Privacy Policy
Last updated: 2026-07-12
This privacy policy describes the principles of personal data processing in connection with use of the qba-soft.pl website.
1. Data controller
Controller / operator of the site:
QbaSoft — Usługi Informatyczne Jakub Płużek
Address: ul. Poziomkowa 19
46-053 Lędziny
Poland
Privacy contact for the website: biuro@qba-soft.pl
2. Scope and nature of the site
The qba-soft.pl website is a multilingual informational site for the QbaSoft brand (Polylang: PL, EN, DE, FR, IT). It presents information about the author and enables email contact.
- No public contact form — contact is only via
mailto:links (e.g. on the Contact page). - No user registration is required to browse public content.
- No embedded third-party media (e.g. YouTube, Google Maps) in the theme — except links that redirect users off-site.
3. What data may be processed
Depending on how you use the site, the following may be processed:
| Category | Examples | Source |
|---|---|---|
| Connection technical data | IP address, date and time of request, requested URL, HTTP status code, browser user agent, referrer | web server / hosting access logs |
| UI preferences | light / dark / system theme choice | browser localStorage (qbasoft-theme-mode) |
| Language preferences | last selected interface language | Polylang cookie (pll_language), if enabled |
| Cookie consent | consent category choices, decision identifier | Real Cookie Banner (consent storage cookie) |
| Security | WAF / bot-protection session identifiers | Wordfence (if active for a given request) |
| Cache | cache variant (e.g. mobile device) | LiteSpeed Cache (if set) |
| Email correspondence | sender address, message content, message metadata | when you send email yourself after clicking mailto: |
The site does not voluntarily collect profile data (name, postal address) beyond what you include in an email.
4. Purposes, legal bases, and retention
| Purpose | Legal basis (GDPR) | Retention (indicative) |
|---|---|---|
| Providing and maintaining the site, error diagnostics | Art. 6(1)(f) — legitimate interest | Server logs: per hosting policy (typically days to several weeks), unless longer required by law |
| Storing UI preferences (theme) | Art. 6(1)(f) — legitimate interest (usability), or — after banner activation — consent for “Preferences” if configured | Until cleared by user (localStorage) or settings change |
| Storing language (Polylang) | Art. 6(1)(f) — legitimate interest | Per Polylang configuration (typically ~1 year for pll_language if set) |
| Cookie consent management | Art. 6(1)(c) — legal obligation (ePrivacy / GDPR) and (f) — documenting consent | Per Real Cookie Banner configuration (typically up to 12 months or until consent is withdrawn) |
| Abuse protection (Wordfence) | Art. 6(1)(f) — site security | Per Wordfence configuration (e.g. session / up to 24 h for some cookies) |
| Cache (LiteSpeed) | Art. 6(1)(f) — site performance | Per plugin / server configuration |
| Handling email correspondence | Art. 6(1)(f) — responding to inquiry; possibly (b) — pre-contract steps | Until the matter is closed, then for limitation / archiving periods required by law |
A detailed list of cookies and similar technologies (names, purposes, TTL) is in the Cookie Policy — a separate page generated and updated dynamically by the Real Cookie Banner plugin. A link to that page is available in the site footer.
5. Cookies, localStorage, and the consent banner
Real Cookie Banner
The site uses the Real Cookie Banner plugin to:
- display information about cookies and optional services,
- collect consent before optional categories run (e.g. statistics — after planned rollout),
- store and document the user’s decision,
- allow later changes (Cookie settings in the footer reopens the consent panel).
Until consent is given, optional services (including planned Google Analytics 4) are not loaded.
localStorage — light / dark theme
The theme stores your choice (system / light / dark) in qbasoft-theme-mode in browser localStorage. It is used only for display preferences and not for marketing profiling.
Polylang — language
The Polylang plugin may set a pll_language cookie with your last selected interface language so you can return in your preferred language without selecting it again.
6. Hosting, server logs, and security
Hosting
The site is hosted with SEOhost (LiteSpeed server). The hosting provider processes technical data necessary to deliver the site (including access logs) as a processor under a data processing agreement or in its own role for infrastructure — per the hosting contract.
Server logs
The web server records standard access logs (including IP address, timestamp, requested resource). Logs support diagnostics, security, and hosting accountability.
Wordfence
The Wordfence plugin helps protect the site (WAF, threat detection). Depending on configuration, it may set cookies or process technical request data to distinguish human from automated traffic. Wordfence is not a marketing tool.
LiteSpeed Cache
The LiteSpeed Cache plugin optimizes performance (HTML cache, static assets). It may set cookies related to cache variants. It is not used for advertising profiling.
7. Contact and email
Contact is via biuro@qba-soft.pl (mailto: links on the Contact page).
If you send email:
- we process data you provide (at least sender address and message content),
- we respond as needed to handle your inquiry,
- we do not require a site account.
8. External links
The site may link to external services. After clicking, the privacy policies and terms of that operator apply. QbaSoft does not control processing after you leave qba-soft.pl.
9. Recipients of data
Data may be disclosed to:
| Recipient | Scope | Role |
|---|---|---|
| SEOhost (hosting) | infrastructure, server logs | hosting / processor |
| Wordfence (Defiant, Inc.) | technical request data, security logs | security plugin provider |
| Google Ireland Ltd. | only after GA4 activation and statistics consent — see section 11 | analytics (planned) |
The controller does not sell personal data to third parties.
10. Transfers outside the EEA
Hosting and core infrastructure are in the European Union (Poland / EEA).
The site currently does not use Google Analytics 4 or other analytics requiring transfer to the USA.
After planned GA4 rollout (section 11), statistical data may be transferred to Google LLC / Google Ireland Ltd. — only after consent in the “Statistics” category in Real Cookie Banner. Google provides safeguards (e.g. Standard Contractual Clauses) — details will be updated when the service is activated.
11. Google Analytics 4 (planned — inactive section)
Status: INACTIVE. The description below applies to planned deployment. The site does not currently use Google Analytics 4. This section will be activated together with GA4 and the “Statistics” category in Real Cookie Banner.
Planned settings (after activation):
- Google Analytics 4 with Basic Consent Mode — full GA4 blocking before statistics consent,
- Google Signals disabled, ad personalization disabled, no remarketing,
- no User-ID, no transmission of personally identifying information (PII),
- no GA4 on staging or for logged-in WordPress administrators.
Legal basis (after activation): user consent (Art. 6(1)(a) GDPR) in the “Statistics” category.
Purpose (after activation): anonymous visit statistics (e.g. page views, traffic sources) to improve the site.
12. Your rights
You have rights under the GDPR, in particular:
- access to your data,
- rectification,
- erasure (“right to be forgotten”),
- restriction of processing,
- objection to processing based on Art. 6(1)(f),
- data portability — where processing is based on consent or contract and automated,
- withdraw consent at any time (without affecting lawfulness before withdrawal) — including via Cookie settings in the footer or the Real Cookie Banner panel.
To exercise your rights, email biuro@qba-soft.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you believe processing violates data protection law.
13. Changes to this policy
This policy may be updated when site functionality changes (e.g. new plugins, GA4 launch, hosting change). The last update date is at the top of the document.
14. Related documents
| Document | Scope |
|---|---|
| Cookie Policy (Real Cookie Banner) | Detailed cookie list for the site — plugin-generated page |
| Contact | Operator contact details |