s local storage under the key brandowy-consent, together with the date of the decision. Local storage is not a cookie: it stays on your device, is not sent to me with each request, and is needed so the website can respect your choice and not ask again on every visit.

Some interface states, such as images you have revealed, are kept only in the page’s memory and are gone when you reload it.

Analytics cookies. Only after you accept analytics, and only while analytics are connected, Google Analytics may set its first-party cookies (_ga and _ga_…). When you withdraw consent, analytics are switched off and these cookies are removed.

Apart from these, the website does not set cookies of its own and uses no advertising or social media tracking.

• Replying to an enquiry about cooperation - taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and performance of the contract if cooperation follows.
• Replying to other messages and ongoing communication - my legitimate interest in responding to people who contact me (Art. 6(1)(f) GDPR).
• Analytics - your consent (Art. 6(1)(a) GDPR), which also covers storing and reading analytics cookies on your device.
• Technical data and security - my legitimate interest in delivering the website and keeping it secure and working (Art. 6(1)(f) GDPR).
• Records required by law, where an enquiry leads to cooperation (for example invoices) - compliance with legal obligations under Polish law (Art. 6(1)(c) GDPR).
• Establishing, exercising or defending legal claims - my legitimate interest (Art. 6(1)(f) GDPR).

Personal data may be processed by:

• the provider that hosts the website, which processes technical data to deliver it;
• the email service provider behind the address hello@brandowy.pl, which stores the correspondence;
• Google (Google Ireland Limited), as the provider of Google Analytics, only if you accept analytics and they are connected;
• public authorities, where the law requires it.

I do not sell personal data or share it for marketing.

Some providers, in particular Google, may process data outside the European Economic Area, including in the United States. Where that happens, the transfer relies on the safeguards the provider offers under the GDPR, such as an adequacy decision or standard contractual clauses, as described in the provider’s own terms. You can ask me for more information about these safeguards.

• Enquiries and correspondence - for as long as needed to handle the enquiry and any cooperation that follows, and afterwards only as long as needed to establish, exercise or defend legal claims.
• Records required by law - for the periods set by applicable Polish law.
• Analytics data - according to the data retention settings of the Google Analytics property.
• Technical data and server logs - according to the hosting provider’s log retention.
• Your analytics decision - in your browser until you change it or clear the website’s data.

Under the GDPR you have the right to:

• access your personal data and receive a copy of it;
• have inaccurate data rectified;
• have your data erased;
• restrict its processing;
• data portability, where processing is based on consent or a contract and carried out by automated means;
• object to processing based on legitimate interest, on grounds relating to your particular situation;
• withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise these rights, write to hello@brandowy.pl. You also have the right to lodge a complaint with the supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Your data is not used for automated decision-making or profiling.

You can accept or refuse analytics here at any time; the choice applies immediately. Choosing Essential only after accepting withdraws your consent: analytics are switched off and their cookies are removed. You can also clear this website’s data in your browser, after which you will be asked again.

The website links to other services, such as LinkedIn. They are plain links: nothing from those services is embedded here, and no data is shared with them until you open them. Once you do, their own privacy policies apply.

I may update this policy when the website, its providers or the law change. The current version is always published on this page with its date. If what analytics measure changes, you will be asked for your consent again.

Last updated: 25 September 2026