Privacy notice

Who is responsible

Musa Consulting is responsible for the personal data processed on this site: it is the controller under the GDPR.

Musa Consulting is a sole trader (jednoosobowa działalność gospodarcza) established in Poland.

To contact the controller, including about your rights, use the contact form on the blog. Contact form on the blog(opens in a new tab)

Musa Consulting has not appointed a data protection officer.

What is processed, why, and on what legal basis

Hosting

What

Your IP address, the address of the page you ask for, and technical details your browser sends, such as its type and language.

Why

To deliver the pages and keep the site secure.

Legal basis

Legitimate interest in running a secure, working site (GDPR Art. 6(1)(f)).

Kept for

The site keeps no web server logs; Microsoft processes the data only to run the service.

Usage statistics

What

The pages you visit, your language, theme, device type and browser, the website you came from, campaign tags in the link, and your country. Your IP address is used only to find the country and is then masked, so it is not stored. A random visit id, not a cookie, links the pages of one visit. Errors and response times of the site are recorded too. When you download a data file, its name and kind, the page it came from and your device type are recorded; never its contents.

Why

To see which pages are read and to find errors.

Legal basis

Legitimate interest in knowing which pages are read and in finding errors (GDPR Art. 6(1)(f)).

Kept for

90 days, in Azure Application Insights (Microsoft, West Europe region), then deleted.

Cookies and storage in your browser

What

The site sets cookies only to work: your theme and your language, kept for a year, a security cookie that protects the page's forms, and a cookie from Azure, the lab's host, that keeps your visit on the same server. Your progress is saved in this browser only; the lab keeps no copy.

Why

To remember your settings, keep your visit on one server and protect the forms.

Legal basis

Legitimate interest in running a secure, working site (GDPR Art. 6(1)(f)). These cookies are needed for the site to work, so no consent banner is shown.

Kept for

Theme and language: one year. The security cookie and the server cookies: until you close the browser. Progress in your browser: until you clear it.

The AI tutor ("Ask the lab")

What

Your question, the earlier questions and answers of the same conversation, and the lab pages the tutor needs. To count questions per visitor, the server keeps a salted hash of your IP address in memory only; it is never stored.

Why

To write the answer you asked for, and to keep the tutor's use within fair limits.

Legal basis

Legitimate interest in offering the tutor you choose to use (GDPR Art. 6(1)(f)).

Kept for

The lab does not store the conversation; it is gone when you close the page. Anthropic deletes it within 30 days, unless it must keep it longer to enforce its usage policy or by law.

Who receives the data

These companies process data for the site as processors, under data processing terms:

• Microsoft: hosting (Azure App Service) and usage statistics (Azure Application Insights), in the West Europe region.
• Anthropic: the answers of the AI tutor.

No data is sold or used for advertising.

Transfers outside the EEA

Microsoft keeps the site's data in its West Europe region. Where Microsoft transfers data outside the European Economic Area, it relies on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

Anthropic processes the tutor's data in the United States and relies on the standard contractual clauses.

You can ask for a copy of these safeguards through the contact form.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format (GDPR Arts. 15 to 21).

Where processing is based on your consent, you can withdraw it at any time; this does not affect what was done before.

Most of what this site records cannot be linked to you. To use a right, write through the contact form and say what to look for. Contact form on the blog(opens in a new tab)

You can also complain to a data protection supervisory authority. In Poland, where Musa Consulting is established, this is the President of the Personal Data Protection Office (Prezes UODO, uodo.gov.pl). You can also complain in the EU country where you live or work. uodo.gov.pl(opens in a new tab)

Automated decisions

No decision about you is made by automated means alone, and no profile of you is built (GDPR Art. 22).

The tutor's answers are written by AI, but they decide nothing about you.

Do you have to give data?

No. You can use the whole site without giving any personal data.