Last updated: 13 October 2026
This is a translation of the Polish version. In case of discrepancies, the Polish version prevails.
1. Data controller. The controller of your personal data is Anita Chabrowska. For matters concerning personal data and cookies you can write to: kontakt@anitachabrowska.pl.
2. What data I process.
a) Data you provide in the contact form or in a message: first and last name, e-mail address, phone number and the content of your message. Providing the data is voluntary, but without it I cannot respond to your enquiry.
b) Data about your use of the website, collected through cookies and similar technologies only if you consent in the cookie banner: cookie identifiers, IP address, device and browser information, pages visited, how you arrived at the website (e.g. by clicking a Google ad) and actions you take, e.g. sending the form or clicking the phone number or e-mail address.
3. Purposes and legal bases.
Responding to your enquiry and preparing an offer: Art. 6(1)(b) GDPR (steps taken prior to entering into a contract).
Maintaining correspondence and, where necessary, defending against claims: Art. 6(1)(f) GDPR (legitimate interest).
Running the website and remembering your choice in the cookie banner: Art. 6(1)(f) GDPR. This information is strictly necessary and does not require consent.
Website traffic statistics (Google Analytics): your consent, Art. 6(1)(a) GDPR.
Measuring the effectiveness of Google Ads, i.e. checking whether a visit from an ad led to e.g. a form submission: your consent, Art. 6(1)(a) GDPR.
Remarketing, i.e. showing my ads to people who have visited the website: your consent, Art. 6(1)(a) GDPR.
Cookies other than strictly necessary ones are stored only with your consent, in line with Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej).
4. Cookies and the cookie banner. Cookies are small text files stored in your browser. On your first visit the website shows a banner where you can accept all cookies, reject all except the necessary ones, or tick selected categories and save your choice. Until you consent, the website does not store analytics or marketing cookies. Categories:
Necessary: keep the website working and remember your choice in the banner. Always on. Your choice is stored in your browser's storage for 12 months, after which the banner appears again.
Analytics: Google Analytics. Cookies _ga and _ga_XXXXXXXXXX, valid for up to 2 years.
Marketing: Google Ads. Cookies _gcl_au and _gcl_aw (ad conversion measurement, valid for 90 days) and IDE on the doubleclick.net domain (Google remarketing and ad personalisation, valid for 13 months).
The full list of Google cookies and their expiry periods is available at: https://business.safety.google/adscookies/
5. Google Analytics. If you accept analytics cookies, I use Google Analytics to see how many people visit the website, where they come from and which pages they read. The reports I look at are aggregated and do not allow me to identify you. Google Analytics data is kept for 14 months.
6. Google Ads: measurement and remarketing. I run advertising campaigns in Google Ads. If you accept marketing cookies:
a) Conversion measurement. Google Ads checks whether a click on my ad was followed by sending the form or clicking the phone number or e-mail address. This tells me which ads bring enquiries.
b) Remarketing. Google Ads may add your browser to an audience list and then show you my ads in Google Search, on YouTube and on websites that partner with Google. The lists are based on cookie identifiers and do not contain your name or e-mail address. A browser stays on the list for 180 days after the last visit.
I do not send contact form data to Google.
The website uses Google Consent Mode. Until you consent, Google tags do not store analytics or advertising cookies. They may only send Google basic information without cookie identifiers, e.g. that a page was viewed and what your consent status is.
Google tools are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For Google Ads, Google may also process data as a separate controller, as described in the Google Privacy Policy: https://policies.google.com/privacy. How Google uses data from partner sites: https://policies.google.com/technologies/partner-sites. You can also turn off personalised ads in Google My Ad Center: https://myadcenter.google.com
7. How to change or withdraw consent. You can change your choice at any time using the "Cookies" button in the bottom left corner of the website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can also delete or block cookies in your browser settings.
8. How long I keep data.
Enquiry data: for the duration of the correspondence and then for no longer than 12 months from the last contact, unless we start working together. In that case, for the period required by law.
Google Analytics data: 14 months.
Google Ads remarketing lists: 180 days from the last visit.
Cookies: for the period listed in section 4, or until you delete them or withdraw your consent.
9. Recipients of data. Data may be shared with service providers I use to run the website, correspondence and advertising: Framer (website hosting), Formspark (contact form handling), my e-mail provider and Google Ireland Limited (Google Analytics, Google Tag Manager, Google Ads). I do not sell data and do not share it for the marketing purposes of other companies.
10. Transfers outside the EEA. Some providers (e.g. Framer, Google) may process data outside the European Economic Area, including in the USA. This takes place on the basis of a European Commission decision confirming an adequate level of protection (including the EU-US Data Privacy Framework) or standard contractual clauses.
11. Your rights. You have the right to access your data, rectify it, erase it, restrict processing, data portability and to object. You can withdraw your cookie consent at any time (section 7). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
12. Profiling. Remarketing and Google ad personalisation are based on an assessment of your activity on the website, so they are a form of profiling. I do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.
13. Changes to this policy. This policy may be updated, e.g. when I add a new tool. The current version is always available on this page, and the date of the last change is shown at the top.