Privacy policy and cookies WebPedia
Last updated: 01.02.2026
This Privacy Policy defines the principles of processing and protecting personal data provided by Users in connection with the use of the WebPedia website services (hereinafter referred to as the “Service”).
We make every effort to respect your privacy and protect the personal information you provide when using the Website, taking all necessary actions to ensure this protection.
Table of contents
I. Personal data controller
The controller of personal data contained in the Service is:
Webpedia Dawid Maliczewski
with registered office at: Tramwajowa 5/9, 76-200 Słupsk
VAT ID: 8391611225, REGON: 383018530
Contact regarding personal data matters is possible via:
- the contact form available in the “Contact” section.
- Email address:
II. Purposes and legal bases of data processing
We process your personal data for the following purposes, based on the applicable legal grounds under GDPR:
Handling inquiries via contact and quotation forms
Purpose: Responding to inquiries, preparing preliminary project estimates and conducting correspondence.
Scope of data: First and last name, email address, phone number, message content.
Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR (legitimate interest of the Controller – building customer relationships).
Analytics and remarketing (Cookies)
Purpose: Analyzing website traffic statistics (e.g. traffic sources, time spent on the site) and displaying personalized ads on external platforms (Google, Facebook).
Legal basis: Article 6(1)(a) GDPR (user consent expressed via the cookie banner).
Direct marketing of own services (without tracking cookies)
Purpose: Contacting customers who expressed interest in the offer (e.g. sending an offer after an inquiry) and providing information within ongoing cooperation.
Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller – marketing of own services).
Fulfilment of legal obligations
Purpose: Issuing invoices and accounting activities (in case of paid cooperation).
Legal basis: Article 6(1)(c) GDPR (legal obligation imposed on the Controller by tax regulations).
Establishing, pursuing and defending claims
Purpose: Archiving data in case it is necessary to demonstrate facts in legal proceedings.
Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).
III. Recipients of personal data
We ensure the confidentiality of your data. We do not sell personal data to third parties. However, data may be transferred to entities cooperating with us in the provision of services (Data Processors), only to the necessary extent:
- Hosting and domain provider: SEOHOST Sp. z o.o., ul. Obornicka 330, 60-689 Poznań – for data storage on servers and email service.
- Office and cloud services provider: Google Ireland Limited (Google Workspace) – for email communication and project documentation storage.
- Accounting services provider (optional): Web INnovative Software Sp. z o.o., ul. Bierutowska 57-59, 51-317 Wrocław (wFirma) – for invoicing and accounting services (if a transaction is concluded).
- Analytics and marketing service providers: Google Ireland Limited (Google Analytics 4, Google Ads) and Meta Platforms Ireland Limited (Facebook, Instagram, Meta Ads).
Some of the above entities (Google, Meta) may process data outside the European Economic Area (EEA), e.g. in the USA. These entities declare adequate data protection through mechanisms such as the Data Privacy Framework or Standard Contractual Clauses (SCC).
V. Embedded content from external services
The website may contain embedded video content (YouTube, Vimeo) and social media widgets. Playing a video or interacting with a widget may result in cookies being placed by the providers of these services (Google/YouTube, Vimeo, Meta). The Service Operator has no control over the privacy policies of these external providers.
VI. User rights
In accordance with GDPR, you are entitled to the following rights:
- The right to access your personal data and obtain a copy.
- The right to rectify (correct) your data.
- The right to erasure of data (“right to be forgotten”).
- The right to restrict processing.
- The right to object to processing (including profiling) based on the Controller’s legitimate interest.
- The right to data portability.
- The right to withdraw consent at any time.
To exercise the above rights, please contact us using the details provided in section I. You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
VII. Data retention periods
Your data will be stored for the following periods:
- Contact/quotation form data: for the time necessary to handle the inquiry and then for the limitation period of potential claims (usually 3 years for business-related claims).
- Invoice data: for 5 years from the end of the calendar year in which the tax payment deadline expired.
- Analytics and marketing data: until consent is withdrawn or a valid objection is raised (cookies expire according to their lifetime settings, up to a maximum of 2 years for Google Analytics).
VIII. Security
We use SSL encryption and other technical and organizational measures to protect your data against unauthorized access, loss or alteration. Only authorized persons bound by confidentiality obligations have access to the data.
IX. Changes to the privacy policy
We reserve the right to introduce changes to this Privacy Policy due to technological development, changes in data protection law or the development of the Service. Any changes will be communicated in a clear and visible manner on the website.
