Privacy Policy
Last updated: 16 September 2026
This Privacy Policy explains how personal data may be processed when you visit dgorecka.com (the "Website").
The Website is a personal portfolio belonging to Daria Górecka ("I", "me", or "the Website owner").
I respect your privacy and aim to collect and process only the personal data that is reasonably necessary to operate the Website and respond to legitimate communications.
1. Data Controller
The data controller for personal data processed through this Website is:
Daria Górecka
Email: hello [at] dgorecka [dot] com
For questions regarding privacy or the processing of personal data, you may contact me at the email address above.
2. Data that may be processed
Depending on how you use the Website, the following categories of data may be processed.
Technical and browsing data
When you visit a website, certain technical information may be automatically processed by the hosting and infrastructure services required to deliver the Website.
This may include, where applicable:
- IP address;
- date and time of the request;
- browser and device information;
- operating system;
- pages or resources requested;
- technical information contained in server logs;
- information necessary to maintain the security and proper functioning of the Website.
This information is primarily processed to operate, maintain and secure the Website and to identify or prevent technical problems, abuse or attacks.
Information voluntarily provided
The Website does not include contact forms. If you contact me by email or through another communication method linked from the Website, I may process the information you provide, such as your name, email address and the contents of your message.
This information is used to respond to your communication and handle the related request.
The Website does not require an account or registration.
3. Purposes of processing
Personal data may be processed for the following purposes:
- providing and maintaining the Website;
- ensuring its security and technical functioning;
- responding to communications;
- complying with applicable legal obligations;
- establishing, exercising or defending legal claims where necessary.
Personal data is not sold.
No analytics, advertising or profiling technologies are currently used on the Website, and personal data is not collected for advertising profiles or behavioural advertising.
4. Publicly available personal information and scraping
The Website may contain limited personal information relating to Daria Górecka, such as her name, professional biography, professional experience, portfolio work and contact information.
The publication of such information is intended solely to present a professional portfolio and provide a legitimate means of professional contact.
Unauthorised automated collection, harvesting, scraping, extraction, aggregation, reproduction or systematic indexing of personal information published on this Website is not authorised for purposes unrelated to the operation of the Website or legitimate interaction with its owner.
In particular, publicly available information from this Website should not be:
- collected to create or enrich databases of personal information;
- used for unsolicited marketing or bulk communications;
- used for profiling or behavioural targeting;
- republished or redistributed without an appropriate legal basis;
- combined with other datasets for purposes unrelated to the Website's stated purposes;
- used to impersonate the Website owner;
- used to generate or maintain directories of personal contact information;
- systematically collected for the purpose of training or developing artificial intelligence or machine-learning systems where such use is incompatible with the purposes for which the information is published.
Where technically and legally appropriate, reasonable measures may be implemented to prevent or hinder automated collection of personal information from the Website.
This section does not prevent legitimate browsing, accessibility technologies, ordinary search-engine indexing, or other activities permitted by applicable law.
5. Legal bases
Where applicable, personal data is processed on the following legal bases under the GDPR:
- legitimate interests, including operating and securing the Website and maintaining a professional portfolio;
- performance of a request, where processing is necessary to respond to a communication;
- legal obligations, where processing is required by law;
- consent, where consent is legally required, including for any cookies or tracking technologies that may be introduced in the future.
Processing is carried out in accordance with the principles of lawfulness, fairness, transparency, purpose limitation and data minimisation.
6. Cookies and similar technologies
The Website does not currently set cookies and does not use analytics, advertising or profiling technologies.
If technologies requiring consent are introduced in the future, they will only be activated after the required consent has been obtained, and this page will be updated accordingly.
You may manage cookies at any time through your browser settings.
7. Third-party services
The Website relies on third-party providers for hosting and infrastructure (IONOS) and for web font delivery (Google Fonts), which may process technical data such as your IP address in order to deliver the requested resources.
Where these providers process personal data on my behalf, appropriate contractual and organisational safeguards will be used where required by applicable law.
Third-party websites linked from this Website, such as LinkedIn and Medium, are independent services and are subject to their own privacy policies and terms.
8. International transfers
Some providers used to operate the Website may process personal data outside the European Economic Area.
Where such transfers take place, appropriate safeguards required under applicable data protection law will be used where necessary, such as an adequacy decision or appropriate contractual safeguards.
9. Data retention
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required by law or is necessary to establish, exercise or defend legal claims.
Technical logs may be retained for a limited period determined by the relevant hosting provider and security requirements.
Communications may be retained for as long as reasonably necessary to handle the communication and maintain an appropriate record.
10. Your rights
Subject to applicable law and its conditions and limitations, you may have the right to:
- obtain confirmation as to whether your personal data is being processed;
- access your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable;
- withdraw consent where processing is based on consent.
To exercise your rights, contact:
You also have the right to lodge a complaint with the competent data protection supervisory authority.
11. Security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse or alteration.
However, no internet-based transmission or storage system can be guaranteed to be completely secure.
12. External links
The Website may contain links to external websites and services, including professional and social networks.
I am not responsible for the privacy practices, security or content of external websites. Their own privacy policies and terms apply when you use those services.
13. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the Website, the services used or applicable legal requirements.
The latest version will be published on this page together with the date of the latest update.
14. Contact
For questions regarding this Privacy Policy or the processing of personal data through the Website:
Daria Górecka
hello [at] dgorecka [dot] com