Last updated: 2026-07-21
1. Data controller
AST Anna Sobecka, ul. Pabla Picassa 5 lok. 14, 03-126 Warszawa, Poland. NIP: 5241355339. E-mail: contact@doctoramz.com. A Data Protection Officer has not been appointed (the processing carried out does not meet the thresholds of Art. 37 GDPR).
2. What we process, why, and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Responding to a Quick Scan / contact enquiry | e-mail address, Amazon storefront URL | Art. 6(1)(b) GDPR — steps prior to entering into a contract, at your request | 3 years from last contact |
| Website analytics | cookie identifiers, truncated IP, usage events | Art. 6(1)(a) GDPR — your consent | up to 14 months |
| Contract performance and accounting | billing data of business clients | Art. 6(1)(b) and (c) GDPR | as required by Polish tax law |
3. Recipients
Hosting: HOSTINGER INTERNATIONAL LIMITED, Cyprus (servers in Frankfurt, Germany). Analytics: Google Ireland Ltd / Google LLC (USA) — loaded only after your consent.
4. Transfers outside the EEA
If you consent to analytics, data may be transferred to Google LLC in the USA on the basis of the EU–US Data Privacy Framework adequacy decision and, where applicable, Standard Contractual Clauses. You can obtain details at contact@doctoramz.com.
5. Your rights
Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time (without affecting prior processing). Contact: contact@doctoramz.com. You may lodge a complaint with a supervisory authority — in Poland: the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa (uodo.gov.pl); in the UK: the ICO (ico.org.uk).
6. Voluntariness
Providing your e-mail is voluntary, but without it we cannot respond to your enquiry.
7. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
8. Social media and marketing
We maintain — or are progressively rolling out — profiles on professional and social networks in line with our channel strategy: LinkedIn (primary), X (Twitter) (@doctoramz), Meta (Facebook / Instagram), YouTube, Reddit and Quora (Instagram and TikTok reserved). When you interact with us there, the platform processes the data you make available under its own privacy policy, over which we have no control, and we process the content of that interaction to respond and maintain the relationship (Art. 6(1)(f) GDPR).
For statistics of our Facebook/Instagram pages we act as joint controller with Meta Platforms Ireland Limited (Page Insights). Advertising/measurement tools of these platforms (e.g. LinkedIn Insight Tag, Meta Pixel, Google Ads) run on doctoramz.com only after you consent to the marketing category in the cookie banner (Art. 6(1)(a) GDPR); none are active at present. The Cookie Policy lists every platform and tool in detail.
Profiling and demographics. If you consent to the marketing category, we and Google may profile you for marketing: Google Signals can supply aggregated age, gender and interest data, link your activity across devices, and build remarketing audiences to personalise ads (Google Ads and, once introduced, Meta/LinkedIn tools). The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw consent or object to profiling at any time — via Cookie settings or contact@doctoramz.com — and we take no decisions producing legal or similarly significant effects based solely on automated processing (Art. 22 GDPR). With analytics-only consent, no profiling or demographic data is collected.
9. Cookies and similar technologies
Legal basis for storing or reading information on your device: Art. 5(3) of the ePrivacy Directive as implemented nationally — § 25 TDDDG (Germany), Article 82 of Law No 78-17 (France), PECR as amended by the Data (Use and Access) Act 2025 (UK), Article 399 PKE (Poland) — and, for personal data, the GDPR (consent: Art. 6(1)(a)).
We use two categories only: strictly necessary (the damz_consent cookie remembering your choice, 6 months) and analytics (Google Analytics 4, tag G-KC63RSQ5XE, cookies _ga and _ga_KC63RSQ5XE, up to 2 years — loaded exclusively after your consent). We use no marketing or advertising cookies; introducing any new tool would require a prior policy update and your separate consent. Nothing non-essential loads before you decide, and you can change or withdraw your choice at any time via Cookie settings in the footer.
Full details — the complete cookie table, how consent works on this site, and browser instructions — are in the Cookie Policy.
Visitors from the United States (California and other states)
AST is a small EU-based business and does not currently meet the thresholds that would make it subject to the California Consumer Privacy Act (CCPA/CPRA) or other US state privacy laws — these apply, broadly, to businesses above set revenue levels or that buy, sell or share the personal data of tens of thousands of a state’s residents. We do not claim those laws apply to us; we nevertheless want US visitors to understand our practices:
- We do not sell your personal information, and we do not use it for cross-context behavioral advertising (remarketing) without your prior, opt-in consent to the marketing category.
- We honor the Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as an instruction not to share your data for advertising: the marketing category stays off and no advertising or remarketing tool loads, regardless of the cookie banner.
- Your choices apply everywhere. Wherever you live, you may email contact@doctoramz.com to ask what personal data we hold about you, or to request correction, deletion or restriction, or to object to processing. We honor these requests for all visitors as a matter of policy.
- No discrimination. We will not treat you differently for exercising any privacy choice.
Frequently asked questions
Who is the controller of my data? AST Anna Sobecka, ul. Pabla Picassa 5 lok. 14, 03-126 Warszawa, Poland, NIP 5241355339. Contact: contact@doctoramz.com.
Do you send my data outside the EU? Only if you consent to analytics: Google may process data in the USA under the EU–US Data Privacy Framework and, where applicable, Standard Contractual Clauses. Details in the transfers section above.
Do you use social media and advertising tools? We run or are rolling out profiles on LinkedIn, X, Facebook, YouTube, Reddit and Quora. Their advertising/measurement tools load only after you consent to the marketing category; none are active yet. See the Cookie Policy.
How do I exercise my rights? Email contact@doctoramz.com. You can also complain to a supervisory authority (in Poland: UODO; in the UK: ICO).