Privacy policy

What data we collect

When you submit an event through the form, we process:

• the content of the submission (name, description, date and place of the event),
• your contact email address,
• a hashed (irreversible) fingerprint of your IP address — solely to limit abuse and spam; we do not store your IP address in plain form,
• a record of the consent given and the version of this policy.

When you submit a witacz photo, we additionally process:

• the uploaded photo and the information provided with it (village, year, description),
• the full name (or nickname) of the photo’s author — published next to the photo,
• your email address — used to confirm the submission (verification link) and for possible contact; it is not published,
• the text of the licence granted for publishing the photo.

When you write to us through the contact form, we process:

• the name you give us, your email address, the subject and the message,
• the photo you attach, if you choose to attach one,
• a hashed (irreversible) fingerprint of your IP address — solely to limit abuse and spam.

The content of your message (subject, text, attachment) is not stored in the Service database — it is delivered to our mailbox and kept there only for as long as handling the matter requires. What stays in the database is a technical record of the consent given: the sender’s email address, the hashed IP address, browser information and the version of this policy — which we need to demonstrate consent and to limit spam.

The witacz submission form and the contact form are protected by the Cloudflare Turnstile service, which distinguishes humans from bots. For this purpose Cloudflare may process technical data of your browser. We do this on the basis of our legitimate interest (protecting the Service against abuse).

Photo submissions not confirmed via the email link are removed during periodic clean-ups after 7 days, and submissions rejected by a moderator — after 30 days.

Purpose and legal basis

We process the data on the basis of your consent (Article 6(1)(a) GDPR) in order to consider your submission and possibly contact you about it, and on the basis of our legitimate interest (Article 6(1)(f) GDPR) in protecting the Service against abuse. The email address is not published. We publish only the approved event content.

Your rights

You have the right to access your data, to rectify or erase it, and to withdraw your consent at any time (without affecting the lawfulness of processing before its withdrawal). For these matters, write to us at the address below.

Cookies and analytics

We use cookies and similar technologies. We group them into categories:

• Necessary (functional) — required for the site to work, including remembering your consent choice (dozynki_consent) and your language choice after you click the PL/EN switcher (dozynki_lang, valid 365 days; and dozynki_lang_hint, valid 30 days — prevents repeating the automatic redirect on the home page). No consent is needed.
• Analytics — Google Analytics and Vercel Analytics; used to build anonymous traffic statistics that help us improve the site. We load them only after you give consent.
• Marketing — currently unused; the category is reserved for future sponsored content.

You can give or withdraw consent to analytics and marketing cookies at any time using the “Cookie settings” option in the site footer. We store your choice in a cookie in your browser (we do not link it to your identity).

Recipients and processors

We use trusted providers that process data on our behalf only to the extent needed to run the site:

• Vercel — website hosting and Vercel Analytics (traffic statistics);
• Google — Google Analytics (traffic statistics, after consent);
• Cloudflare R2 — storage of the site’s image files;
• Brevo — sending emails (including event submission confirmations);
• Neon — hosting of the site’s database.

Contact

For matters concerning personal data, contact us at contact@nod.consulting.