Home / Privacy policy
Privacy policy
This page explains what personal data workfileacademy.com (“Workfile”, “we”) handles, why, and what you can do about it. The short version: we don't use cookies, we count visits without cookies and without identifying you, we don't run ads, we only email you if you ask us to, and we don't sell anything you tell us.
Who is responsible for your data
The controller of your personal data is Tomasz Gardziel, who runs Workfile (“we”), based in Poland. You can reach us at contact@workfileacademy.com.
What we handle and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| Technical data your browser sends when you open a page (IP address, browser type, the page you asked for, time) | To deliver the page and keep the site secure | Our legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR) | Kept in our hosting provider's logs for about one day, then deleted |
| Your email address and message, if you write to contact@workfileacademy.com | To reply to you and fix mistakes you report | Our legitimate interest in answering you (Art. 6(1)(f) GDPR), or steps you ask for before an agreement (Art. 6(1)(b) GDPR) | As long as needed to handle your message, then up to 12 months |
| Settings saved in your own browser (see Cookies and local storage) | To remember your choices on this device | Saved only when you click; strictly necessary for the feature you ask for | Until you clear them |
| Visit statistics: the page you open, the site you came from, your country and city, device and operating system, time | To see which pages are useful and where readers come from | Our legitimate interest in improving the site (Art. 6(1)(f) GDPR). No cookies, nothing saved on your device, and no data that identifies you | Shown to us only as totals, for up to 12 months |
| Your email address, if you sign up for The Workfile Brief | To send you the newsletter, including news when we open a new course | Your consent (Art. 6(1)(a) GDPR), given when you sign up. You can withdraw it at any time with the link in every email; this doesn't affect emails we sent before | Until you unsubscribe, then deleted, except a record that you unsubscribed so we don't email you again |
| Whether you open our emails and which links you click | To see which topics and lessons are useful | Your consent, given when you sign up (Art. 6(1)(a) GDPR) | As long as you are subscribed |
| A record of your consent: date and time, the version of the sign-up text and the page you signed up on | To show that you agreed, as the GDPR requires us to be able to do | Our legitimate interest in proving consent (Art. 6(1)(f) GDPR) | As long as we email you, then up to 3 years after you unsubscribe |
| Your IP address when you send the sign-up form | To block automated sign-ups | Our legitimate interest in keeping the form free of abuse (Art. 6(1)(f) GDPR) | Our server keeps only a scrambled version in memory for up to 10 minutes; our hosting provider's logs keep it for about one day |
We don't use cookies, tracking pixels, ads or third-party embeds on this website. Fonts and all files load from our own site. The sign-up form sends your details to our own server, not to a third-party script.
Who helps us
- Vercel Inc. (United States) hosts this website and processes the technical data above on our behalf. Transfers to the United States are covered by the European Commission's Standard Contractual Clauses in Vercel's data processing addendum, and Vercel takes part in the EU-U.S. Data Privacy Framework.
- Hostinger provides our email inbox, so messages you send to contact@workfileacademy.com are stored there.
- Vercel Web Analytics counts visits for us. Vercel says it records page views anonymously, without cookies and without anything that could identify you or follow you across other websites.
- Kit (United States) sends The Workfile Brief and stores your email address, consent record and open and click data on our behalf under its data processing agreement, which also covers transfers to the United States.
We don't sell or rent your data, and we don't share it with anyone else unless the law requires it.
Your rights
If you are in the EU, EEA or UK, you can ask us to access, correct or delete your data, to restrict or object to how we use it, and to receive it in a portable form. Write to contact@workfileacademy.com; we answer within one month. You can also complain to a data protection authority: in Poland the President of the Personal Data Protection Office (uodo.gov.pl), in the UK the Information Commissioner's Office (ico.org.uk), or the authority where you live.
California and other US states
We don't sell or share personal information for advertising. Because we don't track you across sites, the site works the same whether or not your browser sends a “Do Not Track” signal: there is nothing to turn off.
Children
This site is not directed to children under 13, and we don't knowingly collect their data. If you think a child has sent us personal data, write to us and we will delete it.
Changes
If we change this policy, we update the date at the top. If we start using a new kind of data (for example course emails), we will add it here before it starts.