Privacy policy

Effective from 16 October 2026.

This page explains what data we collect on odpal.si, why, and what you can do about it.

Who is responsible for your data

The data controller is CrejkSoft Bartłomiej Bobak, NIP 5842812853, REGON 520978252.

For anything about your data, email contact@odpal.si.

What we collect and why

Free course and newsletter signup

When you sign up through the form on the site, we collect:

• your email address,
• the date of signup and confirmation, and the IP address you confirm from, as proof of your consent.

We use the address to send you the course link and news about new Odpal courses and materials. The legal basis is your consent (Article 6(1)(a) GDPR), which you give by signing up and clicking the confirmation link.

You can withdraw consent at any time with the "Unsubscribe" link in every email or by writing to us. Withdrawal does not affect anything sent before.

Email statistics

Our email system records whether you open a message and click a link, so we can see which content is useful. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). You can object by writing to us.

Correspondence

When you email us, we process your address and the message to reply. The legal basis is our legitimate interest in handling correspondence (Article 6(1)(f) GDPR).

Orders

When you order paid access, we process the data needed to fulfil the order and issue an invoice: your name or company name, address, tax ID and email address. The legal basis is the contract (Article 6(1)(b) GDPR) and our tax and accounting obligations (Article 6(1)(c) GDPR).

Visiting the site

The server that runs the site records technical data about visits, such as IP address and browser type. This keeps the site working and protected from attacks. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).

Who we share data with

We use companies that process data on our behalf:

• MailerLite Limited (Dublin, Ireland): sends emails and stores the mailing list. Data is stored in the European Union.
• Cloudflare, Inc. (USA): hosts the site and protects it from attacks. Data may be transferred to the USA. Cloudflare participates in the EU-U.S. Data Privacy Framework, under which the European Commission found an adequate level of protection.
• Google LLC (USA): Google Fonts, the typefaces loaded from Google's servers. Your browser sends your IP address to Google when loading them. Google participates in the EU-U.S. Data Privacy Framework.

We do not sell data or share it with anyone else unless the law requires it.

How long we keep data

• Your signup email: until you unsubscribe. We then keep the proof of consent until any possible claims expire.
• Correspondence: until the matter is resolved, then until any possible claims expire.
• Order and invoice data: 5 years from the end of the year the invoice was issued, as tax law requires.
• Technical visit data: as set by Cloudflare's policies, usually for a short time.

Your rights

You have the right to:

• access your data and get a copy,
• correct your data,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw consent at any time.

To use these rights, email contact@odpal.si. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland), or to the authority in your country.

Giving your email address is voluntary, but without it we cannot send you the course. We do not make automated decisions about you or profile you.

Browser storage and cookies

The site does not use cookies for ads or analytics. It stores one item in your browser's local storage: whether the free course popup has been shown or you have already signed up, so we do not show it again. You can remove it by clearing the site's data in your browser.

Changes

When we change this policy, we will update the date at the top. We will tell newsletter subscribers about significant changes.