Skip to content

Privacy policy

This document describes what personal data we collect in connection with using pewniaki.pl, for what purpose we process it, and what rights are available to data subjects.

1. Data controller

1.1. The controller of personal data is Dariusz Ostrowski, ul. Tadeusza Kościuszki 6A, 05-850 Ożarów Mazowiecki, Tax ID 1181550169. 1.2. Contact for matters relating to personal data: info@pewniaki.pl. 1.3. The controller has not appointed a data protection officer — for all matters relating to the processing of personal data, write to the address given in point 1.2.

2. Scope of data collected

2.1. Using the site does not require registration or providing personal data. 2.2. While browsing the pages, the server automatically records technical data: IP address, date and time of the request, address of the requested page, browser type and version, operating system, and the referring page address. This data is kept in server logs. 2.3. If you use the contact form, we process the data provided in the form: email address and message content, as well as any other data you voluntarily include in it. 2.4. Information stored in cookies and similar technologies is described in a separate Cookie policy. 2.5. Site tools, such as the coupon checker or the number generator, run in the user's browser. Numbers entered into them are not personal data and are not collected by us to identify the user.

3. Purposes and legal bases for processing

3.1. Ensuring the operation of the site, its security, and detecting abuse – the basis is the controller's legitimate interest, Art. 6(1)(f) GDPR. 3.2. Handling correspondence sent via the contact form or email, including processing inquiries and complaints – the basis is the controller's legitimate interest in providing a reply, Art. 6(1)(f) GDPR, and, insofar as obligations arising from legal provisions are concerned – Art. 6(1)(c) GDPR. 3.3. Keeping visit statistics and displaying ads using cookies other than necessary ones – solely on the basis of consent given by the user, Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. 3.4. Establishing, pursuing, or defending claims – Art. 6(1)(f) GDPR.

4. Voluntary provision of data

4.1. Providing data in the contact form is voluntary but necessary in order to receive a reply. 4.2. Recording technical data in server logs is an inherent element of the operation of every website. 4.3. Giving consent to cookies other than necessary ones is voluntary, and refusing it does not limit access to the site's content.

5. Data retention period

5.1. We keep server logs for 3 months from the time they are recorded, after which they are deleted or permanently anonymized. 5.2. We keep correspondence for as long as necessary to handle it, and afterward for the limitation period of any potential claims. 5.3. Data processed on the basis of consent is kept until the consent is withdrawn. 5.4. Retention periods for information stored in cookies are indicated in the Cookie policy.

6. Data recipients

6.1. Data may be shared with entities processing it on behalf of the controller, in particular hosting service providers and the email service provider. These entities process data solely on the basis of a data processing agreement and in accordance with the controller's instructions. 6.2. If third-party analytics or advertising tools operate on the site, their providers may act as separate data controllers. Google Analytics 4 operates on the site, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irlandia. The full list, together with retention periods, is set out in the Cookie policy. 6.3. Data may be disclosed to public authorities if such an obligation results from legal provisions.

7. Transfer of data outside the European Economic Area

7.1. The controller does not transfer data outside the European Economic Area, unless this results from the use of tools provided by suppliers established outside the EEA. 7.2. In such a case, the transfer takes place on the basis of mechanisms provided for in Chapter V of the GDPR, in particular standard contractual clauses approved by the European Commission or an adequacy decision. 7.3. This applies to Google Analytics 4 and the Google AdSense advertising system — the provider of both is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irlandia, and the transfer of data to Google LLC in the United States takes place on the basis of the European Commission's adequacy decision on the EU-US Data Privacy Framework and standard contractual clauses, and the processing rules are described in the provider's privacy policy: https://policies.google.com/privacy.

8. Rights of the data subject

8.1. You have the right to access your data and receive a copy of it. 8.2. You have the right to request the rectification of inaccurate data and the completion of incomplete data. 8.3. You have the right to request the erasure of data and the restriction of its processing in cases provided for under the GDPR. 8.4. You have the right to object to processing based on the controller's legitimate interest, for reasons relating to your particular situation, and, in the case of processing for direct marketing purposes – without needing to justify the objection. 8.5. If processing is based on consent, you have the right to withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. 8.6. In cases provided for by law, you have the right to data portability. 8.7. To exercise the rights above, write to info@pewniaki.pl. 8.8. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

9. Automated decision-making

9.1. Users' personal data is not used for automated decision-making that produces legal effects or similarly significantly affects the user. 9.2. If personalized ads are displayed on the site, this takes place on the basis of consent and under the rules described by the advertising system provider.

10. Security

10.1. The controller applies technical and organizational measures appropriate to the risk, including encrypting the connection with the HTTPS protocol and limiting access to data to authorized persons. 10.2. No method of transmitting data over the internet guarantees complete security, so please do not include sensitive data in correspondence unless necessary.

11. Changes to the privacy policy

11.1. The policy may be updated if regulations, the scope of services, or the tools used change. 11.2. The current version is always available at this address. 11.3. Last updated: 27.09.2026.
Offline app and draw notifications

My saved selections

Selections saved only in this browser. Numbers are shown exactly as saved; this is not a lottery ticket.

Open the My saved selections hub
Restore with preview

Restore in the hub: review the file and confirm first. Both old backups and the complete selections + journal backup are supported. Nothing is uploaded.