Privacy policy
and GDPR notice

01Data controller

The controller of personal data is Piotr Kędzierski, conducting business as Piotr Kędzierski Consulting, ul. św. Urszuli Ledóchowskiej 5F/5, 02‑972 Warsaw, Poland, VAT ID: 5372054822, REGON: 146864581 (the “Controller”). GotIt Lab is a trading brand of PKC — gotitlab.eu is operated by the same entity that operates kedzierski.eu. Contact for data protection matters: kontakt [at] gotitlab.eu. The Controller has not appointed a data protection officer.

02Scope of data and sources

We may process data provided in the contact form, in correspondence or when booking a meeting: name, e‑mail address, organisation, selected topic, message content, selected time slot and information entered in Google Calendar. While you use the site, technical data may be processed, such as IP address, request time, browser type, requested resource, error and security information. Subject to consent, Google Analytics may process online identifiers and data on how the site is used.

03Purposes and legal bases

• responding to an enquiry and conducting correspondence — Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where the enquiry aims at concluding a contract;
• concluding and performing a separate services agreement — Art. 6(1)(b) GDPR;
• arranging a meeting via Google Calendar — Art. 6(1)(b) GDPR for pre‑contractual steps, otherwise Art. 6(1)(f) GDPR;
• settlements and legal obligations — Art. 6(1)(c) GDPR;
• protecting the site, preventing abuse and establishing or defending claims — Art. 6(1)(f) GDPR;
• Google Analytics — only after consent, Art. 6(1)(a) GDPR.

04Recipients and providers

Data may be received by providers of services necessary to operate the site: Amazon Web Services (hosting and form delivery via SES), Google (Google Workspace, Google Calendar and — after consent — Google Analytics), as well as technical, accounting or legal service providers. The embedded calendar loads only after your action. Providers receive data only to the extent required to perform their tasks and on an appropriate legal basis.

05Transfers outside the EEA

Using global providers may involve access to data from outside the European Economic Area. In such cases the mechanisms provided for in the GDPR apply, in particular adequacy decisions or standard contractual clauses. The site’s main infrastructure runs in the AWS Frankfurt region (eu‑central‑1, EU).

06Retention periods

• enquiries and correspondence — for the time needed to handle the matter and then for the period required to defend against claims;
• booking data — for the time needed to arrange and hold the meeting, then according to the retention period of the relevant Google Workspace account or until earlier deletion;
• contractual and accounting records — for the period required by tax and accounting law;
• security logs — as a rule up to 30 days, unless an incident requires longer preservation of evidence;
• analytics data — according to the configured GA4 retention period or until consent is withdrawn.

07Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it — where applicable — and to object to processing based on legitimate interest. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.

08Complaint to the authority

You may lodge a complaint with the President of the Personal Data Protection Office: ul. Stanisława Moniuszki 1A, 00‑014 Warsaw, Poland, uodo.gov.pl.

09Voluntary provision of data

Providing data in the form is voluntary, but the fields marked as required are necessary to send an enquiry and receive a reply. Data from the form is not used for a newsletter or marketing without a separate legal basis.

10Automated decision‑making

Data is not used for decisions producing legal effects taken solely by automated means, nor for profiling for such purposes.

11Security

We apply TLS encryption, restricted administrative access, backups, form rate limits and measures against automated abuse. No internet transmission, however, offers an absolute guarantee of security.

12Cookies and changes to this document

Details on cookies and Google Analytics are set out in the Cookie policy. This document may be updated following changes in technology, services or law. The version date appears at the top of the page.