Personal data processing

Controller

The controller of your personal data is Sergei Gotin, conducting business as Sergei Gotin JDG (IMACON Consulting Group), ul. Słoneczna 17, 15-521 Zaścianki, Poland, NIP 5422623016. Contact on all data matters: [email protected].

What we process and why

• contact details you provide when writing to us — name, e-mail, phone, organisation, position — to respond to enquiries and prepare commercial proposals and partnership offers (Art. 6(1)(b) and (f) GDPR);
• data needed to conclude and perform consulting, evaluation and training contracts, including expert CVs shared for tenders (Art. 6(1)(b) GDPR);
• data of participants in trainings and research — interviews, focus groups, surveys — on the legal basis agreed with the commissioning organisation, normally consent or legitimate interest, and always with informed consent from participants;
• technical data about visits to this website: the site sets no cookies and keeps only aggregate, cookieless traffic statistics (see “Website statistics” below).

Cookies

This website sets no cookies and stores nothing in your browser: no advertising, no profiling, no tracking from site to site. We do count visits — see “Website statistics” below — but with a tool that keeps no state on your device at all. Since nothing is placed on your device beyond what is strictly necessary to deliver the page, no cookie consent banner is required under Article 5(3) of the ePrivacy Directive, and you will not see one here.

Website statistics

We use Cloudflare Web Analytics to see which pages are read and where readers come from. It sets no cookies, writes nothing to your browser’s storage, does not fingerprint your device and does not follow you to other sites; it reports aggregate figures only — page, referring site, country, browser, loading time — and never builds a profile of an individual visitor. The measurement script is served by Cloudflare, which also hosts this website and therefore already handles your request as our processor; no data reaches any other company. Legal basis: our legitimate interest in knowing whether what we publish is read (Art. 6(1)(f) GDPR).

Retention

We keep data for as long as needed for the purpose: for the duration of correspondence and the business relationship, and afterwards for the period required by Polish tax and accounting law (generally five years) or by the statute of limitations for claims. Research data is deleted or anonymised at the end of the assignment unless the client’s data policy requires otherwise.

Recipients

Data may be shared with consultants and subcontractors engaged in delivering our services, bound by confidentiality obligations; with IT providers hosting our e-mail and website; and with public authorities where the law requires. We run language-model tools for transcription and qualitative coding on our own infrastructure — client data is not sent to third-party AI services.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of earlier processing. Send requests to [email protected]. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.