Privacy Policy
Last updated: August 2026
1. Data Controller
This Privacy Policy explains how personal data is collected, processed and protected when you visit www.nzokajohn.com.
The data controller is:
John Nzoka (NJN)
NIP: 7010687309
REGON: 543537314
Mińska 62/54
03-828 Warsaw
Poland
Email:
contact@nzokajohn.com
The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and the Polish Act on the Protection of Personal Data.
2. What Personal Data We Collect
Depending on how you use our website, we may collect the following information:
- Contact Form Data: Name, email address, and message submitted through the contact form.
- Discovery Call Booking (Cal.com): Name, email address, selected date/time, timezone, and consultation notes.
- Server and Technical Logs: IP address, browser type and version, operating system, referrer URL, and access timestamps (collected automatically for server security and stability).
- Analytics Data: Usage metrics, page interactions, and traffic statistics collected via Google Site Kit and Analytics (subject to your cookie consent).
We do not intentionally collect special categories of personal data (sensitive personal data).
3. Purposes and Legal Bases for Processing
Personal data is processed under Article 6(1) of the GDPR for the following purposes:
- Article 6(1)(a) GDPR – your consent when submitting the contact form or accepting non-essential cookies.
- Article 6(1)(b) GDPR – processing necessary to take steps at your request prior to entering into a contract (responding to project enquiries, quotations, scheduling discovery calls).
- Article 6(1)(c) GDPR – compliance with legal obligations (accounting, tax records, regulatory compliance).
- Article 6(1)(f) GDPR – our legitimate interests (maintaining website security, preventing abuse and spam, diagnosing technical issues).
4. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations:
- General Enquiries & Booking Details: Retained for the duration of communication and up to 2 years after the last contact unless ongoing business cooperation ensues.
- Commercial & Invoicing Records: Retained for 5 years from the end of the calendar year in which tax obligations arose, pursuant to Polish tax law.
- Server Logs: Retained for 7 to 30 days for security analysis and diagnostic purposes, after which they are automatically deleted or anonymized.
5. Recipients of Personal Data
Your data may be processed by trusted service providers operating under data processing agreements, including:
- Website hosting and infrastructure provider (Hostinger)
- Booking and scheduling provider (Cal.com)
- Email and communication service providers
- Analytics and site performance providers (Google)
We do not sell, rent, or trade your personal data to third parties.
6. International Transfers
Some third-party services used on this website (such as Google or Cal.com) may process data outside the European Economic Area (EEA).
Where international data transfers occur, they are conducted in accordance with GDPR Chapter V mechanisms, including the EU-U.S. Data Privacy Framework (DPF) and European Commission Standard Contractual Clauses (SCCs) with supplementary safeguards.
7. Cookies and Consent Management
This website uses essential cookies for proper site operation and optional analytics cookies to understand site performance.
Where legally required, non-essential cookies are only placed after obtaining your consent. You can manage or revoke your cookie preferences at any time using the on-site Complianz cookie banner.
8. Your Rights
Under the GDPR, you have the right to:
- Access and receive a copy of your personal data.
- Correct inaccurate or incomplete personal data.
- Request deletion of your personal data (right to be forgotten).
- Restrict processing of your data.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
- Request data portability.
- Lodge a complaint with the supervisory authority in Poland: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl).
To exercise your rights, please contact: contact@nzokajohn.com
9. Automated Decision-Making
We do not employ automated decision-making or profiling as defined in Article 22 of the GDPR.
10. Website Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
However, no method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.
11. External Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this website together with the date of the latest revision.
13. Contact
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
John Nzoka (NJN)
Mińska 62/54
03-828 Warsaw
Poland
Email:
contact@nzokajohn.com