Privacy Policy \u2014 Geneza Antoni \u0141\u0105cki<\/title>\n<style>\n :root {\n --text: #1a1a1a;\n --text-secondary: #4a4a4a;\n --text-muted: #6b6b6b;\n --bg: #fafafa;\n --surface: #ffffff;\n --border: #e5e5e5;\n --accent: #0f172a;\n --link: #2563eb;\n }\n * { box-sizing: border-box; }\n html, body {\n margin: 0;\n padding: 0;\n background: var(--bg);\n color: var(--text);\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", \"Inter\", system-ui, sans-serif;\n font-size: 17px;\n line-height: 1.6;\n -webkit-font-smoothing: antialiased;\n }\n .container {\n max-width: 760px;\n margin: 0 auto;\n padding: 48px 24px 96px;\n }\n header {\n padding-bottom: 32px;\n border-bottom: 1px solid var(--border);\n margin-bottom: 48px;\n }\n h1 {\n font-size: 36px;\n font-weight: 700;\n letter-spacing: -0.02em;\n margin: 0 0 16px;\n line-height: 1.2;\n }\n .meta {\n font-size: 14px;\n color: var(--text-muted);\n margin: 0;\n }\n .meta strong { color: var(--text-secondary); font-weight: 500; }\n h2 {\n font-size: 22px;\n font-weight: 600;\n letter-spacing: -0.01em;\n margin: 48px 0 16px;\n line-height: 1.3;\n color: var(--accent);\n }\n h3 {\n font-size: 17px;\n font-weight: 600;\n margin: 24px 0 8px;\n color: var(--text);\n }\n p { margin: 0 0 16px; color: var(--text-secondary); }\n ul, ol { padding-left: 24px; margin: 0 0 16px; }\n li { margin-bottom: 8px; color: var(--text-secondary); }\n strong { color: var(--text); font-weight: 600; }\n a { color: var(--link); text-decoration: underline; text-underline-offset: 2px; }\n a:hover { text-decoration-thickness: 2px; }\n .company-card {\n background: var(--surface);\n border: 1px solid var(--border);\n border-radius: 8px;\n padding: 24px;\n margin: 16px 0 32px;\n }\n .company-card p { margin: 0 0 4px; color: var(--text); font-size: 15px; }\n .company-card p:last-child { margin-bottom: 0; }\n table {\n width: 100%;\n border-collapse: collapse;\n margin: 16px 0 24px;\n font-size: 15px;\n }\n th, td {\n text-align: left;\n padding: 12px 16px;\n border-bottom: 1px solid var(--border);\n vertical-align: top;\n }\n th {\n font-weight: 600;\n color: var(--text);\n background: var(--surface);\n }\n td { color: var(--text-secondary); }\n footer {\n margin-top: 64px;\n padding-top: 24px;\n border-top: 1px solid var(--border);\n font-size: 14px;\n color: var(--text-muted);\n }\n<\/style>\n<\/head>\n<body>\n<div class=\"container\">\n\n<header>\n <h1>Privacy Policy<\/h1>\n <p class=\"meta\"><strong>Effective date:<\/strong> 22 April 2026 \u00b7 <strong>Version:<\/strong> 1.0<\/p>\n<\/header>\n\n<p>This Privacy Policy explains how Antoni \u0141\u0105cki, trading as <strong>Geneza Antoni \u0141\u0105cki<\/strong>, collects, uses, stores, and shares personal data in connection with the websites <strong>luckytoni.com<\/strong> and <strong>antonilacki.com<\/strong> and the \"AI with Toni\" email newsletter (together, the \"Services\").<\/p>\n\n<p>At this stage, the Services are limited to free content: the newsletter, any free lessons or guides delivered by email, and the public pages of the websites. No paid products, courses, or consulting are offered yet. This Policy will be updated before any paid offering goes live.<\/p>\n\n<p>This Policy is written to comply with the EU General Data Protection Regulation 2016\/679 (\"GDPR\"), the Polish Act on Personal Data Protection of 10 May 2018, and the Polish Act on Providing Services by Electronic Means of 18 July 2002.<\/p>\n\n<h2>1. Who is the Data Controller<\/h2>\n\n<p>The Data Controller of your personal data is:<\/p>\n\n<div class=\"company-card\">\n <p><strong>Geneza Antoni \u0141\u0105cki<\/strong><\/p>\n <p>Jana Heweliusza 11\/811, 80-890 Gda\u0144sk, Poland<\/p>\n <p>NIP: 6040209896<\/p>\n <p>REGON: 381801667<\/p>\n <p>Contact: <a href=\"mailto:al@antonilacki.com\">al@antonilacki.com<\/a><\/p>\n<\/div>\n\n<p>For any privacy-related request, including access, rectification, deletion, or questions about this Policy, write to the email above. There is no separate Data Protection Officer. The Controller handles all requests directly.<\/p>\n\n<h2>2. What personal data we collect<\/h2>\n\n<p>We only collect data that is necessary to deliver the newsletter, run the websites, and comply with the law. The categories are:<\/p>\n\n<h3>2.1 Data you give us directly<\/h3>\n<ul>\n <li><strong>Newsletter signup:<\/strong> email address, first name (optional), and any interest tags you select on opt-in forms.<\/li>\n <li><strong>Replies and messages:<\/strong> the content of any email you send to us, including any information you voluntarily share in surveys or feedback forms.<\/li>\n<\/ul>\n\n<h3>2.2 Data collected automatically<\/h3>\n<ul>\n <li><strong>Email engagement:<\/strong> opens, clicks, unsubscribes, bounces, and delivery timestamps, processed through Kit (see Section 4).<\/li>\n <li><strong>Website analytics:<\/strong> IP address (truncated or anonymized where possible), browser type, device type, operating system, pages visited, referring URL, and session duration.<\/li>\n <li><strong>Cookies and similar technologies:<\/strong> see Section 7.<\/li>\n<\/ul>\n\n<h3>2.3 Data we do not collect<\/h3>\n<p>We do not collect billing, payment, or tax data because no paid products are offered yet. We do not ask for phone numbers, postal addresses, date of birth, or any special category of data under Art. 9 GDPR.<\/p>\n\n<h2>3. Why we process your data and the legal basis<\/h2>\n\n<table>\n <thead>\n <tr><th>Purpose<\/th><th>Legal basis under GDPR Article 6<\/th><\/tr>\n <\/thead>\n <tbody>\n <tr><td>Sending the newsletter and free lessons you subscribed to<\/td><td>Art. 6(1)(a) \u2014 your consent, given through double opt-in<\/td><\/tr>\n <tr><td>Analytics, improving the content and the websites, preventing abuse<\/td><td>Art. 6(1)(f) \u2014 legitimate interest<\/td><\/tr>\n <tr><td>Responding to messages you send us<\/td><td>Art. 6(1)(f) \u2014 legitimate interest in replying to inquiries<\/td><\/tr>\n <tr><td>Defending or pursuing legal claims, if ever needed<\/td><td>Art. 6(1)(f) \u2014 legitimate interest<\/td><\/tr>\n <\/tbody>\n<\/table>\n\n<p>Because the primary legal basis is consent, you can withdraw it at any time by clicking \"unsubscribe\" at the bottom of any email or by replying to any email with the word \"remove\". Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.<\/p>\n\n<h2>4. Who we share data with<\/h2>\n\n<p>We share data only with a small, trusted set of vendors who help us operate the newsletter and the websites. Each one acts as a data processor, is bound by a written Data Processing Agreement, and may only use your data on our instructions.<\/p>\n\n<table>\n <thead>\n <tr><th>Processor<\/th><th>What they do<\/th><th>Data location<\/th><\/tr>\n <\/thead>\n <tbody>\n <tr>\n <td><strong>Kit<\/strong> (Kit Labs, Inc., formerly ConvertKit)<\/td>\n <td>Email marketing platform. Stores your email, name, tags, and engagement events. Sends newsletters and automated welcome sequences.<\/td>\n <td>USA. Transfer under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.<\/td>\n <\/tr>\n <tr>\n <td><strong>Google<\/strong> (Google Ireland Ltd.)<\/td>\n <td>Google Workspace for our email inbox and internal documents. Google Analytics, where enabled, for website traffic reports.<\/td>\n <td>EU and USA under EU-U.S. DPF.<\/td>\n <\/tr>\n <tr>\n <td><strong>Hosting and CDN provider<\/strong><\/td>\n <td>Serves the websites, caches static assets, mitigates attacks.<\/td>\n <td>EU and USA under EU-U.S. DPF.<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n\n<p>We do not sell, rent, or trade your personal data to anyone. We do not share the email list with third parties for their own marketing. We may disclose data only when required by a lawfully issued order from a Polish or EU authority, or when strictly necessary to defend our legal rights.<\/p>\n\n<h2>5. International transfers<\/h2>\n\n<p>Some of our processors, notably Kit, are based in the United States. In every case, transfers outside the European Economic Area are protected by at least one of the mechanisms required by Chapter V of the GDPR:<\/p>\n<ul>\n <li>The EU-U.S. Data Privacy Framework, for certified recipients;<\/li>\n <li>Standard Contractual Clauses approved by the European Commission;<\/li>\n <li>Your explicit consent, where applicable.<\/li>\n<\/ul>\n\n<p>A copy of the relevant safeguards can be requested by email at any time.<\/p>\n\n<h2>6. How long we keep your data<\/h2>\n\n<ul>\n <li><strong>Active subscribers:<\/strong> for as long as you remain subscribed to the newsletter.<\/li>\n <li><strong>Unsubscribed emails:<\/strong> kept on a suppression list for up to 24 months, so we do not accidentally contact you again, then deleted.<\/li>\n <li><strong>Email conversations:<\/strong> up to 3 years after the last reply, unless a longer period is needed for legal reasons.<\/li>\n <li><strong>Website analytics:<\/strong> up to 26 months, then deleted or aggregated.<\/li>\n<\/ul>\n\n<h2>7. Cookies and tracking<\/h2>\n\n<p>Our websites use a minimal number of cookies and similar technologies:<\/p>\n<ul>\n <li><strong>Strictly necessary cookies<\/strong> that keep the site working (session state, security, consent record). These do not require your consent.<\/li>\n <li><strong>Analytics cookies<\/strong> that help us understand which articles are useful. Loaded only after you accept the cookie banner.<\/li>\n <li><strong>Marketing pixels<\/strong> from LinkedIn, Meta, or YouTube, loaded only when you accept marketing cookies, used to measure reach and find similar audiences for future content.<\/li>\n<\/ul>\n\n<p>You can change your choice at any time through the \"Cookie Settings\" link in the website footer, or by clearing cookies in your browser.<\/p>\n\n<h2>8. Your rights under GDPR<\/h2>\n\n<p>As a data subject in the EEA, you have the following rights, free of charge, in relation to your personal data:<\/p>\n\n<ul>\n <li><strong>Right of access<\/strong> (Art. 15) to obtain a copy of your personal data and information about how it is processed.<\/li>\n <li><strong>Right to rectification<\/strong> (Art. 16) of inaccurate or incomplete data.<\/li>\n <li><strong>Right to erasure<\/strong> (Art. 17), known as \"the right to be forgotten\".<\/li>\n <li><strong>Right to restriction<\/strong> of processing (Art. 18) in specified circumstances.<\/li>\n <li><strong>Right to data portability<\/strong> (Art. 20) to receive your data in a structured, commonly used, machine-readable format.<\/li>\n <li><strong>Right to object<\/strong> (Art. 21) to processing based on legitimate interest, including direct marketing, which we will always honour.<\/li>\n <li><strong>Right to withdraw consent<\/strong> at any time, without affecting past lawful processing.<\/li>\n <li><strong>Right not to be subject to fully automated decisions<\/strong> producing legal effects (Art. 22). We do not make such decisions.<\/li>\n<\/ul>\n\n<p>To exercise any of these rights, email <a href=\"mailto:al@antonilacki.com\">al@antonilacki.com<\/a>. We will respond within one month, as required by Art. 12(3) GDPR. If your request is complex, we may extend the deadline by two additional months and will notify you of the extension.<\/p>\n\n<h2>9. Right to lodge a complaint<\/h2>\n\n<p>If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:<\/p>\n\n<div class=\"company-card\">\n <p><strong>Urz\u0105d Ochrony Danych Osobowych (UODO)<\/strong><\/p>\n <p>ul. Stawki 2, 00-193 Warszawa, Poland<\/p>\n <p>Website: <a href=\"https:\/\/uodo.gov.pl\" target=\"_blank\" rel=\"noopener\">uodo.gov.pl<\/a><\/p>\n<\/div>\n\n<p>We would, however, appreciate the chance to address your concerns before you go to UODO. Please write to us first.<\/p>\n\n<h2>10. Children<\/h2>\n\n<p>The Services are not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe that a child has provided us with personal data, please contact us and we will delete it promptly.<\/p>\n\n<h2>11. Security<\/h2>\n\n<p>We take reasonable technical and organizational measures to protect your data: encrypted transport (TLS), strong passwords, two-factor authentication on every critical vendor, and written contracts that require equivalent safeguards from our processors. No system is ever perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the UODO within 72 hours, as required by Art. 33 GDPR, and, where required, notify you directly.<\/p>\n\n<h2>12. Profiling and automated decision-making<\/h2>\n\n<p>We use Kit's segmentation and tagging features to send more relevant content based on topics you have clicked on. This is basic marketing segmentation, not profiling with legal effects. You can opt out at any time by unsubscribing, or by replying to any email asking us to remove your tags.<\/p>\n\n<h2>13. Changes to this Policy<\/h2>\n\n<p>We may update this Policy from time to time. The \"Effective date\" at the top of the page always reflects the latest version. For material changes, we will notify active subscribers by email at least 14 days before the change takes effect. When paid products launch, this Policy will be expanded and you will be notified in advance.<\/p>\n\n<h2>14. Contact<\/h2>\n\n<p>Questions, requests, or complaints about this Policy or about how we handle your data:<\/p>\n\n<div class=\"company-card\">\n <p><strong>Geneza Antoni \u0141\u0105cki<\/strong><\/p>\n <p>Jana Heweliusza 11\/811, 80-890 Gda\u0144sk, Poland<\/p>\n <p>Email: <a href=\"mailto:al@antonilacki.com\">al@antonilacki.com<\/a><\/p>\n<\/div>\n\n<footer>\n <p>\u00a9 2026 Geneza Antoni \u0141\u0105cki. NIP 6040209896. REGON 381801667.<\/p>\n <p>This Policy is provided in English for international subscribers. A Polish translation is available on request and carries equal legal weight.<\/p>\n<\/footer>\n\n<\/div>\n<\/body>\n<\/html>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy \u2014 Geneza Antoni \u0141\u0105cki Privacy Policy Effective date: 22 April 2026 \u00b7 Version: 1.0 This Privacy Policy explains how Antoni \u0141\u0105cki, trading as Geneza Antoni \u0141\u0105cki, collects, uses, stores, and shares personal data in connection with the websites luckytoni.com and antonilacki.com and the “AI with Toni” email newsletter (together, the “Services”). At this […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-14","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages\/14","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/luckytoni.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14"}],"version-history":[{"count":4,"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages\/14\/revisions"}],"predecessor-version":[{"id":19,"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages\/14\/revisions\/19"}],"wp:attachment":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

\n\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t

\n\t\t\t\t\t\n\n\n\n\nPrivacy Policy \u2014 Geneza Antoni \u0141\u0105cki<\/title>\n<style>\n :root {\n --text: #1a1a1a;\n --text-secondary: #4a4a4a;\n --text-muted: #6b6b6b;\n --bg: #fafafa;\n --surface: #ffffff;\n --border: #e5e5e5;\n --accent: #0f172a;\n --link: #2563eb;\n }\n * { box-sizing: border-box; }\n html, body {\n margin: 0;\n padding: 0;\n background: var(--bg);\n color: var(--text);\n font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", \"Inter\", system-ui, sans-serif;\n font-size: 17px;\n line-height: 1.6;\n -webkit-font-smoothing: antialiased;\n }\n .container {\n max-width: 760px;\n margin: 0 auto;\n padding: 48px 24px 96px;\n }\n header {\n padding-bottom: 32px;\n border-bottom: 1px solid var(--border);\n margin-bottom: 48px;\n }\n h1 {\n font-size: 36px;\n font-weight: 700;\n letter-spacing: -0.02em;\n margin: 0 0 16px;\n line-height: 1.2;\n }\n .meta {\n font-size: 14px;\n color: var(--text-muted);\n margin: 0;\n }\n .meta strong { color: var(--text-secondary); font-weight: 500; }\n h2 {\n font-size: 22px;\n font-weight: 600;\n letter-spacing: -0.01em;\n margin: 48px 0 16px;\n line-height: 1.3;\n color: var(--accent);\n }\n h3 {\n font-size: 17px;\n font-weight: 600;\n margin: 24px 0 8px;\n color: var(--text);\n }\n p { margin: 0 0 16px; color: var(--text-secondary); }\n ul, ol { padding-left: 24px; margin: 0 0 16px; }\n li { margin-bottom: 8px; color: var(--text-secondary); }\n strong { color: var(--text); font-weight: 600; }\n a { color: var(--link); text-decoration: underline; text-underline-offset: 2px; }\n a:hover { text-decoration-thickness: 2px; }\n .company-card {\n background: var(--surface);\n border: 1px solid var(--border);\n border-radius: 8px;\n padding: 24px;\n margin: 16px 0 32px;\n }\n .company-card p { margin: 0 0 4px; color: var(--text); font-size: 15px; }\n .company-card p:last-child { margin-bottom: 0; }\n table {\n width: 100%;\n border-collapse: collapse;\n margin: 16px 0 24px;\n font-size: 15px;\n }\n th, td {\n text-align: left;\n padding: 12px 16px;\n border-bottom: 1px solid var(--border);\n vertical-align: top;\n }\n th {\n font-weight: 600;\n color: var(--text);\n background: var(--surface);\n }\n td { color: var(--text-secondary); }\n footer {\n margin-top: 64px;\n padding-top: 24px;\n border-top: 1px solid var(--border);\n font-size: 14px;\n color: var(--text-muted);\n }\n<\/style>\n<\/head>\n<body>\n<div class=\"container\">\n\n<header>\n <h1>Privacy Policy<\/h1>\n <p class=\"meta\"><strong>Effective date:<\/strong> 22 April 2026 \u00b7 <strong>Version:<\/strong> 1.0<\/p>\n<\/header>\n\n<p>This Privacy Policy explains how Antoni \u0141\u0105cki, trading as <strong>Geneza Antoni \u0141\u0105cki<\/strong>, collects, uses, stores, and shares personal data in connection with the websites <strong>luckytoni.com<\/strong> and <strong>antonilacki.com<\/strong> and the \"AI with Toni\" email newsletter (together, the \"Services\").<\/p>\n\n<p>At this stage, the Services are limited to free content: the newsletter, any free lessons or guides delivered by email, and the public pages of the websites. No paid products, courses, or consulting are offered yet. This Policy will be updated before any paid offering goes live.<\/p>\n\n<p>This Policy is written to comply with the EU General Data Protection Regulation 2016\/679 (\"GDPR\"), the Polish Act on Personal Data Protection of 10 May 2018, and the Polish Act on Providing Services by Electronic Means of 18 July 2002.<\/p>\n\n<h2>1. Who is the Data Controller<\/h2>\n\n<p>The Data Controller of your personal data is:<\/p>\n\n<div class=\"company-card\">\n <p><strong>Geneza Antoni \u0141\u0105cki<\/strong><\/p>\n <p>Jana Heweliusza 11\/811, 80-890 Gda\u0144sk, Poland<\/p>\n <p>NIP: 6040209896<\/p>\n <p>REGON: 381801667<\/p>\n <p>Contact: <a href=\"mailto:al@antonilacki.com\">al@antonilacki.com<\/a><\/p>\n<\/div>\n\n<p>For any privacy-related request, including access, rectification, deletion, or questions about this Policy, write to the email above. There is no separate Data Protection Officer. The Controller handles all requests directly.<\/p>\n\n<h2>2. What personal data we collect<\/h2>\n\n<p>We only collect data that is necessary to deliver the newsletter, run the websites, and comply with the law. The categories are:<\/p>\n\n<h3>2.1 Data you give us directly<\/h3>\n<ul>\n <li><strong>Newsletter signup:<\/strong> email address, first name (optional), and any interest tags you select on opt-in forms.<\/li>\n <li><strong>Replies and messages:<\/strong> the content of any email you send to us, including any information you voluntarily share in surveys or feedback forms.<\/li>\n<\/ul>\n\n<h3>2.2 Data collected automatically<\/h3>\n<ul>\n <li><strong>Email engagement:<\/strong> opens, clicks, unsubscribes, bounces, and delivery timestamps, processed through Kit (see Section 4).<\/li>\n <li><strong>Website analytics:<\/strong> IP address (truncated or anonymized where possible), browser type, device type, operating system, pages visited, referring URL, and session duration.<\/li>\n <li><strong>Cookies and similar technologies:<\/strong> see Section 7.<\/li>\n<\/ul>\n\n<h3>2.3 Data we do not collect<\/h3>\n<p>We do not collect billing, payment, or tax data because no paid products are offered yet. We do not ask for phone numbers, postal addresses, date of birth, or any special category of data under Art. 9 GDPR.<\/p>\n\n<h2>3. Why we process your data and the legal basis<\/h2>\n\n<table>\n <thead>\n <tr><th>Purpose<\/th><th>Legal basis under GDPR Article 6<\/th><\/tr>\n <\/thead>\n <tbody>\n <tr><td>Sending the newsletter and free lessons you subscribed to<\/td><td>Art. 6(1)(a) \u2014 your consent, given through double opt-in<\/td><\/tr>\n <tr><td>Analytics, improving the content and the websites, preventing abuse<\/td><td>Art. 6(1)(f) \u2014 legitimate interest<\/td><\/tr>\n <tr><td>Responding to messages you send us<\/td><td>Art. 6(1)(f) \u2014 legitimate interest in replying to inquiries<\/td><\/tr>\n <tr><td>Defending or pursuing legal claims, if ever needed<\/td><td>Art. 6(1)(f) \u2014 legitimate interest<\/td><\/tr>\n <\/tbody>\n<\/table>\n\n<p>Because the primary legal basis is consent, you can withdraw it at any time by clicking \"unsubscribe\" at the bottom of any email or by replying to any email with the word \"remove\". Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.<\/p>\n\n<h2>4. Who we share data with<\/h2>\n\n<p>We share data only with a small, trusted set of vendors who help us operate the newsletter and the websites. Each one acts as a data processor, is bound by a written Data Processing Agreement, and may only use your data on our instructions.<\/p>\n\n<table>\n <thead>\n <tr><th>Processor<\/th><th>What they do<\/th><th>Data location<\/th><\/tr>\n <\/thead>\n <tbody>\n <tr>\n <td><strong>Kit<\/strong> (Kit Labs, Inc., formerly ConvertKit)<\/td>\n <td>Email marketing platform. Stores your email, name, tags, and engagement events. Sends newsletters and automated welcome sequences.<\/td>\n <td>USA. Transfer under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.<\/td>\n <\/tr>\n <tr>\n <td><strong>Google<\/strong> (Google Ireland Ltd.)<\/td>\n <td>Google Workspace for our email inbox and internal documents. Google Analytics, where enabled, for website traffic reports.<\/td>\n <td>EU and USA under EU-U.S. DPF.<\/td>\n <\/tr>\n <tr>\n <td><strong>Hosting and CDN provider<\/strong><\/td>\n <td>Serves the websites, caches static assets, mitigates attacks.<\/td>\n <td>EU and USA under EU-U.S. DPF.<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n\n<p>We do not sell, rent, or trade your personal data to anyone. We do not share the email list with third parties for their own marketing. We may disclose data only when required by a lawfully issued order from a Polish or EU authority, or when strictly necessary to defend our legal rights.<\/p>\n\n<h2>5. International transfers<\/h2>\n\n<p>Some of our processors, notably Kit, are based in the United States. In every case, transfers outside the European Economic Area are protected by at least one of the mechanisms required by Chapter V of the GDPR:<\/p>\n<ul>\n <li>The EU-U.S. Data Privacy Framework, for certified recipients;<\/li>\n <li>Standard Contractual Clauses approved by the European Commission;<\/li>\n <li>Your explicit consent, where applicable.<\/li>\n<\/ul>\n\n<p>A copy of the relevant safeguards can be requested by email at any time.<\/p>\n\n<h2>6. How long we keep your data<\/h2>\n\n<ul>\n <li><strong>Active subscribers:<\/strong> for as long as you remain subscribed to the newsletter.<\/li>\n <li><strong>Unsubscribed emails:<\/strong> kept on a suppression list for up to 24 months, so we do not accidentally contact you again, then deleted.<\/li>\n <li><strong>Email conversations:<\/strong> up to 3 years after the last reply, unless a longer period is needed for legal reasons.<\/li>\n <li><strong>Website analytics:<\/strong> up to 26 months, then deleted or aggregated.<\/li>\n<\/ul>\n\n<h2>7. Cookies and tracking<\/h2>\n\n<p>Our websites use a minimal number of cookies and similar technologies:<\/p>\n<ul>\n <li><strong>Strictly necessary cookies<\/strong> that keep the site working (session state, security, consent record). These do not require your consent.<\/li>\n <li><strong>Analytics cookies<\/strong> that help us understand which articles are useful. Loaded only after you accept the cookie banner.<\/li>\n <li><strong>Marketing pixels<\/strong> from LinkedIn, Meta, or YouTube, loaded only when you accept marketing cookies, used to measure reach and find similar audiences for future content.<\/li>\n<\/ul>\n\n<p>You can change your choice at any time through the \"Cookie Settings\" link in the website footer, or by clearing cookies in your browser.<\/p>\n\n<h2>8. Your rights under GDPR<\/h2>\n\n<p>As a data subject in the EEA, you have the following rights, free of charge, in relation to your personal data:<\/p>\n\n<ul>\n <li><strong>Right of access<\/strong> (Art. 15) to obtain a copy of your personal data and information about how it is processed.<\/li>\n <li><strong>Right to rectification<\/strong> (Art. 16) of inaccurate or incomplete data.<\/li>\n <li><strong>Right to erasure<\/strong> (Art. 17), known as \"the right to be forgotten\".<\/li>\n <li><strong>Right to restriction<\/strong> of processing (Art. 18) in specified circumstances.<\/li>\n <li><strong>Right to data portability<\/strong> (Art. 20) to receive your data in a structured, commonly used, machine-readable format.<\/li>\n <li><strong>Right to object<\/strong> (Art. 21) to processing based on legitimate interest, including direct marketing, which we will always honour.<\/li>\n <li><strong>Right to withdraw consent<\/strong> at any time, without affecting past lawful processing.<\/li>\n <li><strong>Right not to be subject to fully automated decisions<\/strong> producing legal effects (Art. 22). We do not make such decisions.<\/li>\n<\/ul>\n\n<p>To exercise any of these rights, email <a href=\"mailto:al@antonilacki.com\">al@antonilacki.com<\/a>. We will respond within one month, as required by Art. 12(3) GDPR. If your request is complex, we may extend the deadline by two additional months and will notify you of the extension.<\/p>\n\n<h2>9. Right to lodge a complaint<\/h2>\n\n<p>If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:<\/p>\n\n<div class=\"company-card\">\n <p><strong>Urz\u0105d Ochrony Danych Osobowych (UODO)<\/strong><\/p>\n <p>ul. Stawki 2, 00-193 Warszawa, Poland<\/p>\n <p>Website: <a href=\"https:\/\/uodo.gov.pl\" target=\"_blank\" rel=\"noopener\">uodo.gov.pl<\/a><\/p>\n<\/div>\n\n<p>We would, however, appreciate the chance to address your concerns before you go to UODO. Please write to us first.<\/p>\n\n<h2>10. Children<\/h2>\n\n<p>The Services are not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe that a child has provided us with personal data, please contact us and we will delete it promptly.<\/p>\n\n<h2>11. Security<\/h2>\n\n<p>We take reasonable technical and organizational measures to protect your data: encrypted transport (TLS), strong passwords, two-factor authentication on every critical vendor, and written contracts that require equivalent safeguards from our processors. No system is ever perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the UODO within 72 hours, as required by Art. 33 GDPR, and, where required, notify you directly.<\/p>\n\n<h2>12. Profiling and automated decision-making<\/h2>\n\n<p>We use Kit's segmentation and tagging features to send more relevant content based on topics you have clicked on. This is basic marketing segmentation, not profiling with legal effects. You can opt out at any time by unsubscribing, or by replying to any email asking us to remove your tags.<\/p>\n\n<h2>13. Changes to this Policy<\/h2>\n\n<p>We may update this Policy from time to time. The \"Effective date\" at the top of the page always reflects the latest version. For material changes, we will notify active subscribers by email at least 14 days before the change takes effect. When paid products launch, this Policy will be expanded and you will be notified in advance.<\/p>\n\n<h2>14. Contact<\/h2>\n\n<p>Questions, requests, or complaints about this Policy or about how we handle your data:<\/p>\n\n<div class=\"company-card\">\n <p><strong>Geneza Antoni \u0141\u0105cki<\/strong><\/p>\n <p>Jana Heweliusza 11\/811, 80-890 Gda\u0144sk, Poland<\/p>\n <p>Email: <a href=\"mailto:al@antonilacki.com\">al@antonilacki.com<\/a><\/p>\n<\/div>\n\n<footer>\n <p>\u00a9 2026 Geneza Antoni \u0141\u0105cki. NIP 6040209896. REGON 381801667.<\/p>\n <p>This Policy is provided in English for international subscribers. A Polish translation is available on request and carries equal legal weight.<\/p>\n<\/footer>\n\n<\/div>\n<\/body>\n<\/html>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy \u2014 Geneza Antoni \u0141\u0105cki Privacy Policy Effective date: 22 April 2026 \u00b7 Version: 1.0 This Privacy Policy explains how Antoni \u0141\u0105cki, trading as Geneza Antoni \u0141\u0105cki, collects, uses, stores, and shares personal data in connection with the websites luckytoni.com and antonilacki.com and the “AI with Toni” email newsletter (together, the “Services”). At this […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-14","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages\/14","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/luckytoni.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14"}],"version-history":[{"count":4,"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages\/14\/revisions"}],"predecessor-version":[{"id":19,"href":"https:\/\/luckytoni.com\/index.php?rest_route=\/wp\/v2\/pages\/14\/revisions\/19"}],"wp:attachment":[{"href":"https:\/\/luckytoni.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}