Privacy Policy
Last updated: 9 September 2026
This Privacy Policy explains how personal data and information about website use are processed when you visit the Piotr Wcisło Group website at piotrwcislogroup.umk.pl.
Review or change your saved optional preferences at any time.
1. Data controller
The controller of personal data processed in connection with this website is:
Nicolaus Copernicus University in Toruńul. Gagarina 11
87-100 Toruń, Poland
The University has appointed a Data Protection Officer. You may contact the Data Protection Officer at iod@umk.pl, by telephone at +48 56 611 27 42, or by post at Nicolaus Copernicus University in Toruń, ul. Gagarina 7, 87-100 Toruń, Poland.
2. Information processed when you visit
When you open the website, the web server necessarily receives technical request data such as your IP address, the requested address, the date and time of the request, browser information and HTTP headers. These data may also appear in technical server logs used to operate and secure the website.
The website additionally maintains first-party audience statistics. For this purpose it processes the visited page, page title, date and time, country code, bot classification and pseudonymous visitor identifiers created with a secret cryptographic key from the IP address, browser User-Agent and preferred browser language. The analytics database does not store the plain IP address. The identifiers are used to estimate daily visits and distinguish first-time from returning visitors; they are not intended to identify visitors by name.
3. Purposes and legal bases
Technical information is processed to deliver the website, maintain its security, diagnose faults and prevent abuse. Limited audience information is processed to understand how the website and its content are used and to support its development. The legal basis is the legitimate interest of the controller in operating, securing and improving the website pursuant to Article 6(1)(f) GDPR.
Where optional processing is offered on the basis of consent, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
4. Browser storage and cookies
The website does not use advertising cookies or cross-site marketing trackers. It currently uses the following first-party browser storage:
| Name | Technology | Purpose | Duration |
|---|---|---|---|
pwg_privacy_preferences |
Necessary first-party cookie | Records whether you accepted or rejected optional external media so that the website can respect your choice. | One year from the most recent visit on which the saved preference is read. |
pwg_contact_map_provider |
Local storage | Remembers your choice of Google Maps or OpenStreetMap on the Contact page. | Until changed or removed in the browser. |
pwg_theme |
Local storage | Remembers the light or dark appearance selected in Site Settings. | Until changed or removed in the browser. |
pwg-stats-site-visits-series |
Local storage and first-party cookie | Remembers chart-series visibility in the restricted statistics interface. | The cookie expires after one year; local storage remains until removed. |
You can remove browser storage through your browser settings. Removing it resets the associated interface preferences.
5. Country information
To produce country-level statistics, the server may submit a visitor’s IP address to the country.is service and store only the returned country code. The service states that it does not log API requests. If the lookup is unavailable, the country is recorded as unknown.
6. External content and services
External maps and media players supplied by services such as OpenStreetMap, Google Maps, YouTube and Spotify are not loaded until you allow External media. You may do this through Privacy settings or by deliberately selecting a “Load map” or player button. The button is accompanied by information that this action enables external media and records the preference in the necessary pwg_privacy_preferences cookie.
Loading external content establishes a direct connection between your browser and the provider. The provider may receive your IP address, browser and device information, referrer information and other data governed by its own privacy terms. You may withdraw permission at any time through the Privacy settings section near the top of this page; this prevents further external content from loading until permission is granted again.
For further information, consult the privacy information of OpenStreetMap, Google and YouTube, and Spotify. Other external links and media providers are governed by the privacy policies of their respective operators.
The fonts used by this website are hosted locally and are not downloaded from Google Fonts when you visit.
7. Contact by email
If you contact a member of the group by email, the information you provide is processed to respond to your message and handle the matter to which it relates. The applicable legal basis depends on the nature of the correspondence and may include steps taken at your request, compliance with legal obligations or the legitimate interest in conducting academic and professional correspondence.
8. Recipients and international transfers
Data may be accessible to authorised University personnel and service providers supporting the hosting, maintenance and security of the website, only to the extent necessary for those purposes. When you load external maps or media, the relevant external provider receives the connection directly and may process data outside the European Economic Area under the safeguards described in its own privacy information.
9. Retention
Technical server logs are retained for periods determined by operational and security requirements. Pseudonymous analytics records are retained for as long as necessary to maintain historical website statistics and are subject to periodic review. Aggregated statistics that no longer relate to an identifiable or pseudonymously identifiable person may be retained for longer. Browser-storage periods are described in section 4. Email correspondence is retained for the period necessary to handle the relevant matter and any applicable archival or legal obligations.
10. Your rights
Subject to the conditions of the GDPR, you may request access to your personal data, rectification, erasure or restriction of processing, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office.
Because website analytics identifiers are pseudonymous and are not connected to names or contact details, the controller may need additional information to determine whether a particular record relates to you. The controller is not required to collect additional identifying data solely for this purpose.
11. Automated decision-making
The website does not use the collected information for automated decision-making or profiling that produces legal or similarly significant effects.
12. Changes to this policy
This policy may be updated when website functionality, service providers or legal requirements change. The current version and its update date will be published on this page.