Get Started

Privacy Policy

Last updated: [DATE, e.g. 15 July 2026]

This Privacy Policy explains how personal data is collected and processed when you use the website cybersecurityninja.me (the “Website”). It is written to comply with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”).

1. Data Controller

The controller of your personal data is:

Pulsar IT Tomasz Szulczewski
Lesna 13A
05-110 Jablonna , Poland
NIP (Tax ID): PL1230194623
E-mail: [email protected]

You can contact me about any privacy matter using the e-mail address above.

2. What Data I Collect and Why

2.1 Contact form

When you use the contact form, I collect your name, e-mail address and the content of your message.

  • Purpose: responding to your enquiry and, where applicable, taking steps prior to entering into a contract.
  • Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract taken at your request) and Art. 6(1)(f) GDPR (my legitimate interest in handling correspondence).
  • Retention: for the duration of our correspondence and afterwards for up to [e.g. 3 years] for the purpose of establishing, exercising or defending legal claims.

2.2 Newsletter

When you subscribe to my newsletter, I collect your e-mail address (and your name, if you provide it).

  • Purpose: sending you the newsletter with content about Microsoft 365, cybersecurity and related services, which may include commercial information about my services.
  • Legal basis: Art. 6(1)(a) GDPR – your consent, given by submitting the sign-up form. You can withdraw consent at any time by clicking the unsubscribe link included in every newsletter e-mail or by contacting me directly. Withdrawal does not affect the lawfulness of processing before the withdrawal.
  • Retention: until you unsubscribe or withdraw consent.

The newsletter is operated using [NEWSLETTER PROVIDER, e.g. Mailchimp / ConvertKit (Kit) / Beehiiv], provided by [PROVIDER LEGAL NAME], a company based in the United States – see Section 5 on international transfers.

2.3 Scheduling a consultation

If you book a call via Calendly, your data (name, e-mail, selected time slot and any information you enter) is processed by Calendly LLC (USA) in order to arrange the meeting. Legal basis: Art. 6(1)(b) GDPR. Calendly’s own privacy notice applies additionally: calendly.com/privacy.

2.4 Analytics, statistics and advertising

With your consent (given via the cookie banner), the Website uses:

  • Google Analytics 4 (Google Ireland Ltd.) – to measure how visitors use the Website (pages visited, approximate location, device and browser type, traffic sources). IP addresses are processed in shortened/aggregated form.
  • Google AdSense (Google Ireland Ltd.) – to display advertising. Depending on your consent choices, ads may be personalised (based on cookies and identifiers) or non-personalised.
  • Jetpack Stats (Automattic Inc., USA) – basic site statistics.
  • Legal basis: Art. 6(1)(a) GDPR – your consent, expressed through the cookie banner. You can change or withdraw your choices at any time via the cookie settings link on the Website.
  • Retention: according to the cookie lifetimes listed in the cookie banner and the retention settings of each tool (Google Analytics 4: [e.g. 14 months]).

2.5 Server logs and security

Like virtually every website, the Website’s hosting and content delivery infrastructure automatically records technical data (IP address, date and time of request, requested URL, browser type). This data is used to ensure security, prevent abuse and diagnose technical issues. Legal basis: Art. 6(1)(f) GDPR – my legitimate interest in keeping the Website secure and functional.

3. Recipients of Your Data

Your data may be disclosed to service providers who process it on my behalf under data processing agreements (Art. 28 GDPR):

  • BigScoots LLC (USA) – website hosting;
  • RocketCDN / WP Rocket (WP Media SAS, France) – content delivery and caching;
  • Cloudflare, Inc. (USA) – DNS, security and e-mail address protection;
  • Automattic Inc. (USA) – Jetpack services (statistics, image CDN);
  • Google Ireland Ltd. / Google LLC (USA) – analytics and advertising;
  • KIT (USA) – newsletter delivery;
  • Calendly LLC (USA) – meeting scheduling;
  • Microsoft Ireland Operations Ltd. – e-mail and business productivity services (Microsoft 365).

Data may also be disclosed to public authorities where required by law.

4. Cookies

The Website uses cookies and similar technologies:

  • Necessary cookies – required for the Website to function (e.g. caching, security, saving your cookie consent choices). These do not require consent.
  • Analytics cookies – Google Analytics 4, Jetpack Stats (require consent).
  • Advertising cookies – Google AdSense (require consent).

On your first visit, a cookie banner lets you accept, reject or customise non-essential cookies. You can change your decision at any time via the [Cookie Settings] link in the footer, and you can also delete or block cookies in your browser settings. Blocking necessary cookies may affect how the Website works.

5. Transfers Outside the European Economic Area

Some of the providers listed above (BigScoots LLC, Google LLC, Automattic Inc., Cloudflare Inc., Calendly LLC, [NEWSLETTER PROVIDER]) are based in the United States. In particular, the Website is hosted on BigScoots servers located in the USA, which means that data submitted via the contact form is stored there. Transfers of personal data to these providers are carried out on the basis of:

  • the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (DPF), where the provider is certified under the DPF, and/or
  • Standard Contractual Clauses (SCCs) approved by the European Commission, together with additional safeguards where required.

You can request a copy of the relevant safeguards by contacting me at the e-mail address in Section 1.

6. Your Rights

Under the GDPR you have the right to:

  • access your data and obtain a copy of it (Art. 15),
  • rectify inaccurate data (Art. 16),
  • erase your data (“right to be forgotten”, Art. 17),
  • restrict processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interest (Art. 21),
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

To exercise any of these rights, contact me at the e-mail address in Section 1. You also have the right to lodge a complaint with a supervisory authority – in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl – or with the supervisory authority in your EU member state.

7. Is Providing Data Mandatory?

Providing your data is voluntary, but necessary to use certain features: without your e-mail address I cannot reply to your message or send you the newsletter.

8. Automated Decision-Making

Your data is not used for automated decision-making that produces legal effects concerning you. Personalised advertising (if you consent to it) involves profiling by Google for ad selection purposes only.

9. Changes to This Policy

I may update this Privacy Policy to reflect changes in the Website, the tools used, or the law. The current version, with its “Last updated” date, is always available on this page.