Privacy policy
Privacy policy
Below is the information about personal data processing required by Article 13 GDPR.
Data controller
The data controller is Piotr Gerus, a sole trader operating as Piotr Gerus PAG, ul. Edwarda Habicha 14/134, 02-495 Warszawa, Poland. For matters concerning personal data, write to kontakt@piotrgerus.pl.
Purposes, data and legal bases
Using the website. The server processes technical data, in particular the IP address, the time and address of the request, and browser information. This is used to provide the website, diagnose errors and ensure security. The legal basis is Article 6(1)(f) GDPR — my legitimate interest in the secure and correct operation of the website.
“Ask this website”. After you submit a question, I process its content, language, IP address, date and time, processing outcome and processing time. The question and language are sent to the AI provider to generate an answer. The internal log is used to improve the knowledge base and prevent abuse. The legal basis is Article 6(1)(f) GDPR — my legitimate interest in providing, improving and protecting this feature. Do not include personal data or confidential information in the question.
E-mail correspondence. If you write to me, I process your e-mail address, message and any data you voluntarily provide in order to reply or take steps before entering into a contract. The legal basis is Article 6(1)(b) or (f) GDPR, depending on the content of the message.
Data recipients
Data may be received by providers of hosting (Cloudflare, Inc.) and e-mail services and — only when the AI feature is used — an external AI service provider. Cloudflare also provides Turnstile protection.
Protecting the AI form — Cloudflare Turnstile
Turnstile starts when you attempt to send a question. Cloudflare processes technical connection and browser data, including your IP address, to distinguish people from automated traffic. It may ask you to select a checkbox. This prevents abuse of the form; the legal basis is Article 6(1)(f) GDPR.
I send a single-use token to the verification service. I do not send it the question or the AI answer. The token is not sent to the model or stored in my question log.
Details about the provider’s processing: Cloudflare Turnstile privacy notice
Retention
I keep the internal question log for 90 days. Technical rate-limiter data is used for the duration of the applicable limits and removed during the next clean-up. Server logs are kept for the period resulting from the hosting configuration and agreement, no longer than needed for security and diagnostics.
I keep correspondence until the matter is closed and, if we work together, for the period required by law or needed to establish, pursue or defend claims.
Essential cookies
The website uses the essential “pg_showcase” cookie to protect the AI feature. It expires when the browser session ends. It is necessary to provide a function requested by the user and therefore does not require consent under Article 399(3) of the Polish Electronic Communications Law. The page URL determines its language; the language choice is not stored in a cookie.
Analytics — Google Analytics 4 and Google Tag Manager
I use Google Analytics 4 through Google Tag Manager to measure visits, traffic sources, service selections, contact clicks, article reading progress and use of the AI feature. Recipients include Google Ireland Limited and entities providing Google services. The data includes technical browser and device information, the page, traffic source and interactions. I do not send AI questions or answers, e-mail addresses from the form or security tokens to Analytics.
The website uses advanced Consent Mode. Before a choice or without consent to analytics cookies, Google may receive measurement signals without storing those cookies. This does not mean that no communication with Google takes place. After analytics consent, the tool may store _ga and _ga_* cookies to recognise visits and sessions, usually for up to 2 years; browsers may shorten this period. Analytics cookie storage is based on your consent. Advertising tags and Google Signals are not enabled.
The essential pg_cx cookie stores your category choice and settings version for up to 730 days. GA4 event data retention is set to 2 months and user data retention to 14 months, with the user retention period reset on new activity. These settings do not limit the availability period of standard aggregated reports. Google may process data outside the European Economic Area, including in the USA, using the transfer mechanisms described in its documentation.
How Google uses data from sites using its services
Your rights
You have the right to request access to, rectification or erasure of your data, or restriction of processing, and — where the legal conditions are met — data portability. You may object to processing based on legitimate interests and lodge a complaint with the President of the Polish Personal Data Protection Office. To exercise your rights, write to kontakt@piotrgerus.pl.
Voluntary provision of data
Providing data is voluntary. Without technical data the website cannot be delivered and secured, without a question the AI answer cannot be generated, and without contact details I cannot reply to your message.