Privacy notice

Who is responsible

Musa Consulting is responsible for the personal data processed on this site: it is the controller under the GDPR.

Musa Consulting is a sole trader (jednoosobowa działalność gospodarcza) established in Poland.

To contact the controller, including about your rights, use the contact form on the blog. Contact form on the blog(opens in a new tab)

Musa Consulting has not appointed a data protection officer.

What is processed, why, and on what legal basis

Hosting

What

Your IP address, the address of the page you ask for, and technical details your browser sends, such as its type and language.

Why

To deliver the pages and keep the site secure.

Legal basis

Legitimate interest in running a secure, working site (GDPR Art. 6(1)(f)).

Kept for

The site keeps no web server logs; Microsoft processes the data only to run the service.

Usage statistics

What

The pages you visit, your language, theme, device type and browser, the website you came from, campaign tags in the link, and your country. Your IP address is used only to find the country and is then masked, so it is not stored. A random visit id, not a cookie, links the pages of one visit. Errors and response times of the site are recorded too.

Why

To see which pages are read and to find errors.

Legal basis

Legitimate interest in knowing which pages are read and in finding errors (GDPR Art. 6(1)(f)).

Kept for

90 days, in Azure Application Insights (Microsoft, West Europe region), then deleted.

Cookies and storage in your browser

What

The site sets cookies only to work: your theme and your language, kept for a year, and a security cookie that protects the page's forms. Azure App Service, which hosts the lab, adds two cookies that keep your visit on the same server while the page is open. Your progress and your own copy of Harbour Mutual's database are kept in this browser, not on the lab's server. There is no sign-in.

Why

To remember your settings, keep your visit on one server and protect the forms.

Legal basis

Legitimate interest in running a secure, working site (GDPR Art. 6(1)(f)). These cookies are needed for the site to work, so no consent banner is shown.

Kept for

Theme and language: one year. The security cookie and the server cookies: until you close the browser. Progress in your browser: until you clear it.

Who receives the data

These companies process data for the site as processors, under data processing terms:

• Microsoft: hosting (Azure App Service) and usage statistics (Azure Application Insights), in the West Europe region.

No data is sold or used for advertising.

Transfers outside the EEA

Microsoft keeps the site's data in its West Europe region. Where Microsoft transfers data outside the European Economic Area, it relies on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

You can ask for a copy of these safeguards through the contact form.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format (GDPR Arts. 15 to 21).

Where processing is based on your consent, you can withdraw it at any time; this does not affect what was done before.

Most of what this site records cannot be linked to you. To use a right, write through the contact form and say what to look for. Contact form on the blog(opens in a new tab)

You can also complain to a data protection supervisory authority. In Poland, where Musa Consulting is established, this is the President of the Personal Data Protection Office (Prezes UODO, uodo.gov.pl). You can also complain in the EU country where you live or work. uodo.gov.pl(opens in a new tab)

Automated decisions

No decision about you is made by automated means alone, and no profile of you is built (GDPR Art. 22).

Do you have to give data?

No. You can use the whole site without giving any personal data.