1. Data controller
The controller of your personal data is Ectosi Technology Piotr Sławek, ul. Jasińskiego 9/58, 05-500 Piaseczno, Poland, VAT ID (NIP): 6642124712 ("we", "us"), owner of booksaill.com.
Privacy contact: office@booksaill.com.
2. What data we process
- Technical data on every visit: IP address, browser and operating system, the page requested, date and time (server logs kept by our hosting provider).
- Usage data, only if you consent: pages visited, clicks (for example on "Buy on Amazon", including which Amazon store you chose), approximate location, device type and cookie identifiers.
- Email address, if you sign up for our newsletter or free resources, or write to us.
We do not run a shop or user accounts. Books are bought on Amazon, so we never receive payment or delivery details.
Amazon store suggestion. To show you the most relevant Amazon store first (for example amazon.co.uk or amazon.de), the page reads your browser's language setting inside your browser. We do not store this setting and it is not sent to us. If you have consented to "Analytics", the click event records which store you chose and whether it was the suggested one.
3. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Displaying the site, keeping it secure, remembering your language and cookie choices | our legitimate interest in providing a working, secure site (Art. 6(1)(f) GDPR) | server logs: in line with the hosting provider's settings, no longer than 30 days; browser storage: until you clear it |
| Visitor statistics with Google Analytics ("Analytics" category) | your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law) | until you withdraw consent; data in Google Analytics: 14 months |
| Measuring our Facebook and Instagram ads and showing you Booksaill ads with Meta Pixel ("Marketing" category) | your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law) | until you withdraw consent; _fbp cookie up to 90 days |
| Playing a YouTube video you choose to play | your request: the player loads only after you click play (Art. 6(1)(f) GDPR, our legitimate interest in showing the video you asked for) | under Google's rules (see section 4.4) |
| Sending the newsletter and free resources | your consent (Art. 6(1)(a) GDPR) | until you unsubscribe; we delete your address within 30 days of unsubscribing |
| Replying to your email | our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR) | until the conversation ends, then for the limitation period of any claims |
Providing data is voluntary. The site works fully without the "Analytics" and "Marketing" categories and without playing any video.
4. Cookies and similar technologies
4.1 How consent works
On your first visit we show a banner with three equally prominent buttons: Accept all, Reject all and Settings. The "Analytics" and "Marketing" categories are off by default. Until you switch them on, we do not load Google Analytics or Meta Pixel and do not set their cookies.
4.2 What we use
| Name | Category | Provider | Purpose | Duration |
|---|---|---|---|---|
cookie_consent (browser storage) | Necessary | Booksaill | remembers your cookie choices | until you clear it |
locale (browser storage) | Necessary | Booksaill | remembers your language | until you clear it |
| game high scores (browser storage) | Necessary | Booksaill | saves your best score in a game | until you clear it |
_ga, _ga_<ID> | Analytics | distinguishes visitors and sessions for statistics | up to 2 years | |
_fbp and Meta cookies on facebook.com | Marketing | Meta | measures ad performance and lets us show Booksaill ads | _fbp up to 90 days |
| YouTube player storage on youtube-nocookie.com | set only after you click play | plays the video and keeps playback settings | under Google's rules |
Google Signals is switched off in our Google Analytics, so Analytics data is not linked to your Google account or used for advertising.
4.3 Changing or withdrawing consent
You can change or withdraw your consent at any time with "Cookie settings" in the footer of every page. Withdrawing is as easy as giving consent. When you switch off "Analytics", we delete the _ga cookies; when you switch off "Marketing", we tell Meta Pixel to stop. Withdrawal does not affect the lawfulness of processing before it. You can also delete or block cookies in your browser settings.
4.4 YouTube videos
Some pages show our videos from YouTube. A short note under each play button says that playing loads the video from YouTube. Until you click play, the page shows only a preview image hosted on our own server, and your browser does not connect to YouTube. When you click play, the video loads from youtube-nocookie.com, YouTube's privacy-enhanced mode, provided by Google Ireland Limited. From that moment Google receives your IP address and technical data, and may store information in your browser to play the video and measure playback. Google's own privacy policy applies: policies.google.com/privacy.
All fonts are served from our own server, so loading a page does not contact Google Fonts.
5. Recipients
- Seohost (seohost.pl, Poland) – hosts the site and keeps server logs on our behalf.
- Google Ireland Limited (Ireland) – Google Analytics as our processor (only with your consent); YouTube (only after you click play).
- Meta Platforms Ireland Limited (Ireland) – Meta Pixel (only with your consent). We are joint controllers with Meta for collecting and transmitting data from our site to Meta; Meta is solely responsible for any further processing.
- MailerLite Limited (Ireland) – sends our newsletter on our behalf.
- Amazon – once you follow a link to Amazon, Amazon processes your data as a separate controller under its own privacy notice.
We do not sell personal data.
6. Transfers outside the EEA
Google and Meta may transfer data to their parent companies in the USA (Google LLC, Meta Platforms, Inc.). Both participate in the EU-U.S. Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023, and also rely on the Commission's standard contractual clauses. MailerLite may use sub-processors outside the EEA; such transfers rely on the safeguards set out in MailerLite's data processing agreement (standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework). You can request a copy of the safeguards using the contact in section 1.
7. Profiling
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. If you consent to "Marketing", Meta may use Pixel data to tailor the Booksaill ads you see on Facebook and Instagram.
8. External links
The site links to Amazon and to our profiles on Facebook, Instagram, TikTok, YouTube and Pinterest. Their own privacy policies apply once you go there. A plain link does not send data to these services until you click it.
9. Your rights
You have the right to:
- access your data and receive a copy,
- have it corrected,
- have it erased,
- restrict its processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw consent at any time (cookies: "Cookie settings" in the footer; newsletter: the unsubscribe link in every email),
- lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), or with the supervisory authority in the EU country where you live.
To exercise your rights, contact us at office@booksaill.com.
10. Children
The site is intended for parents, caregivers and teachers. We do not knowingly collect personal data from children. The newsletter is for adults only.
11. Changes
If we change how we process data, we will update this policy and the date at the top.
