Last Updated: 16 July 2026
This Privacy Policy describes how Hesuli, operating the informational blog at hesuli.info (Stefana Okrzei 8/69, Warszawa, Poland; email: [email protected]; phone: +48 784 986 259), collects, processes, and protects personal data in connection with the operation of this website. The processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council — commonly known as the GDPR — and the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych, Dz.U. 2018 poz. 1000), as well as implementing regulations issued thereunder.
Hesuli is the controller of personal data collected through this website. As controller, we determine the purposes and means by which personal data is processed. We are committed to handling all personal data with transparency, proportionality, and respect for the individuals whose data we process.
When you use the contact form on this website, we collect your name, email address, phone number, and the content of your message. This data is collected for the sole purpose of responding to your enquiry. The legal basis for this processing is Article 6(1)(b) of the GDPR — processing is necessary to take steps at the request of the data subject. We do not use contact form submissions for any purpose other than replying to the person who submitted them.
If you subscribe to our informational mailing list, we collect your email address. The legal basis is your explicit consent under Article 6(1)(a) of the GDPR. You may withdraw this consent at any time, and withdrawal does not affect the lawfulness of any processing that occurred before withdrawal. To withdraw consent, email us at [email protected] with a request to be removed from the list.
Like most websites, we also collect certain technical data automatically when you visit. This includes your IP address (in anonymised form where possible), browser type and version, the pages you visit on our site, time and date of your visit, and the address of the page from which you arrived. This data is processed on the basis of our legitimate interests under Article 6(1)(f) of the GDPR — specifically, the interest in maintaining a functioning, secure, and improving website. We do not use this technical data to identify individual visitors.
We use cookies on this website. The types of cookies we use, the purposes they serve, and how to manage your preferences are described in full in our Cookie Policy, available at cookies.html. We ask for your consent before setting any non-essential cookies. You can change your preferences at any time through the cookie settings accessible at the bottom of every page.
Contact form submissions are retained for as long as necessary to respond to your enquiry and for a reasonable period thereafter in case of follow-up communication, typically no longer than 24 months unless you are in ongoing contact with us. Mailing list subscriptions are retained until you withdraw consent. Technical log data is retained for a maximum of 12 months and then deleted or anonymised. We do not retain personal data for longer than necessary for the purpose for which it was collected.
We do not sell personal data. We do not share personal data with third parties for their own marketing purposes. We may use third-party service providers who process data on our behalf as processors — for example, hosting providers and email delivery services. Any such processors are bound by data processing agreements that require them to handle data only on our instructions and to maintain appropriate security measures. Where any such processor is located outside the European Economic Area, we ensure that appropriate safeguards are in place under Chapter V of the GDPR.
Under the GDPR and Polish implementing legislation, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request erasure of your data in certain circumstances, to object to processing based on legitimate interests, to restrict processing in certain circumstances, and to receive a copy of your data in a portable format where technically feasible. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving your request, as required by Article 12 of the GDPR.
You also have the right to lodge a complaint with the supervisory authority in Poland. The relevant authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, website: uodo.gov.pl. If you are located in another EU member state, you may also contact the supervisory authority in your country of habitual residence.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include encrypted transmission (HTTPS), access controls on data systems, and regular review of our security practices. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we take our obligations under Article 32 of the GDPR seriously and review our security measures on an ongoing basis.
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make changes, we update the "Last Updated" date at the top of this document. We encourage you to review this policy periodically. Continued use of the website after any changes constitutes acceptance of the updated policy. If changes are material, we will take reasonable steps to bring them to your attention.
For any questions about this Privacy Policy or how your data is handled, please contact us at [email protected] or write to us at Stefana Okrzei 8/69, Warszawa, Poland.