Privacy policy
Effective from 22 October 2026.
Who is the controller
The controller of personal data processed in connection with this website is Rafał Rudko. For anything related to your data, write to rafalrudko.cmzzs@gmail.com.
What data, why, and on what legal basis
Visiting the website
The server hosting the website records technical information about each request in its logs: IP address, date and time, the page requested and browser details. They are used to keep the website running and secure (the controller's legitimate interest, Art. 6(1)(f) GDPR). The logs are kept by the hosting provider for the period set by its configuration and are not used to identify visitors.
Statistics (Google Analytics)
Only if you consent in the banner, the website uses Google Analytics 4 to see how many people visit it and what they read. It collects: a random identifier stored in a cookie, pages visited, visit duration, approximate location (city or country level), device and browser type. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings” link in the footer; withdrawal does not affect the lawfulness of processing before it. Data in Google Analytics is kept for the period set in the service (2 months), and I only see it in aggregated reports. Without consent, Google Analytics is not loaded at all.
Email contact
If you write to me, I process your email address and the content of your message to reply and continue the conversation — for example about buying a painting, collaboration or workshops (Art. 6(1)(b) GDPR for steps before entering into a contract, otherwise Art. 6(1)(f) GDPR). I keep messages as long as needed for the conversation and any arrangements made, and then as long as they may be needed to protect against claims.
Cookies and browser storage
| Name | Purpose | Duration |
|---|---|---|
cookie-consent (browser storage, not a cookie) | remembers your choice in the banner; strictly necessary, no consent needed | until you clear the site data in your browser |
_ga, _ga_* | Google Analytics — distinguishing visitors; only after consent | up to 2 years; removed when you withdraw consent |
Fonts are served from the same domain as the website, so loading them does not pass your data to anyone else. The website does not embed videos, maps or social media buttons — the Instagram, Facebook and YouTube links in the footer are plain links; once you follow them, those services' own policies apply.
Who receives the data
- the hosting provider (seohost.pl, servers in Poland) — stores the website and server logs;
- Google — provider of Google Analytics (only after consent) and of Gmail, which I use for correspondence.
Google may also process data in the United States. Such transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, in which Google participates. I do not sell data or share it for marketing purposes.
Your rights
You have the right to:
- access your data and receive a copy,
- have your data rectified,
- have your data erased or its processing restricted,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time (the “Cookie settings” link in the footer),
- lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), or the authority in your country.
To exercise your rights, write to rafalrudko.cmzzs@gmail.com. Providing data is voluntary. Data is not used for automated decision-making or profiling.
Changes to this policy
If the website starts collecting other data (for example when selling online courses), this policy will be updated before the change. The date of the current version is shown at the top of the page.