This policy describes how personal data is processed when you use polska2038.pl (the “Site”), operated as a non-commercial, pro bono #Polska2038 civic initiative. The Site does not sell online services.
1. Data controller
Controller: #Polska2038 initiative.
Privacy contact: polska2038@proton.me
The Site is informational (program concept, materials, contact form).
2. Data we process
Contact form (voluntary): name, organisation, email, role, subject, message.
Technical data: IP address, User-Agent, language and page path — security and abuse prevention.
Cookies — see Cookie Policy (consent storage, optional analytics).
Demo scout panel: test account and synthetic talent data — not linked to real individuals in the public demo.
3. Purposes and legal bases (GDPR)
Contact enquiries — Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) where consent is explicitly given.
Security (rate limits, technical logs) — Art. 6(1)(f) GDPR.
Analytics (only after cookie consent) — Art. 6(1)(a) GDPR.
Demo account — Art. 6(1)(b) GDPR.
4. Recipients
Hosting: Vercel Inc.
Contact notifications: Resend (transactional email).
We do not sell personal data for marketing.
5. Retention
Contact messages: as long as needed for correspondence, up to 24 months unless law requires longer.
Technical logs: up to 12 months.
Cookie consent: up to 12 months or until withdrawn.
6. Your rights
Access, rectification, erasure, restriction, portability, objection, withdraw consent.
Complaint to your supervisory authority (in Poland: UODO).
Requests: polska2038@proton.me
7. Transfers outside the EEA
Some providers may process data outside the EEA using GDPR-compliant safeguards (e.g. SCCs).
8. Changes
We may update this policy. The effective date is shown at the top.