Jarosław Chybicki
GDPR

Privacy policy

How I process the personal data of people who visit chybicki.pl, and what rights you have.

Data controller

The controller of personal data processed in connection with the chybicki.pl website is Jarosław Chybicki.

For any matters concerning your personal data, please write to the email address above.

Email and contact form

If you write to me by email or through the contact form, I process the data you provide: your name, email address and the content of your message.

  • Purpose and legal basis: replying to your message and, where relevant, arranging cooperation (Art. 6(1)(b) and (f) GDPR).
  • Retention: for as long as needed to handle the matter and, if no cooperation follows, no longer than 12 months after the last message.
  • Recipients: service providers used by the website and email: Cloudflare (hosting, email forwarding), the service that runs the contact form (its name is shown next to the form) and the controller’s email provider.
  • Health data: please do not describe health details in your message. A short note on what your enquiry is about is enough; we can discuss the rest in a consultation.

Tests and questionnaires

Answers in tests and questionnaires are processed only in your browser. They are not stored and not sent to any server.

“A Conversation That Helps” materials

The materials at chybicki.pl/materialy/ppp/en/ (also in Polish) run entirely in your browser:

  • Tests, quizzes and the “Where to start?” guide: your answers and results are calculated only on your device. They are not saved or sent to a server and disappear when you close the page.
  • Search: it searches an index downloaded together with the materials. Your queries are not sent or saved anywhere.
  • Exercise recordings are played from media.chybicki.pl (Cloudflare, see “Technical data and hosting”).
  • YouTube videos (privacy-enhanced mode, youtube-nocookie.com) load only after you click “Play”; from then on Google processes data under its own privacy policy. Links to other services (e.g. TED) open only when clicked.
  • Phone app and offline use: your browser stores a copy of the material files (texts, graphics, PDFs) on your device. It does not contain your answers or queries. You can remove it by clearing the site data in your browser settings or uninstalling the app.

The “Praktyka · JC” app

At chybicki.pl/aplikacja/ (in Polish) you can install the website on your phone as an app. It needs no account and does not collect or send anything about you.

  • Offline use: when you open the app page, your browser saves a copy of the exercises, the “stress” and “crisis” pages and the site files (styles, scripts, fonts) on your device, and later the pages you open in the app (up to 80). The copy contains none of your data.
  • Recordings on your phone: saved only when you tap “Download”. You can delete them in the app.
  • You remove everything by uninstalling the app or clearing the site data in your browser settings.

Online appointment booking

You can book an appointment through an external booking calendar embedded on the Therapy page (its name is shown next to the calendar). You provide your name, email address and chosen time; the data goes to the booking service and to me. I process it to schedule and hold the appointment (Art. 6(1)(b) GDPR), for as long as needed for that purpose and for accounting. The booking service may process data outside the European Economic Area on the basis of standard contractual clauses. Please do not enter health information in the booking.

Registration and evaluation forms

Training registrations and evaluation surveys may be run through forms of an external service embedded on the website. Each form shows which service it comes from. Data entered in a form goes to that service and to me; I process it to organise the training or assess its quality (Art. 6(1)(b) and (f) GDPR) for as long as needed for that purpose.

Mailing list

  • Purpose and legal basis: sending e-books and messages about new materials (recordings, texts, e-books), based on your consent (Art. 6(1)(a) GDPR; Art. 398 of the Polish Electronic Communications Law). You confirm your subscription by clicking a link in an email (double opt-in).
  • Scope: your email address and the subscription and confirmation data (date, IP address) as proof of consent.
  • Recipient: MailerLite Limited (Dublin, Ireland), a processor acting under a data processing agreement. MailerLite may use sub-processors outside the European Economic Area on the basis of standard contractual clauses.
  • Delivery statistics: messages may contain MailerLite mechanisms that measure opens and link clicks; they are used only to assess whether messages arrive.
  • Retention and unsubscribing: I keep the data until you withdraw consent. You can unsubscribe at any time using the link in the footer of every message or by writing to the address above. Withdrawing consent does not affect the lawfulness of earlier mailings.

Content embedded from other services

Some pages may embed forms, quizzes and exercises from external services, mini-courses (MiniCourseGenerator), publications for browsing (Flipbooklets) and videos (YouTube, Vimeo). Forms, quizzes, mini-courses and publications load only after you consent (the “Cookies” banner) or after you click “Display” on a given item; videos load only after you click “Play”. From that moment the service concerned processes data under its own privacy policy.

Technical data and hosting

The website is hosted by Cloudflare, Inc. (including the recording files at media.chybicki.pl). On every visit, Cloudflare servers process technical data (including IP address, browser type and the address of the page visited) in order to display the site and protect it against attacks (Art. 6(1)(f) GDPR). Cloudflare may process data outside the European Economic Area on the basis of the EU-US Data Privacy Framework and standard contractual clauses.

Cookies

The website uses no tracking or advertising cookies and no analytics tools. Fonts are served from the same domain (no connections to Google). I store on your device only what is necessary for the site to work and, solely with your consent, allow cookies of the services that provide embedded forms and quizzes.

Name Type Purpose Retention Consent
zgoda-cookies browser storage (localStorage) remembering your choice from the banner 12 months not required (necessary)
strefa_<code> first-party cookie access to a client area after entering the password 30 days or until logout not required (necessary)
jc-… browser cache (Cache Storage) and service worker copy of the “Praktyka · JC” app pages and files for offline use, and recordings downloaded with the button (none of your data) until a new version of the site, the recording is deleted, the app is uninstalled or site data is cleared not required (necessary)
ppp-… browser cache (Cache Storage) copy of the “A Conversation That Helps” files for offline use (no answers or queries) until a new version of the materials or until site data is cleared not required (necessary)
__cf_bm, cf_clearance Cloudflare cookie (hosting) protecting the site against automated traffic up to 30 minutes / up to a year not required (necessary)
cookies of external services (forms, quizzes, exercises, mini-courses and publications embedded on the site) third-party cookies operation of embedded content according to that service’s policy required

External content. Until you consent, embedded forms and quizzes are not loaded; instead you see a notice with a “Display” button that loads only that one item. Videos (YouTube in privacy-enhanced mode, Vimeo with the “do not track” option) always load only after you click “Play”.

Changing your decision. You can change or withdraw your consent at any time with the “Cookie settings” button in the footer. You can also delete cookies and site data in your browser settings.

Legal basis: Art. 399 of the Polish Electronic Communications Law of 12 July 2024 and Art. 6(1)(a) GDPR (consent) for external content; for necessary files, the exception for storing information strictly necessary to provide the service.

Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, port it, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. To exercise these rights, write to [email protected].

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO; ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).

Changes to this policy

I will announce significant changes to this policy on this page. Version of 7 October 2026 (English translation of the Polish original; in case of discrepancies the Polish version prevails).