1. Who we are

The website phpnotes.eu (“Website”) is a personal, hobbyist programming blog focused primarily on PHP, Symfony and related web development topics.

The data controller responsible for processing personal data through the Website is:

Dominik Grabowski
Website: https://phpnotes.eu
Email: moc.liamg@rardog

If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us at the email address above.

2. What personal data we collect

Depending on how you use the Website, we may process the following information:

  • your name or username,
  • email address,
  • the content of comments or messages submitted through the contact form,
  • IP address,
  • browser and device information,
  • information contained in server logs,
  • information about your use of the Website collected through analytics and advertising technologies,
  • cookie and consent preference information.

We only collect and process data that is reasonably necessary for the purposes described in this Privacy Policy.

3. Comments

When you leave a comment on an article, we collect the information entered in the comment form, including your name, email address and comment content.

We also process your IP address and browser user-agent information. This information may be used for security purposes and to help detect and prevent spam, abuse and malicious activity.

Your comment and associated metadata may be retained for as long as the comment remains published on the Website or for as long as reasonably necessary for the purposes described in this Privacy Policy.

Approved comments may be publicly visible on the Website. Please do not include personal or confidential information in a public comment.

Gravatar

WordPress may use the Gravatar service provided by Automattic to display a profile image associated with a commenter’s email address. If Gravatar is enabled, an anonymized string (hash) created from your email address may be provided to the Gravatar service to determine whether an associated profile image exists.

4. Contact form

When you contact us through the form, we may collect:

  • your name,
  • your email address,
  • the subject of your message,
  • the content of your message.

This information is used solely to respond to your inquiry and communicate with you regarding the matter described in your message.

Messages submitted through the form are transmitted as email messages to the Website administrator. They may therefore also be stored in the email system used to receive and manage the messages.

We retain correspondence for as long as reasonably necessary to handle the inquiry and maintain appropriate records.

5. Server logs

When you visit the Website, the hosting server may automatically record technical information in server logs.

This may include:

  • IP address,
  • date and time of the request,
  • requested URL,
  • HTTP response information,
  • browser type and version,
  • operating system,
  • referring URL,
  • other technical information necessary to operate and secure the server.

Server logs are used primarily to:

  • operate and maintain the Website,
  • diagnose technical problems,
  • maintain server security,
  • detect and investigate malicious activity,
  • prevent abuse and attacks.

Server logs are retained in accordance with the hosting provider’s technical and security requirements and for no longer than reasonably necessary for the purposes for which they are processed.

6. Website security

The Website uses Wordfence Security to protect the Website against malicious activity, attacks, spam, unauthorized access and other security threats.

Wordfence may process technical information such as:

  • IP addresses,
  • browser and user-agent information,
  • requested URLs,
  • timestamps,
  • information about login attempts,
  • information concerning blocked or potentially malicious requests.

Wordfence uses this information to detect and prevent attacks and other security incidents.

Wordfence’s Live Traffic functionality may store traffic and security-related information on the Website’s server. The default maximum retention period for Live Traffic data is 30 days.

Wordfence may also process certain information through its own infrastructure when necessary for its security services. Information about Wordfence’s data processing and GDPR practices is available in Wordfence’s documentation.

The legal basis for this processing is our legitimate interest in maintaining the security and integrity of the Website.

7. Analytics

The Website uses Google Analytics to understand how visitors use the Website and to improve its content and functionality.

Google Analytics may collect information such as:

  • information about pages visited,
  • interactions with the Website,
  • approximate geographic information,
  • device and browser information,
  • technical information,
  • information about the source from which you reached the Website.

Analytics cookies and similar technologies are used only in accordance with your consent choices where consent is required.

The Website uses Google’s consent mechanisms to respect users’ choices regarding analytics and advertising technologies. Google states that its European regulations message can transmit consent choices to Google Analytics and other Google services through Consent Mode.

For more information about how Google processes data, please refer to Google’s privacy documentation.

8. Advertising

The Website uses Google AdSense to display advertisements.

Advertisements may use cookies, local storage, device information and other technologies to:

  • display advertisements,
  • measure advertising performance,
  • prevent fraud and abuse,
  • provide personalized advertising where you have given the required consent.

Depending on your consent choices and applicable law, advertisements may be personalized or non-personalized.

Google’s advertising systems may process information such as:

  • IP address,
  • device and browser information,
  • approximate location,
  • interactions with advertisements,
  • advertising identifiers,
  • information about browsing activity relevant to advertising.

You can change or withdraw your advertising and cookie preferences using the consent preferences mechanism available on the Website.

9. Cookies

The Website uses cookies and similar technologies.

Cookies may be used for several purposes, including:

Necessary cookies

These cookies are necessary for the proper functioning, security and basic operation of the Website.

Preference and consent cookies

The website enables the management of and provision of information regarding cookie and privacy preferences.

These mechanisms may store information necessary to remember whether you have accepted, rejected or customized your cookie preferences.

Analytics cookies

Google Analytics may use cookies or similar technologies to collect information about Website traffic and usage, subject to your consent where required.

Advertising cookies

Google AdSense may use cookies and similar technologies for advertising, measurement and personalization, subject to your consent and applicable law.

You can manage your preferences using the cookie consent interface displayed on the Website. You may choose Customize, Reject All, or Accept All, depending on the options presented.

You can also change or withdraw your consent later using the consent preferences mechanism available on the Website.

10. Legal basis for processing

Depending on the purpose, we process personal data on the following legal bases under Article 6 of the General Data Protection Regulation (GDPR):

Consent – Article 6(1)(a) GDPR

We rely on your consent where required for:

  • non-essential cookies,
  • analytics,
  • personalized advertising,
  • other optional tracking or advertising technologies.

You may withdraw your consent at any time.

Legitimate interests – Article 6(1)(f) GDPR

We may process data where this is necessary for our legitimate interests, including:

  • operating and maintaining the Website,
  • responding to inquiries,
  • maintaining Website security,
  • preventing spam, fraud and abuse,
  • detecting malicious traffic,
  • protecting the Website and its users,
  • maintaining and improving the Website.

Where we rely on legitimate interests, we consider and balance those interests against your rights and freedoms.

Legal obligations – Article 6(1)(c) GDPR

Where necessary, we may process and retain information to comply with applicable legal obligations.

11. Who we share your data with

Depending on how you interact with the Website, personal data may be processed by the following service providers:

  • Google – Google Analytics, Google AdSense, Site Kit and related Google services;
  • Wordfence / Defiant – Website security and threat detection;
  • hosting provider – Website hosting and server infrastructure;
  • email service provider used for the Website’s contact email – for receiving and storing messages sent through the contact form.

We do not sell your personal information.

We may disclose information where necessary to comply with legal obligations, respond to lawful requests, protect the Website, or investigate security incidents.

12. International data transfers

Some service providers used by the Website may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we rely on an applicable legal mechanism for the transfer, such as:

  • an adequacy decision of the European Commission, where applicable;
  • Standard Contractual Clauses;
  • other legally recognized safeguards.

Google and Wordfence may process information through infrastructure located in countries outside the EEA as part of their respective services.

13. How long we retain your data

We do not retain personal data for longer than reasonably necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Different types of information may therefore have different retention periods.

For example:

  • comments may remain stored as long as the corresponding article and comment remain on the Website;
  • contact correspondence may be retained for as long as reasonably necessary to handle the inquiry and maintain appropriate records;
  • server logs are retained according to the hosting provider’s operational and security requirements;
  • Wordfence Live Traffic data is retained according to the configured Wordfence settings, with a maximum period of 30 days under the standard setting;
  • consent records may be retained as necessary to demonstrate and manage your consent choices;
  • analytics and advertising information is retained according to the applicable Google service settings and policies.

14. Your rights

Under applicable data protection laws, including the GDPR, you may have the following rights:

  • the right to obtain confirmation as to whether we process your personal data;
  • the right to access your personal data;
  • the right to correct inaccurate or incomplete data;
  • the right to request deletion of your personal data;
  • the right to request restriction of processing;
  • the right to object to processing based on legitimate interests;
  • the right to data portability where applicable;
  • the right to withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We may need to verify your identity before fulfilling a request where this is reasonably necessary to protect personal data.

Some requests may be subject to legal limitations or exceptions. For example, we may need to retain certain information where we are legally required to do so or where it is necessary to establish, exercise or defend legal claims.

15. Right to lodge a complaint

If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the relevant data protection supervisory authority.

If you are located in Poland, the competent authority is:

Prezes Urzędu Ochrony Danych Osobowych (UODO)

You may contact the supervisory authority directly regarding concerns about the processing of your personal data.

16. Children’s privacy

The Website is a general-audience blog and is not specifically directed at children.

We do not knowingly collect personal information from children for purposes unrelated to the operation of the Website.

17. Third-party services

The Website uses certain third-party services described in this Privacy Policy.

These providers may process information in accordance with their own privacy policies and terms.

The Website does not intentionally embed third-party videos, maps or other external content that automatically loads such services when an article is viewed.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when we introduce new functionality, plugins, analytics services, advertising services or other technologies.

The latest version will always be published on this page.

19. Contact

If you have any questions about this Privacy Policy, your personal data, or the processing of your information on phpnotes.eu, please contact:

Dominik Grabowski
Email: moc.liamg@rardog