Privacy Policy and shop terms

1. Data Controller

The controller of personal data processed in connection with the website www.surowiecki.org is AnalyticsLab Krzysztof Surowiecki (tax ID / NIP: 8951774490, EU VAT: PL8951774490). For privacy, personal data and cookie matters, contact via the contact form.

No Data Protection Officer has been appointed because there is no such obligation. The contact address above is the proper channel for requests related to GDPR rights.

2. What data may be processed

Depending on how you use the website, the following categories of data may be processed:

• contact data: email address, name, message content and information provided in forms,
• newsletter data: email address, subscription status, consent record and mailing activity,
• purchase data: email address, product, payment status, Stripe transaction identifiers and invoice details if requested,
• technical data: IP address, cookie identifiers, device type, browser, operating system, approximate location and server logs,
• analytics data: visited pages, traffic sources, events, website interactions and cookie consent settings,
• data entered into free tools or calculators if a given tool needs to process it to generate a result.

Do not enter sensitive data, third-party data or confidential information into forms, calculators or messages unless it is necessary for a specific matter.

3. Purposes, legal bases and voluntary provision of data

Providing data is voluntary, but in some cases necessary: without an email address it is not possible to reply to a message, send a newsletter, deliver a digital product or process a payment.

4. Cookies, Consent Mode and analytics

The website uses cookies and similar technologies. Some are necessary for the website to work, to remember consent settings and to maintain security. Other categories, especially analytics and marketing cookies, are activated according to your consent settings.

The website may use in particular: Google Tag Manager, Google Analytics 4, Google Consent Mode, Microsoft Clarity and tools required for email, forms, payments and digital products.

You can withdraw or change consent at any time in the cookie settings available in the website footer. You can also restrict cookies in your browser settings, although some website features may then work differently.

I do not use pre-ticked consent. Consent for non-essential cookies should be voluntary, informed and withdrawable.

5. Recipients and external tools

Data may be shared with providers that help operate the website and services, in particular:

• hosting, IT infrastructure, email and security providers,
• Brevo or other transactional email and newsletter providers,
• Stripe for payment processing of digital products,
• Google and Microsoft for analytics, tags, Consent Mode and website optimisation,
• accounting, legal or administrative providers where needed,
• authorised public authorities where required by law.

Transfers outside the EEA

Some providers, especially global technology providers, may process data outside the European Economic Area. If such transfer occurs, it is based on appropriate legal mechanisms, such as an adequacy decision, the provider's participation in the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

6. How long data is stored

• contact data - for the time needed to handle the inquiry, then as needed to document correspondence or defend claims,
• contract or purchase data - for the duration of contract performance and the limitation period for claims,
• accounting and invoice data - for the period required by tax and accounting laws,
• newsletter data - until consent is withdrawn or you unsubscribe, and afterwards only as needed to prove prior consent,
• analytics and cookie data - according to the settings of a given tool or until consent is withdrawn where processing is based on consent,
• technical logs - for the time needed to maintain security and diagnose errors.

If the law requires longer storage, or data is needed to establish, pursue or defend legal claims, the retention period may be extended accordingly.

7. Your rights

You have the right to:

• access your data and obtain a copy,
• rectify your data,
• erase your data where GDPR conditions are met,
• restrict processing,
• data portability where processing is based on consent or contract and carried out by automated means,
• object to processing based on legitimate interest,
• withdraw consent at any time without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the President of the Polish Personal Data Protection Office.

Send requests using the contact form. A response will generally be provided within one month. If the request is complex or numerous, the deadline may be extended as provided by GDPR.

Supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

8. Digital shop terms

This section sets out the terms for selling digital products in the shop available at www.surowiecki.org/en/shop/ and on dedicated product pages. It forms the terms of providing electronic services in the shop and the conditions for concluding contracts for digital products.

8.1. Seller and contact

Digital products are sold by AnalyticsLab Krzysztof Surowiecki, operating under the Surowiecki.org brand.

• tax ID / NIP: 8951774490,
• EU VAT number: PL8951774490,
• website: www.surowiecki.org,
• email: [email protected],
• purchase, complaint and invoice enquiries: contact form.

8.2. Definitions

• Shop - the part of the website that enables purchase of digital products.
• Digital product - content delivered electronically, e.g. a PDF, Excel workbook, ZIP package or other downloadable file.
• Buyer - a natural person, legal entity or organisational unit placing an order.
• Order - the Buyer's declaration of intent to purchase a selected product, submitted through the checkout form and confirmed by payment.

8.3. Products, prices and taxes

The shop offers digital products, in particular calculators, guides, checklists, templates and other educational materials. The current offer, description, file scope, language version and price of each product are shown on the product page and in the shop catalogue.

• prices are shown in the currency indicated on the product page, most often PLN or USD,
• if the product page shows a price “+ VAT”, tax is added in line with applicable law,
• the final amount payable, including any tax, is shown in Stripe Checkout before payment,
• the purchase is one-time - it does not include a subscription unless the product page states otherwise.

8.4. Placing an order and concluding the contract

The purchase process works as follows:

1. Select a product in the shop or on its landing page.
2. Complete the checkout form: email address, optional invoice details and acceptance of immediate digital delivery terms.
3. Redirect to the secure Stripe Checkout payment page.
4. Pay for the order using a payment method available in Stripe.
5. After payment confirmation - delivery of the product as described in section 8.6.

The sales contract is concluded when Stripe successfully confirms payment. Confirmation includes an email with a download link and information on the purchase success page.

Before placing an order, the Buyer should read the product description, price, these shop terms and the privacy policy. Placing and paying for an order means acceptance of the sales terms.

8.5. Payment

Payments are handled by Stripe. Available methods, such as cards, Apple Pay or Google Pay, depend on the Buyer's country, currency and device.

• card details are not stored on Surowiecki.org,
• payment processing follows Stripe security standards,
• if payment fails or is cancelled, the order is not fulfilled,
• promotion codes may be used when active in Stripe Checkout.

8.6. Delivery of digital products

Digital products are delivered electronically only, with no delivery charge. After payment confirmation:

• a download link appears on the success page,
• an email with the download link is sent to the address provided,
• the download link is valid for up to 5 downloads,
• delivery usually takes place within a few minutes of payment confirmation.

If the email does not arrive within a reasonable time, check your spam or promotions folder. If there is still a problem, contact us via the contact form or [email protected], quoting the email address used for the purchase.

The Buyer is responsible for providing a correct email address and for being able to open the file on their own device. Technical requirements, such as Excel, LibreOffice Calc or a PDF reader, follow from the product description.

8.7. Right of withdrawal

Where the Buyer is a consumer, they generally have a 14-day right to withdraw from a distance contract without giving a reason, subject to statutory exceptions.

Under Article 38(1)(13) of the Polish Consumer Rights Act, an exception applies to paid digital content not supplied on a tangible medium. Supply may begin before the withdrawal period ends after the consumer has given express prior consent. The consumer must first be informed that the right of withdrawal will be lost once supply has been completed, acknowledge this information and receive confirmation of the consent.

Before placing an order, the Buyer is asked to consent to delivery of the digital content beginning immediately after payment, before the 14-day withdrawal period ends. The Buyer also acknowledges that the right of withdrawal will be lost once the digital content has been fully supplied. Confirmation of the consent is provided with the order information.

Separate voluntary refund or satisfaction guarantees may appear only on a specific product page. If such a promise is made, it applies only to the extent described there.

8.8. Complaints and conformity

Complaints about a purchased digital product, including download issues, corrupted files or non-conformity with the description, may be submitted:

• via the contact form,
• to [email protected].

Include the email address used for the purchase, product name, purchase date and a description of the issue. A response is provided without undue delay and no later than 14 calendar days from receipt of the complaint.

If non-conformity is confirmed, the Seller will take remedial action, in particular by enabling a new download, providing a corrected version or, where justified, refunding the price paid.

Consumers may also use out-of-court complaint and redress mechanisms, including the EU ODR platform: ec.europa.eu/consumers/odr/.

8.9. Licence and copyright

Digital products are protected by copyright. Purchase grants a licence to use the product for the Buyer's own internal use, or for the entity on whose behalf the purchase is made, as described on the product page.

• without the Seller's express consent, public sharing, resale, sublicensing or mass distribution of files is prohibited,
• removing authorship information, legal notices or licence metadata is prohibited,
• free content published on the website remains subject to the separate rules in section 9.

8.10. Invoices

An invoice can be issued on request. To receive one, select the invoice option in the checkout form and provide complete company details, including tax ID and address. The invoice is issued after payment and sent to the email address used for the order.

8.11. Product updates

The purchase covers the product version described on the page at the time of ordering. Information about possible material updates, their scope and delivery method is provided on the relevant product page. Buyers may be informed about material updates by email if that scope was clearly promised at the time of sale.

8.12. Final shop provisions

• Polish law applies to shop contracts, subject to mandatory consumer protection rules,
• the Seller may amend these shop terms for important reasons, including changes in law, offer or order fulfilment; amendments do not affect rights acquired under contracts concluded before the change,
• matters not regulated in this section are governed by the remaining parts of this document and applicable law.

9. Terms for using free content, guides and tools

Content published on the website, including articles, checklists, calculators, generators, tool comparisons and materials about analytics, AI, e-commerce, IT law, GDPR, cookies and data governance, is general informational and educational content.

Free content is not individual legal, tax, financial, investment, medical, accounting, technical or business advice. It does not create an advisory relationship, client-consultant relationship or any obligation to achieve a specific result.

You use the content and tools at your own responsibility. Before making a business, legal, financial, technical or organisational decision, you should verify the information in your own context, consider the current legal and technical state and, where needed, consult an appropriate specialist.

I make efforts to keep materials reliable and up to date, but I do not guarantee completeness, error-free operation, suitability for a specific purpose or applicability to every individual case. To the fullest extent permitted by law, the Controller is not liable for consequences of decisions made solely on the basis of free content available on the website.

If you need an assessment of a specific implementation, contract, cookie setup, AI system, analytics stack or data processing process, treat the website materials as a starting point, not as a final opinion.

10. Profiling and automated decisions

The website may use web analytics and statistical segmentation to understand which content is useful and how to improve the website. I do not make decisions about users based solely on automated processing that would produce legal effects or similarly significantly affect them.

11. Data security

I apply organisational and technical measures intended to protect data against unauthorised access, loss, alteration or disclosure. These include access limitation, software updates, secure email and payment services, and processing data only to the extent necessary for a given purpose.

12. Changes and contact

This document may be updated when the website scope, shop offer, tools, legal requirements or processing methods change. The current version is always available at https://www.surowiecki.org/en/privacy-policy/.

For privacy, personal data, cookies, shop purchases, complaints or content-use matters, use the contact form.