Privacy & Cookie Policy

1. Who is responsible for your data?

The controller of personal data processed through this portal is PCART Sp. z o.o., operating the poMaturze.pl education network.

For privacy questions and requests, contact redakcja@pomaturze.pl.

2. Data we process and why

When you visit the portal, the hosting infrastructure processes technical information such as your IP address, requested pages, browser details, timestamps and error information. We use it to deliver the website, maintain security and diagnose faults. The legal basis is our legitimate interest in running a secure and reliable portal (Article 6(1)(f) GDPR).

Search filters run in your browser. We do not require an account, and this portal does not currently contain an application form or newsletter registration. If you email us, we process the contact details and information you provide to answer your request. Depending on the request, the legal basis is our legitimate interest in handling correspondence or taking steps at your request before entering into a contract (Article 6(1)(f) or 6(1)(b) GDPR).

If you accept analytics, Google Analytics processes pseudonymous identifiers, page visits, approximate location, browser and device information and session activity to help us improve the portal. The legal basis is your consent (Article 6(1)(a) GDPR). We do not send your search terms, email address or telephone number through our analytics configuration.

3. Your cookie choices

Google Analytics is blocked until you select Accept analytics or enable analytics in the settings. Rejecting analytics does not prevent you from using the portal. Advertising storage, advertising personalisation and Google signals are not enabled by this integration.

You can change or withdraw your consent at any time using Cookie settings in the footer. Withdrawing consent stops further analytics collection on this browser and removes the Google Analytics cookies accessible to the portal. It does not affect the lawfulness of processing that took place before withdrawal.

Your browser also lets you clear or block cookies and local storage. Clearing the consent choice causes the portal to ask again.

4. Maps and external websites

Maps use OpenStreetMap services. When a map loads, your browser connects to the map provider, which receives technical information such as your IP address, browser details and the requested map tiles. Maps on the homepage load when you scroll near them; embedded location maps load as you approach them. This processing provides the location feature and is separate from optional analytics. See the OpenStreetMap Foundation Privacy Policy.

The Get directions link opens Google Maps. University websites and social media links open services operated by their respective providers. Their privacy policies apply after you follow these links; social media icons on our portal are links, not embedded tracking widgets.

5. Who may receive data?

Our hosting provider is MyDevil.net, operated by ADMIN.NET.PL. Authorised staff and service providers may access data only as required to operate, secure and support the portal. Google provides the optional Google Analytics service. Map providers receive the requests needed to display their maps. We may disclose information to public authorities where required by law.

Google and map-service providers may process data outside the European Economic Area. Where GDPR requires safeguards for a transfer, these may include an applicable adequacy decision or standard contractual clauses. Information about Google’s processing and safeguards is available in Google’s Privacy Policy and its data processing terms. Contact us for information about safeguards relevant to our processing.

6. How long is data kept?

We retain correspondence for as long as needed to handle the request and, where relevant, to meet legal obligations or establish, exercise or defend claims within applicable limitation periods. Technical logs are retained only for operational, security and troubleshooting needs, in accordance with the hosting provider’s log-retention arrangements.

Google Analytics user-level and event-level retention is set to 2 months. Google applies deletion according to its retention schedule; this setting does not apply to standard aggregated reports. Browser storage periods are listed above.

7. Your rights

Subject to the conditions of GDPR, you may request access to your personal data, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent where processing relies on consent. To make a request, email redakcja@pomaturze.pl.

You may complain to a data protection supervisory authority, including the Polish President of the Personal Data Protection Office (UODO), or the authority in your country of habitual residence, place of work or alleged infringement. Visit UODO for contact information.

The portal does not make automated decisions about you that produce legal or similarly significant effects.

8. Changes to this policy

We may update this policy when the portal’s features, providers or data practices change. The date above identifies the current version. If a change requires a new consent choice, we will ask for it.