Last updated: 6 July 2026
1. General information
This Privacy Policy sets out the rules for the processing of personal data of users visiting the Oldschool Metal Maniac website, available at oldschool-metal-maniac.cfolks.pl.
The website is informational, editorial, music-related and artistic in nature. The website publishes, among other things, news, concert announcements, reports, reviews, interviews, columns, photo galleries, information about Oldschool Metal Maniac, the DISTRO section and materials related to Luciforus Art.
By using the website, the user acknowledges this Privacy Policy.
2. Data Controller
The controller of personal data is:
Leszek Wojnicz-Sianożęcki
acting as the owner / editorial office of Oldschool Metal Maniac.
Contact regarding personal data protection matters:
oldschool_metal_maniac@wp.pl
Correspondence address:
Oldschool Metal Maniac
P.O. BOX 79
31-903 Kraków UP 28
Poland
3. What data may be processed
Depending on how the website is used, the Controller may process the following data:
Technical data related to the use of the website, such as:
IP address,
browser type,
device type,
operating system,
date and time of visit,
visited subpages,
source of entry to the website,
data stored in cookies or similar technologies,
information stored in server logs.
Data provided during e-mail or postal contact, such as:
name and surname or nickname,
e-mail address,
correspondence address,
message content,
data included in submitted materials,
other data voluntarily provided by the person contacting the Controller.
Data related to cooperation, reviews, promotional materials or editorial submissions, such as:
sender’s data,
contact details,
information about a band, label, artist or person submitting materials,
correspondence content,
submitted files, photos, descriptions, recordings or other materials.
Data related to the DISTRO section, if the user contacts the Controller regarding information published in that section:
name and surname or nickname,
e-mail address,
message content,
data related to further individual arrangements,
other data voluntarily provided in correspondence.
The website does not allow users to purchase products directly through the website. The DISTRO section is informational in nature, and any further arrangements are made individually outside the automatic functions of the website.
Data related to comments, if the comment function is active:
signature / username,
e-mail address,
website address, if provided,
comment content,
IP address,
browser technical data.
Data related to published materials, if a person provides the Controller with materials for publication or consents to their publication:
name and surname, nickname or artistic name,
photographs,
image / likeness,
photo captions,
biographical, artistic, music-related or editorial information,
other data included in the submitted material.
4. Purposes and legal bases of data processing
Personal data may be processed for the following purposes:
Operating and maintaining the website
Legal basis: the Controller’s legitimate interest in ensuring the operation, security and proper display of the website.Handling e-mail and postal correspondence
Legal basis: the Controller’s legitimate interest in replying to messages, maintaining contact and archiving correspondence.Conducting editorial, journalistic, review and informational activity
Legal basis: the Controller’s legitimate interest in running the website, publishing content and communicating with persons, bands, labels, artists and readers.Handling submissions, promotional materials, reviews, cooperation and industry contacts
Legal basis: the Controller’s legitimate interest and, in certain cases, taking steps at the request of the data subject before entering into an agreement or performing individual arrangements.Handling contact related to the DISTRO section
Legal basis: the Controller’s legitimate interest in providing information, conducting correspondence and handling individual inquiries.Publishing comments, if the comment function is active
Legal basis: the user’s consent expressed by voluntarily adding a comment and the Controller’s legitimate interest in moderating content, protecting against spam and ensuring website security.Publishing submitted materials, photographs, captions, descriptions or artistic data
Legal basis: the consent of the person submitting the material, the Controller’s legitimate interest related to editorial activity or the performance of arrangements between the parties.Keeping basic website visit statistics using Google Analytics
Legal basis: the user’s consent, if required for storing or accessing analytical cookies, and the Controller’s legitimate interest in analysing how the website is used and improving its operation.Ensuring website security and preventing abuse
Legal basis: the Controller’s legitimate interest in protecting the website, data, IT systems and users.Compliance with legal obligations
Legal basis: a legal obligation imposed on the Controller, if such an obligation results from applicable law.Establishing, pursuing or defending claims
Legal basis: the Controller’s legitimate interest.
5. Voluntary provision of data
Providing personal data is voluntary, but in some cases it may be necessary in order to:
reply to a message,
conduct correspondence,
publish a comment,
handle a submission,
publish submitted material,
provide information related to the DISTRO section.
Failure to provide data may make it impossible to perform a given action, such as replying to a message.
6. Google Analytics
The website uses Google Analytics, a tool that enables the analysis of website visit statistics.
Google Analytics may collect, among other things, information about:
visited subpages,
time spent on the website,
source of entry to the website,
device type,
web browser,
operating system,
approximate location,
the way the website is used.
Google Analytics may use cookies, such as files beginning with _ga or similar analytical identifiers. The exact list of cookies may depend on the current configuration of Google Analytics.
The Controller uses Google Analytics only for statistical and analytical purposes, i.e. to check the popularity of content, number of visits, traffic sources and how the website is used. The Controller does not use Google Analytics for remarketing advertising or for profiling users for marketing purposes.
The user may restrict or block cookies in their browser settings. If a cookie banner is displayed on the website, the user may also manage consent for analytical cookies through that mechanism.
7. Cookies and similar technologies
The website may use cookies and similar technologies.
Cookies are small files stored on the user’s device. They may be used in particular to:
ensure the proper operation of the website,
remember user settings,
support language versions of the website,
ensure security,
protect against spam,
analyse basic statistical information using Google Analytics,
support comments, if active,
ensure the proper operation of WordPress elements and installed plugins.
The following types of cookies may be used on the website:
Necessary / technical cookies
These are required for the operation and security of the website. They may be stored without additional user consent.Functional cookies
These may be used to remember user settings, such as the language version or data entered in the comment form.Analytical cookies
These are used in connection with Google Analytics to analyse visit statistics and how the website is used. These cookies may require the user’s consent.External cookies
These may be used by external services to which the website links or whose elements are embedded on the website, such as social media platforms or external galleries.
The user may independently change cookie settings in their web browser. Restricting or disabling cookies may affect the operation of some website functions.
8. Links to external services
The website may contain links to external websites and profiles, in particular to services such as Facebook, DeviantArt or other galleries and social media platforms.
Clicking an external link redirects the user to a website operated by another entity. From that moment, the user’s data may be processed in accordance with the privacy policy of that external service. The Controller has no influence over the operation of external services, their cookies or the way those entities process data.
The website does not use Meta Pixel, reCAPTCHA or a contact form.
9. Server logs
When using the website, information may be automatically stored in server logs. Logs may include, among other things:
IP address,
date and time of connection,
address of the visited subpage,
browser type,
operating system type,
error information,
technical data related to the request sent to the server.
Server logs are used primarily for website administration, ensuring security, diagnosing technical errors and protecting against abuse.
10. Comments
If the comment function is active on the website, the user adding a comment voluntarily provides the data required by the comment form.
Comments may be moderated. The Controller may remove comments that violate the law, good practices, third-party rights, website rules, contain spam, offensive content or content unrelated to the subject of the website.
Data related to comments may be processed for the purpose of publishing the comment, handling discussion, protecting against spam, ensuring website security and establishing, pursuing or defending claims.
11. Materials submitted for publication
Persons submitting materials, photographs, information, reviews, descriptions, biographies, recordings, graphics or other content to the Controller for publication should only submit materials to which they have appropriate rights or consents.
If the submitted material contains personal data of other persons, including image / likeness, name and surname, nickname, contact details or biographical information, the person submitting the material should ensure that its submission and publication are lawful.
The Controller may remove or anonymise published materials if a justified request is received from the person to whom the data relates, or if further publication would violate the law or third-party rights.
12. Recipients of data
Personal data may be transferred to the following categories of recipients:
entities providing hosting and server maintenance services,
entities providing technical support for the website,
e-mail service providers,
providers of IT tools used to operate the website,
Google group entities in connection with the use of Google Analytics,
postal or courier operators, if necessary for correspondence,
law firms or advisers, if necessary to protect the Controller’s rights,
public authorities, if the obligation to provide data results from legal provisions.
If technical support for the website is provided by an external contractor, that contractor may have access to data only to the extent necessary to provide such services.
13. Transfer of data outside the European Economic Area
In connection with the use of Google Analytics, data may be processed by Google group entities, including outside the European Economic Area.
Data transfers are carried out in accordance with Google’s rules and the appropriate legal mechanisms required by data protection regulations.
Data may also be processed outside the European Economic Area if the user visits an external service, such as a social media platform, external gallery or other website operated by a third party.
14. Data retention period
Personal data will be stored for the period necessary to achieve the purpose for which it was collected.
In particular:
data related to correspondence may be stored for the time necessary to handle the matter and then for the period required to secure possible claims;
data related to contact concerning the DISTRO section may be stored for the duration of correspondence and for the period necessary to secure possible claims;
data included in comments may be stored until the comment is deleted or an effective deletion request is submitted;
technical data and server logs may be stored for the period necessary to ensure the security and proper operation of the website;
analytical data in Google Analytics is stored in accordance with the settings of that tool;
data published in editorial materials, photographs, captions or archive entries may be stored for as long as publication remains justified by the nature of the website, archive, editorial, informational, artistic or documentary activity.
15. Rights of data subjects
The data subject has the following rights:
the right of access to data,
the right to obtain a copy of data,
the right to rectification of data,
the right to erasure of data,
the right to restriction of processing,
the right to data portability, where applicable,
the right to object to data processing,
the right to withdraw consent, if processing is based on consent,
the right to lodge a complaint with the President of the Personal Data Protection Office.
In order to exercise these rights, the user may contact the Controller at:
oldschool_metal_maniac@wp.pl
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
16. Complaint to the supervisory authority
If the user considers that their personal data is processed unlawfully, they have the right to lodge a complaint with the President of the Personal Data Protection Office.
Supervisory authority in Poland:
President of the Personal Data Protection Office
ul. Stawki 2
00-193 Warsaw
Poland
17. Automated decision-making and profiling
Users’ data is not used by the Controller for automated decision-making that produces legal effects concerning the user or similarly significantly affects the user.
The Controller does not profile users for marketing purposes.
18. Data security
The Controller applies technical and organisational measures aimed at protecting personal data against unauthorised access, loss, destruction, alteration or disclosure.
Access to data is limited to persons and entities that need it to perform specific activities, such as technical website support, hosting, contact with users, correspondence handling or editorial matters.
19. Changes to the Privacy Policy
The Controller may amend this Privacy Policy, in particular in the event of:
changes in legal provisions,
changes in website functionality,
implementation of new analytical, marketing or social media tools,
changes in the handling of comments, the DISTRO section or correspondence,
changes in the Controller’s data.
The current version of the Privacy Policy is published on the website.