Privacy policy

We respect the privacy of our visitors. Below we explain what data we process, for what purpose and on what legal basis — in accordance with the GDPR (EU Regulation 2016/679).

1. Data controller

The controller of personal data is the person operating the website mordercy-z-upa.pl. Contact for data matters: kontakt@mordercy-z-upa.pl.

2. What data we process

• Testimonies and comments — signature (optional), locality, content and attached files. Published only after approval by a moderator.
• Visit statistics — we do not store the full IP address, only its irreversible hash (to count unique visits), together with the country and city from geolocation, the page visited, the referring source and the browser type.
• Cookies — a session cookie (administrator login, CSRF security token) and remembering the chosen language. We do not use advertising or cross-site tracking cookies.

3. Purpose and legal basis

• Commemoration of the victims and education — public interest and the legitimate interest of the controller (Art. 6(1)(e) and (f) GDPR).
• Publication of submitted materials — on the basis of your consent (Art. 6(1)(a) GDPR), given when you submit material.
• Statistics and site security — the legitimate interest of the controller (Art. 6(1)(f) GDPR).

4. Geolocation and data transfer

5. Retention period

Testimonies and comments are kept for as long as the site serves its commemorative purpose, or until they are removed at your request. Statistical records are kept in aggregated, anonymised form.

6. Your rights

You have the right to access your data, to rectify or erase it, to restrict its processing, to object, and to withdraw consent, as well as the right to lodge a complaint with a supervisory authority (in Poland — the President of the Personal Data Protection Office, UODO). To exercise your rights, write to kontakt@mordercy-z-upa.pl.

7. Changes

This policy may be updated. The current version is always available at this address.