Privacy Policy
Last updated: 20 July 2026
This policy explains what data I process when you use the Zevi website, why I process it and what rights you have. Providing data through the forms is voluntary.
1. Data controller
The controller of your personal data is Tomasz Włodarczyk, trading under the Zevi brand, Biała Parcela 30, 98-350 Biała, Poland, Polish Tax ID (NIP): 8322071665.
For privacy matters, email kontakt@zevi.pl or write to the postal address above. The controller has not appointed a data protection officer.
2. Data categories and sources
I receive data directly from you when you submit a form, sign up for the mini-course, send an email or interact with a social profile. During an ordinary visit, the server and analytics tool may also process basic technical data.
- contact form: full name, email address, message and selected website language;
- email mini-course: email address, selected language, signup source and consent information;
- correspondence and social profiles: data included in your message or made available through that platform;
- technical data: IP address, request date and time, device or browser type, visited pages and diagnostic information.
3. Purposes and legal bases
I process inquiry data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). If an inquiry is not intended to lead to a contract, I rely on my legitimate interest in corresponding and responding to messages (Article 6(1)(f) GDPR).
I process the email address used to sign up for the mini-course on the basis of consent (Article 6(1)(a) GDPR). This consent covers delivery of the requested course and related electronic messages in accordance with Article 398 of the Polish Electronic Communications Law. You may withdraw it at any time.
I process technical data to secure the website, detect abuse, maintain the service and prepare aggregate Plausible statistics based on my legitimate interests (Article 6(1)(f) GDPR). I load Google Analytics only with your consent (Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law). I may also process data to establish, pursue or defend legal claims and to meet legal obligations (Article 6(1)(c) and (f) GDPR).
4. Voluntary provision of data
Providing data is voluntary, but fields marked as required are necessary to send a message or sign up for the mini-course. Without them, I cannot provide the selected online service. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
5. Recipients and external services
Data may be received by providers supporting the website: hosting and IT infrastructure providers, email or mailing system providers, Plausible Analytics and — after you consent — Google Ireland Limited and Google group entities supporting Google Analytics. Technical support providers and legal or accounting advisers may also receive data only to the extent required for their work. Data may be disclosed to public authorities where required by law.
If you use an available Cal.com booking tool or follow a link to Facebook or Instagram, that operator may process information as a separate controller under its own privacy policy. Displaying a standard external link does not itself send data to the linked service; this occurs only after you click it or its tool is loaded.
6. Transfers outside the EEA
Some external providers may process data outside the European Economic Area. In that case, the transfer is based on a European Commission adequacy decision or appropriate safeguards, in particular Standard Contractual Clauses. You can request information about the safeguards currently used by emailing kontakt@zevi.pl.
7. Retention periods
I keep correspondence for as long as needed to handle the matter and then for the period required to establish, pursue or defend legal claims. Data related to a contract or tax duties is kept for the period required by law.
Mini-course data is processed until you withdraw consent or the service ends. After withdrawal, I may retain a minimal record showing that consent was given and withdrawn until related claims become time-barred. Technical logs are retained according to infrastructure settings, no longer than necessary for security and diagnostics. Google Analytics cookies expire by default after up to 2 years; event-data retention depends on the settings of the Google Analytics service.
8. Your rights
Depending on the legal basis, you may request access to, rectification or erasure of your data, restriction of processing and data portability, and you may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time.
To exercise your rights, email kontakt@zevi.pl. If you believe that your data is being processed unlawfully, you may lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority.
9. Cookies and analytics
Plausible Analytics prepares aggregate visit statistics without setting cookies or building user profiles. Essential technical mechanisms may be used where necessary to provide a function explicitly requested by the user.
Google Analytics loads only after you select “Allow analytics”. It may then store _ga and _ga_<identifier> cookies to distinguish users and sessions and process device data, approximate location and website interactions. Your choice is stored in the browser's local storage so that the website does not ask on every visit.
You can withdraw consent using the “Privacy settings” button shown on the website. After analytics is rejected, the page reloads and Google Analytics will not load on subsequent page views. External websites opened after you click a link, particularly Cal.com, Facebook and Instagram, apply their own rules to cookies and similar technologies.
10. Automated decisions
I do not use data collected through this website to make decisions about you that produce legal effects solely by automated means, nor do I profile you within the meaning of Article 22 GDPR.
11. Policy updates
This policy may be updated if the website, service providers or applicable law changes. The current version is always published on this page together with the date of the latest update.