Data controller
The controller of personal data is Arkadiusz Jelonek, a sole trader operating under the registered business name Arkadiusz Jelonek. Testing Station is a brand operated by the controller.
Privacy-related enquiries can be sent to kontakt@testingstation.pl.
Data processed
The scope of the data depends on the website features used:
- contact form — full name, email address, message and data needed to continue the correspondence;
- newsletter — email address, subscription status, date and technical information related to sign-up, double opt-in confirmation and unsubscribe actions;
- use of the website — IP address, request date and time, requested URL, response status, browser or device information, and details of errors or security events.
Providing data is voluntary, but without the required information a message cannot be sent and a newsletter subscription cannot be completed.
Contact form
Contact-form data is used to reply to the message, continue the correspondence and — if the enquiry concerns a service — prepare to enter into or perform a contract.
Where a message concerns a service or prospective contract, the basis is taking steps at the sender's request before entering into a contract (Article 6(1)(b) GDPR). Otherwise, the basis is the controller's legitimate interest in handling correspondence and developing business relationships (Article 6(1)(f) GDPR).
Newsletter
The newsletter contains information about new Testing Station episodes and materials on QA, automation and AI, as well as the controller's services and offers. It does not contain partner offers.
The basis for processing an email address is the subscriber's consent (Article 6(1)(a) GDPR) and Article 398 of the Polish Electronic Communications Law. Consent is given by selecting the consent box and submitting the subscription form.
A double opt-in mechanism is used: after sign-up, an email requesting address confirmation is sent to the address provided.
Consent can be withdrawn at any time using the unsubscribe link in each message or by contacting the controller. Withdrawal does not affect the lawfulness of processing carried out before it.
Technical data and logs
The server and infrastructure providers keep basic technical logs to display the website, maintain its stability, diagnose errors, protect it against abuse and respond to security incidents.
The basis is the controller's legitimate interest in running a secure and reliable website (Article 6(1)(f) GDPR).
Recipients and service providers
Personal data is not sold or shared with partners for their own marketing. The controller uses providers needed to operate the website and communications:
- MailerLite — newsletter sign-ups, confirmations and delivery;
- Resend — transmission of messages submitted through the contact form;
- Google Workspace — email account and storage of correspondence.
Technical data may also be processed by providers of hosting, DNS, certificates, and traffic protection and delivery. They act on the controller's instructions and only as needed to provide their services.
Data may be disclosed to public authorities only where required by law or a valid, binding request.
Some providers, including Resend, Google or infrastructure providers' subprocessors, may process data outside the European Economic Area. Where required, a transfer relies on an adequacy decision of the European Commission — including the EU–US Data Privacy Framework — Standard Contractual Clauses or other safeguards under Article 46 GDPR.
Further information about the safeguards, or a copy where permitted by law, can be requested from the controller.
Summary of retention periods
- Correspondence: 3 years from the last contact, with longer storage possible where connected with a contract, legal duty or claims.
- Newsletter: until the subscription is cancelled or the service ends; minimal consent evidence and suppression-list entry — up to 3 years.
- Technical logs: normally up to 30 days; longer only in connection with an incident, legal duty or claims.
Rights of data subjects
Depending on the basis and circumstances of the processing, data subjects have the right to:
- access the data and receive a copy;
- correct inaccurate data or complete incomplete data;
- have data erased where there is no basis for further processing;
- restrict processing;
- data portability where processing is automated and based on consent or a contract;
- object to processing based on a legitimate interest;
- withdraw consent at any time without affecting the lawfulness of earlier processing.
Requests to exercise these rights can be sent to kontakt@testingstation.pl.
A complaint may also be lodged with the President of the Polish Personal Data Protection Office if personal data is believed to be processed unlawfully.
Automated decision-making and profiling
No decisions producing legal or similarly significant effects are made solely by automated means. Website users are not profiled.
