Privacy Policy

Governing law: MISUS is based in Poland and this policy is governed by Polish law and the EU GDPR. The Polish version at misus.pl/polityka-prywatnosci is the reference text; this English translation is provided for convenience.

1. Data controller

The controller of personal data processed in connection with the use of misus.pl is Maciej Jancz, operating under the brand MISUS, address: Niewierowo 32, 76-200 Słupsk, Poland. Data-protection contact: kontakt@misus.pl.

The brand currently operates as działalność nierejestrowana (an unregistered small-scale business under Polish law, art. 5 of the Business Law Act). Polish tax IDs (NIP, REGON) are not assigned. Full registration details will be published once the business is formally registered.

2. Scope and purpose of processing

• Responding to inquiries from the contact form: name, company, email, phone, message and optional area of interest. Legal basis: Art. 6(1)(b) and (f) GDPR.
• Performing the service contract: client billing details, contact persons, correspondence. Legal basis: Art. 6(1)(b) GDPR.
• Complying with accounting and tax obligations. Legal basis: Art. 6(1)(c) GDPR.

3. Retention

• Contact-form inquiries: up to 3 months from last correspondence if no contract is concluded.
• Contract-related data: for the duration of the contract and the applicable limitation period.
• Accounting records: for the period required by law.

4. Recipients and providers

• Hosting and site infrastructure: Lovable (Cloudflare Workers).
• Email: Zoho Mail.
• Domain registration: Squarespace Domains (on the client's request).

MISUS does not currently use marketing analytics (Google Analytics, Meta Pixel) or reCAPTCHA. Data is not profiled and is not used for automated decision-making.

5. Cookies

The site uses only technical cookies necessary for correct operation. No optional marketing or analytics cookies are used, and no consent banner is required.

6. Your rights

Data subjects have the right to access, rectify, erase, restrict, port and object to processing. Where processing is based on consent, the consent may be withdrawn at any time without affecting the lawfulness of prior processing. A complaint may be filed with the Polish supervisory authority (UODO).

Requests should be sent to kontakt@misus.pl.

7. Transfers outside the EEA

Some providers (e.g. Lovable, Squarespace Domains) may process data outside the EEA. Transfers are made using the European Commission's standard contractual clauses or another mechanism permitted by the GDPR.

8. Changes

Current version: 1.0, in force from 21 July 2026. Updates are published on this page with their effective date.