Privacy Policy - Jakub Makurat

RODO | jakubmakurat.com | Jakub Makurat Efineo


Website	https://jakubmakurat.com
Data Controller	Jakub Makurat, operating under the business name Jakub Makurat Efineo
Business Address	ul. Polska 39, 81-595 Gdynia, Pomeranian Voivodeship, Poland
Tax ID (NIP) / REGON	5860201901 / 221489866
Contact	kontakt@jakubmakurat.com, +48 663 882 663
Version	30 May 2026

1. Data Controller

The controller of personal data processed in connection with the use of the Website is Jakub Makurat, operating under the business name Jakub Makurat Efineo, with its business address at ul. Polska 39, 81-595 Gdynia, Pomeranian Voivodeship, Poland, Tax ID: 5860201901, REGON: 221489866.

For any privacy and data protection matters, please contact us at: kontakt@jakubmakurat.com.

We have not appointed a Data Protection Officer (DPO) unless stated otherwise on the Website.

This Policy explains what data we collect, why we process it, the legal basis for doing so, how long we keep it, and your rights regarding your personal data.

2. Data Categories

Contact and identification data: first name, last name, email address, phone number, company name, job title.
Enquiry and service data: message content, consultation topic, business needs, preferred contact time, information required to prepare a quote.
Billing and payment data: invoice details, Tax ID, address, payment information, transaction ID, payment status.
Newsletter data: email address, consent history, subscription and unsubscription dates, email activity (provided the mailing tool supports this and you have consented).
Technical and analytics data: IP address, cookie IDs, device type, browser, operating system, approximate location, traffic source, website activity.
Marketing data: advertising IDs and interactions with ads or pixels (if you have given the appropriate consent).

3. Purposes, Legal Bases, and Retention Periods

Purpose	Data Scope	Legal Basis	Retention Period
Contact form handling	Contact data, message content	Art. 6(1)(f) GDPR (legitimate interest in handling enquiries)	Until correspondence ends, but no longer than 2 years from the last contact, unless another basis applies.
“Book a Consultation” form	Contact data, consultation topic, company data	Art. 6(1)(b) GDPR (pre-contractual steps); Art. 6(1)(f) GDPR	Duration of handling the request and the limitation period for claims.
Service provision	Client data, contact data, service-related data	Art. 6(1)(b) GDPR	Duration of the contract and the limitation period for claims.
Newsletter	Email address, consent history, activity	Art. 6(1)(a) GDPR (consent); Art. 6(1)(f) GDPR (defense against claims)	Until consent is withdrawn, and thereafter for the time necessary to demonstrate accountability.
Direct marketing	Contact data, contact history, service interests	Art. 6(1)(f) GDPR or consent, depending on the communication channel	Until you object or withdraw your consent.
GA4 analytics	Cookie IDs, technical data, activity	Art. 6(1)(a) GDPR (consent to analytics cookies)	As per tool settings, typically up to 14 months or as configured.
LinkedIn Insight Tag and Meta Pixel	Cookie IDs, marketing events	Art. 6(1)(a) GDPR (marketing consent)	As per platform settings and user consent.
PayNow and Autopay payments	Transaction data, payment status, payer data	Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR	Payment processing time and statutory accounting/tax retention periods.
Accounting and taxes	Invoice and billing data	Art. 6(1)(c) GDPR	Required statutory period, generally 5 tax years.
Establishing and defending claims	Data related to the case	Art. 6(1)(f) GDPR	Until the statutory limitation period for claims expires.

4. Data Recipients

Your data may be shared with entities that provide us with technical and organizational support. This includes hosting providers, email services, WordPress management, newsletter systems, CRMs, analytics and marketing tools, accounting firms, law firms, payment operators, and public authorities if required by law.

For payments, data may be shared with PayNow or Autopay, depending on your chosen payment method.

For analytics and marketing, data may be shared with Google, LinkedIn, and Meta, provided you have consented to analytics or marketing cookies.

5. Data Transfers Outside the EEA

Using tools such as Google Analytics 4, Google Tag Manager, LinkedIn Insight Tag, Meta Pixel, or newsletter systems may involve transferring data outside the European Economic Area (EEA).

Any transfers outside the EEA are based on appropriate legal mechanisms, such as an adequacy decision, Standard Contractual Clauses (SCCs), or other safeguards required by the GDPR.

Detailed information about data transfers can be found in the privacy policies of the respective tool providers.

6. Your Rights

You have the following rights regarding your personal data:

Right to access your data
Right to rectify your data
Right to erase your data (right to be forgotten)
Right to restrict processing
Right to data portability
Right to object to processing based on legitimate interest
Right to withdraw your consent at any time
Right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) in Poland.

To exercise your rights, please contact us at: kontakt@jakubmakurat.com.

7. Voluntary Provision of Data

Providing your data is voluntary but may be necessary to handle an enquiry, subscribe to the Newsletter, book a consultation, enter into a contract, deliver a service, or process a payment.

Failure to provide the information required in our forms may prevent you from sending a request or using our services.

8. Profiling and Marketing

We may analyze the effectiveness of our marketing campaigns and user activity on the Website using Google Analytics 4, LinkedIn Insight Tag, and Meta Pixel, strictly based on your consent.

If you consent to marketing cookies, your data may be used to build audiences, measure conversions, and run remarketing campaigns.

We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

9. Data Security

We apply technical and organizational measures proportionate to the risk to protect your data. These include restricting access to admin panels, limiting access to data, using SSL/TLS encryption, maintaining backups, and working with professional service providers.

Please avoid sending confidential information, trade secrets, or special category data through our forms unless absolutely necessary and agreed upon in advance.

10. Changes to the Privacy Policy

This Policy may be updated to reflect changes in the law, Website features, new tools, newsletters, payments, digital products, or other functionalities.

The current version of the Privacy Policy will always be available on the Website.