BARZYCKIDRIFT

Home / Privacy Policy

Legal

Privacy Policy

Effective October 25, 2026. Wersja polska

1. Data controller

The controller of personal data is Rafał Barzycki, a sole proprietor trading as BarzyckiDrift (website: barzyckidrift.pl). Contact for privacy matters: rafal@barzyckidrift.pl.

2. The website barzyckidrift.pl

  • The contact form sends the data you enter (company, name, email or phone, message and the selected package) to the website's server, which emails it to Rafał Barzycki (delivery service: Microsoft Azure Communication Services). The data is not stored in a database on the website; it remains only in the controller's mailbox and is used to answer your enquiry. The basis is your initiative and our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR). The website has no accounts and sets no cookies of its own. We use no advertising or tracking tools.
  • It is hosted by Cloudflare, Inc. (Cloudflare Pages), which processes technical connection data (e.g. IP address, browser headers) in server logs to deliver the site and protect it from abuse.
  • We collect page-view statistics with Cloudflare Web Analytics. It uses no cookies or localStorage, assigns no identifiers to visitors and does no fingerprinting. It collects anonymous data about the visit: page address, referring site, country, device and browser type, and load times. The basis is our legitimate interest in understanding interest in the site (Art. 6(1)(f) GDPR), and Cloudflare, Inc. acts as a processor.
  • Fonts are served from our own hosting. Videos on the Video page (Polish version) load from YouTube (youtube-nocookie.com, privacy-enhanced mode). Your browser then connects to Google servers, which may receive your IP address; once you play a video, YouTube may store data under its own policy.
  • If you email or call us, you provide the data yourself (email address, name, message, phone number). We use it only to reply and discuss cooperation (Art. 6(1)(f) GDPR) and keep it while the correspondence lasts, then until potential claims expire.

3. The app social.barzyckidrift.pl (statistics dashboard)

This is the controller's private tool for analysing the performance of his own social media channels. It is not offered to other users, has no registration and is not used to profile third parties.

  • Data: the app connects only to accounts owned by the controller: Instagram and Facebook (Meta Graph API), YouTube (YouTube Data API and YouTube Analytics API) and TikTok. It reads account and post statistics (e.g. followers, views, reach, likes, comments, watch time), video and post metadata, and the text of public comments on his own posts (without their authors' data).
  • Permissions: read-only. Google: youtube.readonly and yt-analytics.readonly. Meta: read access to page and Instagram insights. TikTok: user.info.basic, user.info.stats, video.list. The app never publishes, deletes or modifies anything on these accounts.
  • Access tokens: stored encrypted in a Cloudflare D1 database. Statistics are kept in the same database; backups do not contain tokens.
  • No sharing: data is not sold, rented or disclosed to third parties, not used for advertising, and not used to train AI models. Apart from the infrastructure provider (Cloudflare) and the platforms we read from, nobody receives it.
  • Deletion: you can disconnect a platform at any time in the app (Connections tab), which deletes the stored tokens. To delete collected statistics, email rafal@barzyckidrift.pl; we delete them without undue delay. You can also revoke access with the provider: myaccount.google.com/permissions (Google), "Apps and Websites" settings (Meta), account security settings (TikTok).

4. Google API Services User Data Policy, including Limited Use

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Data from Google APIs (YouTube) is used only to show the controller's own channel statistics in the dashboard.
  • We do not transfer it to third parties unless needed to operate the app, required by law, or as part of a merger or acquisition (with consent).
  • We do not use it for advertising (including personalised ads) or to gather information about people for advertising, and we do not sell it.
  • Humans do not read this data, except the controller (account owner) and where necessary for security, required by law, or with the owner's consent.
  • We do not use it to develop, improve or train machine learning or AI models.

5. B2B correspondence and sponsorship offers

  • Purpose: sending sponsorship offers to companies and discussing cooperation.
  • Data: business contact details of companies and contact persons (company, business email, possibly name, surname and job title) taken from public sources: company websites, public registers and business profiles.
  • Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR), namely finding sponsors for his sporting and promotional activity. Messages go to businesses at business addresses in connection with their activity.
  • Recipients: Microsoft (Azure Communication Services), through which we send the offer emails, and email and infrastructure providers. Data is not sold.
  • Retention: until you object or opt out; once cooperation starts, until it ends and limitation periods lapse.
  • Objection and opt-out: you may object at any time by replying to the message or writing to rafal@barzyckidrift.pl. After an objection we stop writing and keep only the address needed to make sure we do not write again.
  • We state the data source in the first message to a person, or on request (Art. 14 GDPR).

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and the right to object to processing based on legitimate interest (Art. 15 to 21 GDPR). To exercise them, write to rafal@barzyckidrift.pl. You may also lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office, UODO, Poland (uodo.gov.pl, ul. Stawki 2, 00-193 Warsaw).

Providing data is voluntary. We make no decisions based solely on automated processing and do not transfer data outside the European Economic Area, except through Cloudflare, Google and Microsoft (Azure Communication Services) services, which may also process data outside the EEA under standard contractual clauses or a European Commission adequacy decision. Data in Microsoft Azure Communication Services, through which we send emails, is stored in Europe (within the EEA).

7. Changes

We may update this policy, e.g. when the site or the app changes. The current version is always at this address, and the effective date is shown at the top.