Privacy policy & cookies

Version: 1.3 | Date: 26.09.2026

Serwis Szukam Korzeni powstał, by ułatwić dostęp do informacji genealogicznych – zarówno w trybie FREE (samodzielne, darmowe wyszukiwanie w publicznych źródłach), jak i w usłudze PAID (kwerenda wykonana przez nas i PDF Report). Szanujemy prywatność Użytkowników, a ten dokument wyjaśnia: jakie dane przetwarzamy, po co, na jakiej podstawie i jakimi prawami dysponujesz.

Dbamy o bezpieczeństwo danych i korzystamy z dostawców spełniających wysokie standardy ochrony informacji. Pamiętaj, że część źródeł zewnętrznych (archiwa, biblioteki cyfrowe, operator płatności) działa według własnych polityk prywatności, do których odsyłamy w razie potrzeby.

Privacy principles (in plain language)

Minimum data, maximum control. We only ask for what’s necessary to perform the search/research and handle billing. Newsletter only with your consent.
Transparency. For each activity we state the purpose, legal basis, and retention period.
Security. We use organizational and technical measures (access control, encrypted transport, backups).
Your rights. You have the right to access, rectify, erase (“be forgotten”), restrict, portability, object, and to lodge a complaint with the DPA.

Formal text

1. Data controller

The controller of personal data is Robert Arciszewski, trading as Discover IT Robert Arciszewski, tax ID 567 191 74 78. For data-related enquiries: kontakt@szukamkorzeni.pl.

2. Categories of data

Order data: first/last name, email, invoicing data (optional: VAT ID, company name), research details provided by the client (e.g., ancestors’ names, places, years).
Payment data: transaction identifiers, payment status (processed by the payment processor; we receive only necessary billing metadata).
Newsletter data (optional): email, first name.
Operational data: server logs, IP address, timestamp, user agent; basic technical and statistical cookies.

3. Purposes and legal bases (GDPR Art. 6)

Performance of a contract (research, Report, operational contact) — GDPR Art. 6(1)(b).
Accounting and legal obligations (invoicing, taxes, evidentiary archiving) — GDPR Art. 6(1)(c).
Legitimate interests (routine communications, claims handling, security, basic traffic analytics) — GDPR Art. 6(1)(f).
Consent (newsletter, selected non-essential cookies) — GDPR Art. 6(1)(a); and applicable local e-communications laws.

4. Retention periods

Contract/billing data: for the duration of the contract, then until claim limitation and statutory accounting/tax periods expire.
Newsletter: until consent is withdrawn.
Logs/security/statistics: generally up to 12 months unless security needs or the law require longer.

Search history and website improvement

If you accept visit and search statistics, we store submitted search details: first name, surname, place and birth year, together with the submission time, language and section of the website. We use these records to understand visitor needs and improve the search experience. The basis for this storage is your consent (Article 6(1)(a) GDPR).

The log covers queries submitted using the search, prepare links or apply to My list button. It does not record unfinished input, IP addresses or visitor identifiers. The data is stored in a private database on the website server; the log is not public. This mechanism does not send search contents to external analytics tools.

Queries form an archive used to improve the website and are not automatically deleted after a fixed number of days. We keep them for as long as they are needed for this purpose, subject to obligations to erase personal data. You can withdraw consent at any time in Cookie settings by selecting Essential only. Withdrawal stops future records and does not restrict searching. For access to an entry or its deletion, email kontakt@szukamkorzeni.pl with the query and approximate search time. We do not build visitor profiles in this log.

5. Data recipients

Payment processor: Stripe (and possibly others — as indicated on the payment page).
Hosting/server: (e.g., small.pl / MyDevil.net) — hosting and backups.
Accounting/legal – accounting firm, legal advisors.
Auxiliary IT tools – only to the extent necessary (e.g., email system, helpdesk, reCAPTCHA/antispam).

6. Data subject rights

Przysługują Ci prawa: dostępu, sprostowania, usunięcia, ograniczenia przetwarzania, przenoszenia, sprzeciwu (w tym wobec przetwarzania opartego na uzasadnionym interesie), a także prawo do wycofania zgody (bez wpływu na zgodność wcześniejszego przetwarzania). Skargę możesz wnieść do Prezesa Urzędu Ochrony Danych Osobowych.

7. Cookies and similar technologies

The website remembers settings and consent in your browser. With consent to statistics, it enables visit analytics and the submitted-search log described above. You can change your choice using Cookie settings in the footer.

How to manage cookies? You can limit or delete cookies in your browser settings; note that some features may not work without essential cookies.
Lifetime: session cookies until the browser is closed; persistent cookies according to their purpose (typically 1–12 months) or until you delete them.

8. Transfers outside the EEA

Jeżeli dostawca przetwarza dane poza EOG (np. USA – w szczególności Stripe), stosowane są Standardowe Klauzule Umowne (SCC) Komisji Europejskiej oraz, w razie potrzeby, środki uzupełniające. Udostępniamy tylko zakres konieczny do realizacji celu (np. rozliczenia).

9. Voluntary nature of data provision and consequences

Contract/research: providing data is necessary to perform the service; without it we cannot accept the order.
Newsletter: optional; without consent we will not send messages.

10. Automated decisions / profiling

We do not build marketing profiles or make automated decisions based on search contents.

11. Policy changes

Polityka może być aktualizowana w związku ze zmianami prawa, technologii lub zakresu usług. Nowa wersja będzie publikowana w Serwisie ze wskazaniem daty obowiązywania. Wersje archiwalne udostępnimy na żądanie.

Questions? Write to us: kontakt@szukamkorzeni.pl.