This is an English translation of the privacy policy. In case of any discrepancy, the Polish version prevails.

Last updated: 15 October 2026 (added information on the Meta pixel and LinkedIn Insight Tag).

1. General information

  1. This policy applies to the website operating at: MILOWSKI.EU
  2. The website operator and the controller of personal data is: ITIQ Marcin Miłowski, Tysiąclecia 4, Poznań, Poland, Tax ID (NIP): 7822460978
  3. The operator’s contact email address: [email protected]
  4. The operator is the controller of your personal data with respect to data you provide voluntarily on the website.
  5. The website uses personal data for the following purposes:
    • Debt collection
    • Online chat conversations
    • Handling enquiries sent through forms
    • Delivering ordered services
    • Presenting offers or information
  6. The website collects information about users and their behaviour in the following ways:
    1. Through data voluntarily entered in forms, which is entered into the operator’s systems.
    2. By storing cookies on end devices.

2. Selected data protection methods used by the operator

  1. Places where personal data is entered are protected in the transmission layer (SSL certificate). Personal data and login data entered on the website are encrypted on the user’s computer and can only be read on the target server.

3. Hosting

  1. The website is hosted (technically maintained) on servers of: cyberFolks.pl
  2. To ensure technical reliability, the hosting company keeps server-level logs. The following may be recorded:
    • resources identified by URL (addresses of requested resources: pages, files),
    • time of the request,
    • time of the response,
    • client station name, identified by the HTTP protocol,
    • information about errors that occurred during the HTTP transaction,
    • the URL of the page previously visited by the user (referrer link), if the website was reached through a link,
    • information about the user’s browser,
    • IP address information,
    • diagnostic information related to self-service ordering of services through on-site registration forms,
    • information related to handling email sent to and by the operator.

4. Your rights and additional information on how data is used

  1. In some situations the controller has the right to transfer your personal data to other recipients if this is necessary to perform a contract concluded with you or to fulfil the controller’s obligations. This applies to the following groups of recipients:
    • the hosting company, under a data processing agreement
    • law firms and debt collectors
    • payment operators
  2. Your personal data is processed by the controller no longer than necessary to perform the related activities defined by separate regulations (for example accounting rules). Marketing data is not processed for longer than 3 years.
  3. You have the right to request from the controller:
    • access to your personal data,
    • its rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing indicated in point 3.3 c) carried out for the controller’s legitimate interests, including profiling. The right to object cannot be exercised where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  5. You may lodge a complaint about the controller’s actions with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
  6. Providing personal data is voluntary but necessary to use the website.
  7. Automated decision-making, including profiling, may be applied to you in order to provide services under a concluded contract and for the controller’s direct marketing.
  8. Personal data is transferred to third countries within the meaning of data protection law. This means it is sent outside the European Union.

5. Information in forms

  1. The website collects information provided voluntarily by the user, including personal data if provided.
  2. The website may record information about connection parameters (timestamp, IP address).
  3. In some cases the website may record information that makes it easier to link form data with the email address of the user filling in the form. In that case the user’s email address appears in the URL of the page containing the form.
  4. Data provided in a form is processed for the purpose resulting from the function of that form, for example handling a service request or a sales enquiry, or registering services. The context and description of each form clearly state its purpose.

Downloadable GTM template for B2B websites

  1. When you download the GTM template from milowski.eu/tools/szablon-gtm-b2b/, I process your email address, the date and content of the consents you accepted, the address of the page you came from, campaign parameters (UTM, GCLID) and information that the file was downloaded.
  2. Providing an email address and accepting this privacy policy is required to download the template. I process the data to give you the file (Art. 6(1)(b) GDPR) and to be able to demonstrate which consents you gave (Art. 6(1)(f) GDPR). I do not send automated emails.
  3. If you tick the consent to be contacted after downloading, I may send you a one-off email asking whether the template implementation went well and whether you need help (Art. 6(1)(a) GDPR).
  4. If you tick the marketing consent, I will send you information about new versions of the template and materials on B2B analytics (Art. 6(1)(a) GDPR).
  5. Both consents are optional. You can withdraw them at any time by writing to [email protected]. Withdrawal does not affect the lawfulness of processing before it.
  6. I store the data in the website’s admin panel (on the hosting server) until you withdraw your consents or object, and if no consents were given, for no longer than 2 years after the last download. I do not sell or share email addresses with other companies.

Free GA4 audit in Data Studio (formerly Looker Studio)

  1. When you request access to the free GA4 audit from milowski.eu/tools/audyt-ga4/, I process your email address, the date and content of the consents you accepted, the address of the page you came from, campaign parameters (UTM, GCLID) and information that you used the report link.
  2. Providing an email address and accepting this privacy policy is required to get access to the report. I process the data to give you the report (Art. 6(1)(b) GDPR) and to be able to demonstrate which consents you gave (Art. 6(1)(f) GDPR). I do not send automated emails.
  3. The report runs in Google Data Studio on your own Google account. Data from your Google Analytics 4 property and the audit results are not sent to me.
  4. When you request view access to the report in Google Data Studio, Google passes me the email address and name of your Google account. I use them only to grant you access to the report (Art. 6(1)(b) GDPR).
  5. If you tick the consent to be contacted after opening the report, I may send you a one-off email asking whether the audit revealed problems and whether you need help (Art. 6(1)(a) GDPR).
  6. If you tick the marketing consent, I will send you information about new versions of the report and materials on GA4 analytics (Art. 6(1)(a) GDPR).
  7. Both consents are optional. You can withdraw them at any time by writing to [email protected]. Withdrawal does not affect the lawfulness of processing before it.
  8. I store the data in the website’s admin panel (on the hosting server) until you withdraw your consents or object, and if no consents were given, for no longer than 2 years after you last used the report. I do not sell or share email addresses with other companies.

SHA-256 tester for enhanced conversions

  1. The tester at milowski.eu/tools/tester-sha256/ runs in your browser. The hashes, email addresses and phone numbers you enter for checking are not sent to the server or stored. The number of checks is stored only in your browser’s memory (localStorage) to count the daily limit.
  2. When you provide an email address to remove the check limit, I process your email address, the date and content of the consents you accepted, the address of the page you came from and campaign parameters (UTM, GCLID).
  3. Providing an email address and accepting this privacy policy is required to remove the limit. I process the data to give you unlimited use of the tester (Art. 6(1)(b) GDPR) and to be able to demonstrate which consents you gave (Art. 6(1)(f) GDPR). I do not send automated emails.
  4. If you tick the consent to be contacted, I may send you a one-off email asking whether the tester found a problem and whether you need help (Art. 6(1)(a) GDPR).
  5. If you tick the marketing consent, I will send you information about new tools and materials on analytics, enhanced conversions and server-side tracking (Art. 6(1)(a) GDPR).
  6. Both consents are optional. You can withdraw them at any time by writing to [email protected]. Withdrawal does not affect the lawfulness of processing before it.
  7. I store the data in the website’s admin panel (on the hosting server) until you withdraw your consents or object, and if no consents were given, for no longer than 2 years after you provided the address. I do not sell or share email addresses with other companies.

6. Administrator logs

  1. Information about user behaviour on the website may be logged. This data is used to administer the website.

7. Key marketing techniques

  1. The operator uses statistical analysis of website traffic through Google Analytics (Google Inc., based in the USA). The operator does not pass personal data to the provider of this service, only anonymised information. The service relies on cookies on the user’s end device. Regarding information on user preferences collected by the Google advertising network, users can view and edit information derived from cookies using this tool: https://www.google.com/ads/preferences/
  2. Meta (Facebook) pixel. I use the Meta pixel, provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The pixel stores cookies in your browser (e.g. _fbp) and sends Meta information about the pages you visit, the actions you take (e.g. submitting a form), your IP address and browser and device data. This lets me measure the results of ads on Facebook and Instagram, show ads to people who visited the website (remarketing) and build lookalike audiences. The pixel runs only with your consent given in the cookie banner (Art. 6(1)(a) GDPR). For collecting and transmitting this data to Meta, I am a joint controller with Meta Platforms Ireland Ltd. (Art. 26 GDPR). Meta’s further processing is governed by the Meta Privacy Policy. Meta may transfer data to the USA under the EU-US Data Privacy Framework. You can manage your ad settings in Meta ad preferences.
  3. LinkedIn Insight Tag. I use the LinkedIn Insight Tag (LinkedIn pixel), provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The tag stores cookies in your browser (e.g. li_sugr, bcookie, lidc, UserMatchHistory) and sends LinkedIn information about the pages you visit, the actions you take, your IP address, the referring URL and browser and device data. This lets me measure conversions from LinkedIn ads, show ads to people who visited the website (retargeting) and see aggregated demographics of visitors (e.g. industry, job title, company size). LinkedIn does not share data with me that identifies individual people. The tag runs only with your consent given in the cookie banner (Art. 6(1)(a) GDPR). For collecting and transmitting this data to LinkedIn, I am a joint controller with LinkedIn Ireland Unlimited Company (Art. 26 GDPR). LinkedIn’s further processing is governed by the LinkedIn Privacy Policy. LinkedIn may transfer data to the USA under the EU-US Data Privacy Framework. If you have a LinkedIn account, you can turn off ads based on data from other websites in your LinkedIn advertising settings.
  4. You can change or withdraw your consent to the Meta pixel and the LinkedIn Insight Tag at any time in the cookie banner on the website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
  5. The operator uses remarketing techniques that match advertising messages to the user’s behaviour on the website. This may give the impression that the user’s personal data is used to track them, but in practice no personal data is passed from the operator to ad operators. The technical requirement for such activities is that cookies are enabled.
  6. The operator uses a solution that studies user behaviour by creating heatmaps and recording on-site behaviour. This information is anonymised before being sent to the service provider, so the provider does not know which individual it concerns. In particular, typed passwords and other personal data are not recorded.
  7. The operator uses a solution that automates the website’s actions towards users, for example sending an email to a user after they visit a specific page, provided they have consented to receive commercial communication from the operator.
  8. The operator may use profiling within the meaning of data protection law.

8. Cookies

  1. The website uses cookies.
  2. Cookies are IT data, in particular text files, stored on the website user’s end device and intended for using the website’s pages. Cookies usually contain the name of the website they come from, how long they are stored on the end device and a unique number.
  3. The entity placing cookies on the user’s end device and accessing them is the website operator.
  4. Cookies are used for the following purposes:
    1. maintaining the user’s session (after logging in), so the user does not have to re-enter their login and password on every page;
    2. achieving the purposes described above in “Key marketing techniques”.
  5. The website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the user’s end device until they log out, leave the website or close the browser. Persistent cookies are stored on the user’s end device for the time specified in the cookie parameters or until the user deletes them.
  6. Web browsers usually allow cookies to be stored on the user’s end device by default. Users can change these settings. The browser lets you delete cookies and can also block them automatically. Details are available in your browser’s help or documentation.
  7. Restricting cookies may affect some functions available on the website.
  8. Cookies placed on the user’s end device may also be used by entities cooperating with the website operator, in particular Google (Google Ireland Ltd., Ireland), Meta (Meta Platforms Ireland Ltd., Ireland), LinkedIn (LinkedIn Ireland Unlimited Company, Ireland) and Twitter (Twitter Inc., USA).

9. Managing cookies: how to give and withdraw consent in practice

  1. If you do not want to receive cookies, you can change your browser settings. Please note that disabling cookies needed for authentication, security and remembering user preferences may make it difficult, and in extreme cases impossible, to use the website.
  2. To manage cookie settings, choose your browser from the list below and follow the instructions:

    Mobile devices:

Comments

When visitors leave comments on the site, we collect the data shown in the comment form, as well as the visitor’s IP address and browser user agent string to help with spam detection.

An anonymised string created from your email address (also called a hash) may be sent to the Gravatar service to see if you are using it. The Gravatar privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture is visible publicly in the context of your comment.

Media

If you are a registered user and upload images to the site, you should avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract location data from images on the site.

Cookies used by WordPress

If you leave a comment, you may opt in to saving your name, email address and website in cookies so you do not have to fill them in again for the next comment. These cookies last for one year.

If you visit the login page, we set a temporary cookie to check whether your browser accepts cookies. It contains no personal data and is discarded when you close your browser.

When you log in, we also set several cookies to save your login information and screen display choices. Login cookies last for two days and screen options cookies last for a year. If you select “Remember me”, your login lasts for two weeks. If you log out, the login cookies are removed.

If you edit or publish an article, an additional cookie is saved in your browser. It contains no personal data and simply indicates the ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (for example videos, images or articles). Embedded content from other websites behaves exactly as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that website.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely, so we can recognise and approve follow-up comments automatically instead of holding them in a moderation queue.

For users who register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit or delete their personal information at any time (except their username, which cannot be changed). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site or have left comments, you can request an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include data we are obliged to keep for administrative, legal or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Ta strona jest dostępna również po polsku.

Przejdź do wersji polskiej