Dear User,
We care about your privacy and want you to feel comfortable when using our Website. Below you will find key information about how we process your personal data and use cookies. This Privacy Policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The controller of your personal data is:
Justyna Mleczak,
sole trader operating under the business name Do Macedonii Justyna Mleczak,
registered in the Central Register and Information on Economic Activity (CEIDG),
NIP: 7881991453, REGON: 385277476,
registered address: ul. Górnośląska 1/159, 00-443 Warsaw, Poland.
If you have any questions regarding the processing of your personal data, you may contact us at:
📧 justyna@domacedonii.pl
2. Your Rights under GDPR
You have the right to:
- access your personal data and obtain a copy of it (Art. 15 GDPR),
- rectify inaccurate or incomplete data (Art. 16 GDPR),
- request deletion of your data (“right to be forgotten”) (Art. 17 GDPR),
- restrict processing of your data (Art. 18 GDPR),
- data portability (Art. 20 GDPR).
You also have the right to object at any time to the processing of your personal data:
- based on legitimate interests (Art. 6(1)(f) GDPR),
- for direct marketing purposes (Art. 21 GDPR).
To exercise your rights, please contact us using the details above.
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) or another competent EU supervisory authority.
3. Personal Data Processing
3.1 Use of free services available on the Website
Purpose:
Performance of a contract for providing services available on the Website.
Legal basis:
Art. 6(1)(b) GDPR – performance of a contract.
Retention period:
For the duration of the contract and thereafter for the period necessary to pursue or defend legal claims.
Is data provision mandatory?
Yes – without providing data, use of the services is not possible.
3.2 Contacting us (e.g. via email or contact form)
Purpose:
Handling enquiries and correspondence.
Legal basis:
- Art. 6(1)(b) GDPR – if the enquiry relates to a contract, or
- Art. 6(1)(f) GDPR – our legitimate interest in communication.
Retention period:
Until correspondence is completed and thereafter for the limitation period for claims.
Is data provision mandatory?
Yes – without it, we cannot respond.
3.3 Analytical activities (cookies, statistics)
Purpose:
Analysis of how users interact with the Website to improve its functionality and content.
Legal basis:
Art. 6(1)(f) GDPR – legitimate interest, or consent where required.
Retention period:
Until cookies expire or are deleted by the user.
Is data provision mandatory?
No – analytics can be disabled in browser settings.
3.4 Newsletter and free digital content
Purpose:
Delivery of a free newsletter and digital content.
Legal basis:
Art. 6(1)(b) GDPR – performance of a contract.
Retention period:
For the duration of the subscription and thereafter for legal claims.
Is data provision mandatory?
Yes – without it, delivery is not possible.
3.5 Legal claims
Purpose:
Establishment, exercise, or defence of legal claims.
Legal basis:
Art. 6(1)(f) GDPR – legitimate interest.
Retention period:
Until the limitation period expires.
4. Analytical Activities
We may analyse how users navigate the Website (e.g. time spent on pages, clicks) to improve structure, layout, and content.
If you subscribe to newsletters or marketing materials, we may analyse their effectiveness (e.g. open rates) to improve communication practices.
5. Data Security
We apply appropriate technical and organisational measures to protect personal data, including SSL/TLS encryption of connections.
6. Cookies
The Website uses cookies, which:
- are stored on your device,
- do not change your device settings.
Cookies are used for:
- statistical,
- analytical,
- marketing purposes (where applicable).
You may delete or block cookies at any time using your browser settings. Disabling cookies may affect some Website functions.
7. External Services / Data Recipients
We use third-party service providers who process data on our behalf and only under documented instructions.
Data recipients may include:
- hosting providers (recipient: LH.pl, location: EU)
- social media embeds (Instagram, US)
- analytics providers (Google Analytics, US),
- newsletter and email service providers (Substack, US),
- website software (WordPress, EU).
8. Data Transfers Outside the EU
Where personal data is transferred outside the European Union (e.g. to the United States), appropriate safeguards are applied, including participation in the EU–US Data Privacy Framework or other mechanisms approved by the European Commission.
9. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time. The current version is always available on the Website.