DATA-01ANALYTICS
Plausible Analytics
Privacy-friendly, self-hosted analytics (skad.click). No cookies, no personal data, no profiling. Data is aggregated only, server located in the EU.
fiedoruk.pl/DOC · GDPR/ last updated: 21.06.2026Privacy
policy
Privacy by default — I minimize data, don't profile, don't sell, and don't use advertising cookies. Below is exactly what I process and why.
Dataminimization · EU-based servers · no profilingYour rights
01 / Controller
Who processes your data
The data controller is Tomasz Fiedoruk, running a sole proprietorship under the business name MAGNET MEDIC Tomasz Fiedoruk (Czaplinek, Poland). For any matters concerning personal data, get in touch via the contact form.
02 / Scope and purposes
What data, and why
- Contact form — name, email address and message content (on the local-government page, additionally: municipality/institution name, population size, selected service). Purpose: responding to your inquiry and potentially entering into cooperation. Legal basis: Article 6(1)(b) and (f) GDPR (contact and pre-contractual steps, legitimate interest).
- Visit analytics — anonymized, aggregated traffic statistics (no personal data). Legal basis: Article 6(1)(f) GDPR (legitimate interest — measuring site performance).
03 / Tools and processors
Email
What I use
DATA-02CDN / DNS
Cloudflare
DNS, content delivery network (CDN) and attack protection (WAF). Processes the IP address for traffic routing and security purposes. Transfers outside the EEA are safeguarded by Standard Contractual Clauses (SCC).
DATA-03HOSTING
dhosting.pl
Website hosting and contact-form delivery. Servers located in Poland / EU. The provider acts as a processor under a data-processing agreement.
DATA-04EMAIL
Messages from the contact form are delivered to the controller's mailbox via the hosting provider's mail server (EU). Used solely for handling correspondence.
04 / Cookies
Cookie files
The site does not use its own tracking or marketing cookies, which is why no consent banner is shown. Plausible analytics runs without cookies. Only technical Cloudflare cookies necessary for security and proper site operation may occur.
05 / Retention
How long I keep data
- Contact-form correspondence — until the matter is resolved, and afterwards for the statute-of-limitations period for any potential claims.
- Analytics statistics — indefinitely, in aggregated form (contain no personal data).
06 / Your rights
What you are entitled to (GDPR)
You have the right to: access your data, rectification, erasure, restriction of processing, objection, and data portability. Submit requests via the contact form. You are also entitled to lodge a complaint with the President of the Personal Data Protection Office (PUODO).
07 / Security
How I protect data
Encrypted connections (SSL/TLS), EU-based hosting, data minimization, and multi-layer anti-spam protection for the contact form (honeypot + timing analysis + JS token). I do not sell or share data with third parties for marketing purposes.
08 / Contact
Privacy questions
For matters concerning personal data and this policy, write via the contact form. I usually reply within 24 business hours.