Privacy Policy
This policy explains what personal data is collected when you visit willowrootsec.com and how it is handled. It covers this website only. Data handling within a paid engagement is governed separately by the applicable statement of work and data-processing terms.
Who is responsible
The data controller for this website is Łukasz Wierzbicki, a self-employed sole trader (OSVČ), IČO 11677538, based in Praha, Czechia, operating under the commercial brand Willow Root Security.
Contact: contact@willowrootsec.com
Analytics (Google Analytics 4)
With your consent, this site uses Google Analytics 4 to understand how visitors use the pages (which pages are viewed, approximate region, device and browser type, and on-page interactions). This helps us improve the site.
No analytics cookies are set and no analytics data is collected until you click “Accept” on the consent banner. Until then, Google Consent Mode keeps analytics storage denied. If you decline, or ignore the banner, no analytics cookies are set.
- Legal basis: your consent (Art. 6(1)(a) GDPR; §89 of Czech Act No. 127/2005 on Electronic Communications for cookie storage).
- Processor: Google Ireland Limited / Google LLC, acting on our behalf. Data may be transferred to the United States under the EU–US Data Privacy Framework and standard contractual clauses.
- Retention: user- and event-level analytics data is retained for 2 months (Google Analytics default), then deleted or aggregated by Google. Aggregated reports are not time-limited.
- No advertising use: we do not use Google Ads, advertising cookies, ad personalisation, or cross-site tracking. Those consent signals stay denied.
Cookies set only after consent
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique visitors (Google Analytics) | Up to 2 years |
_ga_G-8JL0SL6M06 | Persists analytics session state (Google Analytics) | Up to 2 years |
wrs-consent | Remembers your consent choice so the banner is not shown again. Stored in your browser (localStorage), not sent to any server. | Until you clear it |
Contacting us by email
If you email us, we process the contact details and content you provide in order to respond and, where relevant, to discuss a possible engagement. The legal basis is our legitimate interest in responding to enquiries and taking steps prior to a contract at your request (Art. 6(1)(b) and (f) GDPR).
Your rights
Under the GDPR you have the right to:
- access, rectify, or erase your personal data;
- restrict or object to processing;
- data portability;
- withdraw consent at any time — clear the
wrs-consentvalue in your browser (or your site cookies) and the banner will reappear so you can choose again; withdrawal does not affect processing already carried out; - lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, uoou.cz).
To exercise any of these rights, contact contact@willowrootsec.com.
Changes
We may update this policy as the site changes. The “last updated” date above reflects the current version.