Effective from 28 September 2026.
This is a shorter English version of the Polish privacy policy, which is the binding one. It explains what data about you reaches me and the companies whose services the survivalism.pl blog uses, why, on what legal basis, for how long, and what your rights are. I run the blog on my own, so I write in the first person.
In short
- The site has no accounts or logins. You read articles without giving any data.
- Google Analytics, posts from X and videos from YouTube and Vimeo load only after you consent. Without consent, no data about your visit goes to Google Analytics.
- The contact form and the comment form are protected from spam by Cloudflare Turnstile.
- Some links to Amazon are affiliate links, and some posts are sponsored articles.
- You can change your consent at any time with the “Cookie settings” button in the page footer.
Who is responsible for your data
The controller of your personal data is Sławomir Kasprzak, running a business under the name Wellmade.
In matters of personal data, write to kontakt@survivalism.pl or use the form on the Kontakt page (in Polish).
What data I process, why and on what basis
Visiting the site
When you open a page, your browser connects to the server of the hosting company. The server logs technical data about each request: IP address, date and time, the address of the page and information about the browser. They are used to keep the site running and secure, for example to detect errors and abuse. Basis: my legitimate interest (Art. 6(1)(f) GDPR).
Fonts, images and styles come from the survivalism.pl server. From other companies’ servers the site loads only the services described below.
Statistics: Google Analytics (only with consent)
If you consent to “Statistics”, the site loads Google Analytics 4. Google then collects information about the visit: which pages you open, where you come from (for example a search engine), how long you read, whether you scroll, click links to other sites, download files or watch embedded videos, as well as the type of device and browser and your approximate location (country, city). This tells me which articles are read and where readers come from. Collection of user-provided data (such as email addresses) is switched off in Google Analytics. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Without this consent the site does not load the Google Analytics script at all and sends Google no data about the visit.
Google signals (linking visit data with Google accounts) are switched off in Google Analytics, and the site uses neither Google Ads nor any personalised advertising. How Google uses information from sites is described on the page How Google uses information from sites or apps that use our services.
Content from other services
- Posts from X (formerly Twitter). Some articles contain embedded posts from X. Until you consent to “Third-party content”, you see a quote with a link to the post instead of the widget. After consent the site loads the X script, which may set its own cookies and send X information about your visit. Basis: your consent (Art. 6(1)(a) GDPR). X’s rules: X privacy policy.
- Videos from YouTube and Vimeo. Some articles contain videos from YouTube (a Google service) and Vimeo. Until you consent to “Third-party content”, instead of the player you see a placeholder with a link to the video and a button that allows third-party content; the site does not connect to YouTube or Vimeo then. After consent the player loads from the service’s site only when you click the video; the service then receives your IP address and browser information and may set its own cookies. Basis: your consent (Art. 6(1)(a) GDPR). The button in the placeholder gives the same consent as “Third-party content” in the banner, for the whole site; you change it with the “Cookie settings” button in the footer. Their rules: Google privacy policy and Vimeo privacy policy.
Contact form
In the form you give your name, email address and message. The form sends them to me in one email to the kontakt@survivalism.pl mailbox, run by the hosting company; I keep a copy of this mailbox on my computer, and the site itself stores the message nowhere else. I use your email address only to reply. Basis: my legitimate interest in replying to your message (Art. 6(1)(f) GDPR).
Messages sent through the earlier version of the form were also stored in the blog’s database; I deleted them there when moving to the current version of the site. They may remain for another 30 days in database backups and in the copy of the previous version of the site, after which I delete those copies.
Comments
You send a comment with a name or signature, an email address and the text. Together with them I store the IP address and browser data (the user agent), as WordPress does, to recognise spam and abuse. Every comment waits for my approval: until then it is stored on the hosting server, and I receive an email with the signature, email address, date and text. I then move the comment to the blog’s database (WordPress), where I approve it, reject it or mark it as spam.
An approved comment is shown under the article with its signature and date. I do not publish the email address, IP address or browser data. On some older comments the signature links to a website the author gave in the old form; the current form has no such field.
Basis: my legitimate interest in running the discussion under the articles and protecting it from spam (Art. 6(1)(f) GDPR). I publish the signature and text because that is what you leave them for.
The site sends readers no emails about comments: neither about approval nor about new comments or replies. I deleted the old subscriptions to such emails when moving to the current version of the site.
Spam protection: Cloudflare Turnstile
On the contact page and on article pages with the comment form, the browser loads the Cloudflare Turnstile script when the page opens. From information about the browser and device it checks whether a human is filling in the form. When the form is sent, I pass Cloudflare the result of this check and your IP address to confirm the result. Without it the form is not sent, so it needs JavaScript switched on. Basis: my legitimate interest in protecting the forms from spam (Art. 6(1)(f) GDPR). Cloudflare also processes the data needed for the check itself on its own account, as a separate controller, under the rules in the Cloudflare privacy policy.
Affiliate links and sponsored articles
As an Amazon Associate I earn from qualifying purchases. Some product links lead to the Amazon store, directly, through amzn.to short addresses or through redirects on the survivalism.pl domain. Viewing an article alone sends Amazon no data. Only after a click do you reach the Amazon store, which may set its own cookies and attribute the purchase to my link. Amazon manages that data under its own rules, described in its privacy policy.
Some posts are sponsored articles, written for payment from an advertiser; each of them ends with the note “Artykuł sponsorowany” (sponsored article), and links to advertisers are marked as sponsored. Clicking such a link takes you to the advertiser’s site, which processes data under its own policy. I do not pass readers’ data to advertisers.
Who I share data with
- Hosting company SEOHOST Sp. z o.o., ul. Obornicka 330, 60-689 Poznań, Poland: runs the site’s server, the mailbox and the comment queue; processes data on my behalf.
- Google Ireland Limited (together with Google LLC): Google Analytics (only with consent to “Statistics”) and YouTube videos (only with consent to “Third-party content”).
- Cloudflare, Inc.: spam protection of the forms (Turnstile).
- X: embedded posts (only with consent).
- Vimeo: videos embedded in articles (only with consent).
- Amazon: only after you click a link to the store, under Amazon’s rules.
I do not sell data.
Transfers outside the European Economic Area
Google, Cloudflare, X and Vimeo may also process data in the United States. The basis is the European Commission’s adequacy decision for companies participating in the EU-US Data Privacy Framework (all four participate), and where it does not cover a transfer, standard contractual clauses adopted by the Commission. Amazon processes data under the rules in its privacy policy, and only after you go to the store.
How long I keep data
- Server logs: for as long as the hosting company keeps server logs as part of running the server.
- Contact form messages: in the mailbox and its copy on my computer, up to 12 months after the correspondence ends. If the correspondence leads to cooperation (for example publishing a sponsored article), I keep it as long as tax and accounting law requires.
- Comments: approved ones, with the email address, IP address and browser data, as long as the comment is on the site or until you ask for its deletion. A comment waiting for approval stays on the hosting server until I move it to the blog’s database, and I keep it until I approve or reject it. Comments marked as spam or moved to the trash are deleted after 30 days.
- Emails notifying me of a new comment: in my mailbox and its copy, like contact form messages.
- Backups of the site’s database and files: 30 days from the backup, then I delete them.
- Your choice in the consent banner: 182 days in your browser.
- Google Analytics: detailed event data 2 months, data linked to the browser identifier 14 months from the last visit; Google Analytics cookies up to 2 years from the last visit.
Cookies
A cookie is a small file a site stores in your browser. The survivalism.pl site itself stores only one, with your choice in the consent banner. The others are set by third-party services; those marked “after consent” appear only once you give it.
| Name | Set by | Purpose | Duration | When |
|---|---|---|---|---|
| sv_consent | survivalism.pl | remembering your choice in the consent banner | 182 days | always, once you choose (necessary) |
| _ga | Google Analytics | telling browsers apart in the statistics | up to 2 years | after consent to “Statistics” |
| _ga_RJCS8VY230 | Google Analytics | remembering the state of the visit in the statistics | up to 2 years | after consent to “Statistics” |
| X cookies | X | showing the post and X’s own purposes | set by X | after consent to “Third-party content” |
| YouTube cookies (for example YSC, VISITOR_INFO1_LIVE) | Google (YouTube) | the player, YouTube settings and statistics | set by Google | after consent to “Third-party content”, when you click the video |
| Vimeo cookies, if the service sets them | Vimeo | the player | set by Vimeo | after consent to “Third-party content”, when you click the video |
Amazon’s and advertisers’ cookies are set only on their sites, after you click a link.
How to change your consent
On your first visit the site shows a banner with a choice: “Accept all”, “Reject” or “Let me choose”. You can change your decision at any time with the “Cookie settings” button in the footer of every page (the button works with JavaScript switched on). When you withdraw a consent the page reloads, and when you withdraw consent to statistics it also deletes the Google Analytics cookies and stops sending data to Google. The choice holds for 182 days, after which the banner appears again. You can also block or delete cookies in your browser settings; cookies set by YouTube, X and other services can be deleted only that way.
Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification of your data,
- erasure of your data, for example of your comment,
- restriction of processing,
- portability of the data I process on the basis of your consent,
- object to processing based on my legitimate interest,
- withdraw your consent at any time; withdrawal does not affect the lawfulness of what happened before it.
To exercise these rights, write to kontakt@survivalism.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Moniuszki 1A, 00-014 Warszawa, Poland, uodo.gov.pl).
Do you have to give data
Giving data is voluntary. You read articles without giving any data and without consenting to cookies. Without a name and an email address you cannot send a comment, and without an email address I cannot reply to your message. I do not make decisions about you based solely on automated processing that would have legal effects or similarly significantly affect you; the automatic spam protection of the forms described above is not one of them.
Changes to this policy
When the services the site uses or the way it processes data change, I will update this page and the date at its top.