Łódź, Łódź Voivodeship
Sunday, 30 August 2026 PL / EN
Legal documents

Privacy Policy

Last updated: 30 March 2026  ·  Effective from: 30 March 2026

Table of contents
  1. Data controller
  2. What data we collect
  3. Purposes and legal bases for processing
  4. Cookies
  5. Third parties
  6. Retention period
  7. Your rights
  8. Security
  9. Children and minors
  10. Contact
This privacy policy describes how the DziśwŁodzi.pl portal collects, uses, and protects your personal data. By using the portal, you accept the rules described in this document.

1 Data controller

The controller of your personal data is Dynamite Dev. Mariusz Przybylski, ul. Folwarczna 40, 91-487 Łódź, Poland, VAT ID (NIP): 6681806982, REGON: 100987658 — the operator of the DziśwŁodzi.pl portal, available at dziswlodzi.pl.

For matters relating to the protection of personal data, you may contact us at the following e-mail address: kontakt@dziswlodzi.pl

2 What data we collect

Data provided upon registration:

Data obtained when logging in via Google / Facebook (OAuth):

Data generated while using the portal:

Technical data (collected automatically):

3 Purposes and legal bases for processing

Purpose Legal basis (GDPR)
Creating and maintaining a user account Art. 6(1)(b) — performance of a contract
Logging in via Google / Facebook Art. 6(1)(b) — performance of a contract
Publishing comments, ratings, and likes Art. 6(1)(b) — performance of a contract
Adding events by users Art. 6(1)(b) — performance of a contract
Content moderation and portal security Art. 6(1)(f) — legitimate interest
Visit statistics (Google Analytics 4) — analytics cookies Art. 6(1)(a) — consent (consent banner, withdrawable at any time)
Serving ads (Google AdSense) — advertising cookies Art. 6(1)(a) — consent (consent banner, withdrawable at any time)
Improvement of service quality based on data that does not require cookies Art. 6(1)(f) — legitimate interest
Handling payments for paid listings and advertising services Art. 6(1)(b) — performance of a contract
Issuing invoices and storing accounting documents Art. 6(1)(c) — legal obligation (accounting and tax law)
Sending the newsletter Art. 6(1)(a) — consent (confirmed by a link in an e-mail, withdrawable with one click)
E-mail communication (account verification, password reset) Art. 6(1)(b) — performance of a contract
Compliance with legal obligations Art. 6(1)(c) — legal obligation

4 Cookies

The portal uses cookies — small text files stored in the browser. We distinguish:

Type Name / description Lifetime
Session Session cookie — maintains logged-in status Until browser is closed
Remember me Persistent cookie — if "Remember me" was selected 30 days
CSRF Token protecting forms against attacks Session
Preferences Language, likes (session storage) Session / persistent
Consent dwl_consent — your choice from the consent banner (browser local storage, not a cookie) Until browser data is cleared
Security _GRECAPTCHA — Google reCAPTCHA, tells humans from bots in forms 6 months
Analytics (with consent only) _ga, _ga_* — Google Analytics 4: visit statistics, most-read content Up to 24 months
Advertising (with consent only) Google AdSense / DoubleClick — serving ads and measuring their performance Up to 24 months

Consent for analytics and advertising cookies

On your first visit we show a consent banner. Until you give consent, analytics and advertising cookies are disabled — we use Google Consent Mode v2, where the default state is denial and the advertising script is not loaded at all. Necessary cookies (session, CSRF, security) always work, because the portal cannot function without them, and they do not require consent.

You can change or withdraw your choice at any time — the "Cookie settings" link in the footer reopens the same banner. You can also delete cookies in your browser settings; disabling necessary cookies may prevent the use of certain portal features (e.g. maintaining a login session).

5 Third parties

In connection with the operation of the portal, we use the services of external providers:

Provider Purpose Privacy policy
Google LLC Login via Google (OAuth 2.0), Google Places API (data on places and restaurants), Google reCAPTCHA v3 (protecting forms against bots) policies.google.com/privacy
Google Analytics 4 (with consent only) Portal visit statistics — anonymised, without profiling for advertising purposes policies.google.com/privacy
Google AdSense (with consent only) Serving ads that fund the portal and measuring their performance policies.google.com/technologies/ads
mBank S.A. (PayNow) Handling online payments for paid listings and advertising services. The operator receives the data needed to settle the transaction (amount, order identifier, name, e-mail address). We do not store payment card data — the entire payment process takes place on the operator's side. paynow.pl
Anthropic PBC Automatic translation and categorisation of editorial content (descriptions of events, attractions, articles). Only content published on the portal is processed — we do not send users' personal data. anthropic.com/legal/privacy
Meta Platforms (Facebook) Login via Facebook (OAuth) facebook.com/privacy/policy
Bilety24 Displaying events and links for purchasing tickets (public data only) bilety24.pl
City of Łódź Office (UML API) Public calendar of municipal events (public data only) uml.lodz.pl

We do not sell or share your personal data with third parties for marketing purposes.

Transfers outside the European Economic Area

Google LLC, Meta Platforms and Anthropic PBC are based in the United States. Data is transferred on the basis of standard contractual clauses approved by the European Commission and — for providers participating in the EU-U.S. Data Privacy Framework — on the basis of a European Commission adequacy decision.

6 Data retention period

7 Your rights

Under the GDPR, you have the following rights:

To exercise the above rights, please contact us at: kontakt@dziswlodzi.pl

If you believe that we are processing your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).

8 Data Security

We apply technical and organisational measures ensuring an appropriate level of security:

9 Children and Minors

The DziśwŁodzi.pl portal is not directed at persons under 13 years of age. We do not knowingly collect personal data of children below this age. If you believe that such data has been collected, please contact us — we will remove it without delay.

10 Contact and Changes to the Policy

If you have any questions regarding this privacy policy, please contact us:

We reserve the right to amend this privacy policy. Users will be informed of any significant changes through a notice on the website or by e-mail. The date of the last update is always displayed at the top of this page.