Privacy policy

This policy explains how personal data is handled on m-maciejewski.com (the “website”). It is short because the website collects very little.

1. Who is responsible

The controller of personal data is PlanIT Maksymilian Maciejewski, ul. Heinricha Lauterbacha 4/9, 54-115 Wrocław, Poland, NIP (tax ID) PL8971712581 — the business of Maksymilian Maciejewski. Contact: maksymilian@m-maciejewski.com, +48 791 895 243.

Under Article 37 of the GDPR no Data Protection Officer has been appointed. For any data protection matter, please contact me directly.

2. What this website does not do

• No advertising or remarketing tools, and no analytics cookies without your consent (see section 4).
• No social media plugins, newsletter, user accounts or online booking.
• No automated decision-making or profiling.

3. Contact and enquiries

The contact form sends your message to this website’s server at SEOHOST, which passes it on by email through AhaSend (AhaSend B.V., Amsterdam, Netherlands, an EU-based email delivery service) to my mailbox. You can also write to me by email or call me directly.

Data you may provide: name, email address, phone number, company, type of cooperation, the content of your message and anything else you choose to share. I use it to reply to you, to discuss and prepare cooperation and to keep the correspondence.

When you use the form, a short-lived technical record (a hash of your IP address) limits how many messages can be sent per hour, to protect against abuse. AhaSend keeps copies of messages and delivery logs for a short period, after which they are deleted.

Legal bases: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (my legitimate interest in handling business correspondence and in establishing, exercising or defending legal claims). Providing data is voluntary but necessary to handle your enquiry.

4. Technical data when you visit

The website is hosted by SEOHOST (seohost.pl), which acts as a processor and keeps standard server logs: the requested address, time of the request, IP address, browser information, the referring page and error information. This keeps the website running and secure.

Fonts, styles, images and scripts (including the smooth-scrolling script) are all served from this website’s own server. By default your browser contacts no third party. The only external service involved in the contact form is AhaSend, which is contacted by this website’s server and not by your browser.

Analytics (Google Analytics 4). This website uses Google Analytics 4, provided by Google Ireland Limited, to count visits, see which content is read and see which contact options are used: a click on the phone number, the LinkedIn link, the PlanIT company logo link or “contact” buttons, copying the email address, and a successfully sent contact form. These interaction events carry only the event name and the page language, never the content of your message or your email address, and they follow the same consent settings as page views. The Google tag loads on every page view, with analytics storage denied until you consent. Without your consent no analytics cookies are set, and Google receives only cookie-less measurements: the page address, referrer, time, browser and device details, and your IP address as part of the connection. If you arrive through a link tagged with campaign parameters (for example from LinkedIn, an email or a CV), the tags utm_source, utm_medium, utm_campaign, utm_id and utm_content are part of the page address and are recorded with the visit to show which link brought you here. They describe the link, never you, and they follow the same consent settings. Google Analytics 4 does not store IP addresses, but derives an approximate location (country and city) from them. If you click “Accept analytics”, the cookies _ga and _ga_L5685H6TXW (up to 2 years) are set and visits can be recognised across pages and sessions. Google Signals, ad personalisation, remarketing and data sharing with other Google products are switched off. Google acts as a processor and may transfer data outside the EEA (including to the USA) under the EU-US Data Privacy Framework or standard contractual clauses. Analytics data is kept for 14 months after your last visit. Legal bases: your consent (Article 6(1)(a) GDPR) for cookies and recognition across pages, and my legitimate interest (Article 6(1)(f) GDPR) in cookie-less measurement of how the website is used; you can object to the latter by writing to maksymilian@m-maciejewski.com. You can withdraw consent at any time through the “Cookie settings” link in the footer, which also deletes the analytics cookies. The choice is remembered in your browser (local storage key mm-consent) for 12 months.

Links to other websites (LinkedIn, planit-maciejewski.pl) lead to services with their own privacy policies. They receive data only if you follow the link.

5. Recipients

SEOHOST (as a processor), which hosts this website; Google Ireland Limited (Google Analytics, as a processor); Google (Google Workspace, as a processor), which runs the mailbox that receives your messages; AhaSend B.V. (Amsterdam, Netherlands, as a processor), which delivers messages sent through the contact form; and, where the law requires, accounting and legal advisers and public authorities. I do not sell personal data.

6. How long data is kept

Data is kept only as long as needed to handle your enquiry and any resulting cooperation, and is deleted or anonymized within 30 days after it ends. Longer retention applies only where the law requires it (for example accounting rules) or where the data is needed to establish, exercise or defend legal claims, and then for no longer than 3 years.

7. Your rights

• Access to your personal data.
• Rectification.
• Erasure.
• Restriction of processing.
• Data portability.
• Objection to processing based on my legitimate interest (Article 21 GDPR).

To use these rights, write to maksymilian@m-maciejewski.com. I may suspend an erasure request where I need the data to protect a legitimate interest, for example to defend legal claims.

You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.

8. Security

The website is served over an encrypted HTTPS connection, and the software used to process personal data is kept up to date.

9. Related website and terms

The separate website planit-maciejewski.pl, run by the same business, has its own privacy policy and service terms. They apply to that website only. This website has no accounts, newsletter or tools, so it has no separate terms of service.

10. Changes and version history

Changes to this policy are published on this page and take effect on the date stated in its version line. Replaced versions are kept online for reference.

• Version 1.5, effective from 29 October 2026 (current): explains that campaign tags in link addresses (utm parameters) are recorded with the visit.
• Version 1.4, effective 26–28 October 2026 (replaced): adds the PlanIT company logo link click to the interaction events. Archived copy.
• Version 1.3, effective 26 October 2026 (replaced): adds anonymous interaction events in Google Analytics 4 (phone, LinkedIn and contact clicks, email copy, contact form sent). Archived copy.
• Version 1.2, effective 21–25 October 2026 (replaced): Google Analytics 4 tag loads on every page view in advanced consent mode, with cookie-less measurement before consent. Archived copy.
• Version 1.1, effective 21 October 2026 (replaced): Google Analytics 4 only after consent. Archived copy.
• Version 1.0, effective 19–20 October 2026 (replaced): archived copy.