Privacy policy and cookies WebPedia

Last updated: 01.02.2026

This Privacy Policy defines the principles of processing and protecting personal data provided by Users in connection with the use of the WebPedia website services (hereinafter referred to as the “Service”).

We make every effort to respect your privacy and protect the personal information you provide when using the Website, taking all necessary actions to ensure this protection.

Table of contents

WebPedia privacy policy – data security and processing

I. Personal data controller

The controller of personal data contained in the Service is:

Webpedia Dawid Maliczewski
with registered office at: Tramwajowa 5/9, 76-200 Słupsk
VAT ID: 8391611225, REGON: 383018530

Contact regarding personal data matters is possible via:

  • the contact form available in the “Contact” section.
  • Email address:

↑ Back to top

II. Purposes and legal bases of data processing

We process your personal data for the following purposes, based on the applicable legal grounds under GDPR:

Handling inquiries via contact and quotation forms

Purpose: Responding to inquiries, preparing preliminary project estimates and conducting correspondence.

Scope of data: First and last name, email address, phone number, message content.

Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR (legitimate interest of the Controller – building customer relationships).

Analytics and remarketing (Cookies)

Purpose: Analyzing website traffic statistics (e.g. traffic sources, time spent on the site) and displaying personalized ads on external platforms (Google, Facebook).

Legal basis: Article 6(1)(a) GDPR (user consent expressed via the cookie banner).

Direct marketing of own services (without tracking cookies)

Purpose: Contacting customers who expressed interest in the offer (e.g. sending an offer after an inquiry) and providing information within ongoing cooperation.

Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller – marketing of own services).

Fulfilment of legal obligations

Purpose: Issuing invoices and accounting activities (in case of paid cooperation).

Legal basis: Article 6(1)(c) GDPR (legal obligation imposed on the Controller by tax regulations).

Establishing, pursuing and defending claims

Purpose: Archiving data in case it is necessary to demonstrate facts in legal proceedings.

Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).

↑ Back to top

III. Recipients of personal data

We ensure the confidentiality of your data. We do not sell personal data to third parties. However, data may be transferred to entities cooperating with us in the provision of services (Data Processors), only to the necessary extent:

  • Hosting and domain provider: SEOHOST Sp. z o.o., ul. Obornicka 330, 60-689 Poznań – for data storage on servers and email service.
  • Office and cloud services provider: Google Ireland Limited (Google Workspace) – for email communication and project documentation storage.
  • Accounting services provider (optional): Web INnovative Software Sp. z o.o., ul. Bierutowska 57-59, 51-317 Wrocław (wFirma) – for invoicing and accounting services (if a transaction is concluded).
  • Analytics and marketing service providers: Google Ireland Limited (Google Analytics 4, Google Ads) and Meta Platforms Ireland Limited (Facebook, Instagram, Meta Ads).

Some of the above entities (Google, Meta) may process data outside the European Economic Area (EEA), e.g. in the USA. These entities declare adequate data protection through mechanisms such as the Data Privacy Framework or Standard Contractual Clauses (SCC).

↑ Back to top

IV. Cookies and tracking tools

The Service uses cookies – small text files stored on the User’s device.

The legal basis for using non-essential cookies is the User’s consent (Article 6(1)(a) GDPR in conjunction with Article 173 of the Telecommunications Law).

In accordance with legal requirements (including Google Consent Mode v2), we divide cookies into:

  • Necessary: required for the proper and secure operation of the website (e.g. saving language settings, session handling, storing cookie consents). These cookies are loaded by default under Article 173(3) of the Telecommunications Law.
  • Analytics (Google Analytics 4): allow us to analyze statistics; data is processed in an anonymized manner (IP masking).
  • Marketing (Google Ads, Meta Pixel): enable displaying ads tailored to your interests (remarketing).

Consent management

Upon your first visit, a cookie banner is displayed allowing you to give informed consent for individual cookie categories. You may withdraw or modify your consent at any time via the “Cookie Settings” link in the website footer or through your browser settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

↑ Back to top

V. Embedded content from external services

The website may contain embedded video content (YouTube, Vimeo) and social media widgets. Playing a video or interacting with a widget may result in cookies being placed by the providers of these services (Google/YouTube, Vimeo, Meta). The Service Operator has no control over the privacy policies of these external providers.

↑ Back to top

VI. User rights

In accordance with GDPR, you are entitled to the following rights:

  • The right to access your personal data and obtain a copy.
  • The right to rectify (correct) your data.
  • The right to erasure of data (“right to be forgotten”).
  • The right to restrict processing.
  • The right to object to processing (including profiling) based on the Controller’s legitimate interest.
  • The right to data portability.
  • The right to withdraw consent at any time.

To exercise the above rights, please contact us using the details provided in section I. You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

↑ Back to top

VII. Data retention periods

Your data will be stored for the following periods:

  • Contact/quotation form data: for the time necessary to handle the inquiry and then for the limitation period of potential claims (usually 3 years for business-related claims).
  • Invoice data: for 5 years from the end of the calendar year in which the tax payment deadline expired.
  • Analytics and marketing data: until consent is withdrawn or a valid objection is raised (cookies expire according to their lifetime settings, up to a maximum of 2 years for Google Analytics).

↑ Back to top

VIII. Security

We use SSL encryption and other technical and organizational measures to protect your data against unauthorized access, loss or alteration. Only authorized persons bound by confidentiality obligations have access to the data.

↑ Back to top

IX. Changes to the privacy policy

We reserve the right to introduce changes to this Privacy Policy due to technological development, changes in data protection law or the development of the Service. Any changes will be communicated in a clear and visible manner on the website.

↑ Back to top