Privacy policy

I respect your privacy and only collect the data I really need to reply to you and work with you. The site does not use tracking cookies, analytics or advertising tools.

This policy explains what data I collect on passion.ventures, why, how long I keep it and what rights you have. It applies from 21 October 2026.

Who controls your data

The data controller is Jakub Mróz, running a sole proprietorship under the name [Sacred Jakub Mróz], Grunwaldzka 68, 48-200 Prudnik, Poland, VAT ID (NIP) 7551818964, REGON 160217876.

For anything concerning your personal data, write to me by email (the address is in the "Contact" section) or by post to the business address.

What data I collect and where it comes from

I only collect the data you give me yourself, plus the basic technical data needed for the site to work.

• Contact form. Your name (optional), email address and the content of your message.
• Direct contact. When you write to me by email or on LinkedIn, I process your address, your name and the content of our correspondence.
• Free call and working together. The data needed to arrange a call, prepare a quote and deliver the project, and when we work together also the details for the contract and invoice (e.g. company name, address, VAT ID).
• Technical data. The server the site runs on automatically logs, among other things, your IP address, the date and time of your visit, the address of the page you visited and your browser type. I do not combine this data with any other information about you.

Providing your data is voluntary. Without an email address, however, I won’t be able to reply to your message, and without invoice details we can’t sign a contract. Please don’t send me information about your health or other particularly sensitive data in your messages unless it is necessary.

Why I process your data

Each purpose has its legal basis in the GDPR, Regulation (EU) 2016/679 of the European Parliament and of the Council.

Purpose

Legal basis

Replying to your message and corresponding with you

My legitimate interest in staying in touch with people who write to me (Art. 6(1)(f) GDPR)

Arranging a call and preparing a quote at your request

Steps taken before entering into a contract (Art. 6(1)(b) GDPR)

Performing the contract, training and support after the site goes live

Performance of a contract (Art. 6(1)(b) GDPR)

Issuing invoices and keeping the accounts

A legal obligation under tax law (Art. 6(1)(c) GDPR)

Site security and spam protection (server logs)

My legitimate interest (Art. 6(1)(f) GDPR)

Establishing, pursuing or defending legal claims

My legitimate interest (Art. 6(1)(f) GDPR)

I don’t send newsletters or sales offers without your consent. I don’t make automated decisions about you and I don’t profile you.

How long I keep your data

I keep data only for as long as the purpose requires.

Data

Retention period

Correspondence that did not lead to working together

[12 months] from our last contact

Contract data

For as long as we work together, and then until any claims become time-barred

Invoices and accounting records

5 years from the end of the calendar year in which the tax payment was due

Server logs

[30 days]

If you successfully object or ask me to delete your data, I will delete it sooner, unless the law requires me to keep it.

Who I share data with

I don’t sell your data or share it for marketing purposes. I entrust it only to trusted providers I couldn’t run my business without, under data processing agreements:

• Website hosting and servers: AWS and Hetzner.
• Email: Microsoft.
• Accounting firm: Abakus, when I issue invoices.
• Online meeting tool: [Google Meet], if we talk on video.

Public authorities may also receive data, but only when the law requires it.

I make sure your data stays within the European Economic Area. If a provider processes it outside the EEA, for example in the USA, this is based on a European Commission adequacy decision (the EU-US Data Privacy Framework) or on standard contractual clauses approved by the Commission.

Your rights

At any time you can:

• access your data and receive a copy of it,
• ask for it to be corrected if it is out of date or wrong,
• request its deletion or the restriction of its processing,
• transfer the data you gave me in connection with a contract,
• object to processing based on my legitimate interest,
• withdraw your consent if you gave it. This does not affect the lawfulness of earlier processing.

Just write to [email address]. I will reply without undue delay, within one month at the latest.

If you believe I process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland. Before you do, let me know. I’m happy to clear up any doubts.

Cookies and analytics

The passion.ventures site does not store tracking or advertising cookies on your device. I don’t use Google Analytics, Facebook pixels or any other tools that track your behaviour online. That’s also why I don’t show a cookie consent banner.

Fonts, images and scripts load from my own server, not from external services. I protect the contact form from spam without third-party services.

If I add analytics tools or other cookies in the future, I will update this policy first and ask for your consent where the law requires it.

External links, security and changes

The site contains links to other services, such as LinkedIn or my clients’ websites. Once you click them, those services’ privacy policies apply, so it’s worth reading them.

I take care of the security of your data. The connection to the site is encrypted (HTTPS), and I am the only person with access to the servers and the mailbox.

When I change the way I process data, I will update this policy and the date at the top.

Last updated: 21 October 2026.