Privacy policy
Welcome to 2670 RPG.ORG
This website is a small, non-profit hobby project dedicated to the 2670 RPG and related content.
Privacy Policy
Last updated: 8 September 2026
1. General Information
This Privacy Policy describes how personal data is processed in connection with the website www.assaultpublishing.com (the “Website”).
The Website is operated in accordance with the applicable provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), the Polish Act of 10 May 2018 on the Protection of Personal Data, the Polish Electronic Communications Law of 12 July 2024, and other applicable provisions of Polish and European Union law.
The Website uses WordPress and may use standard third-party services and plugins necessary for its operation.
2. Personal Data Controller
The Personal Data Controller is:
Marcin Gerkowicz, operating under the brand name Assault Publishing Studio, conducting unregistered business activity in accordance with Article 5 of the Polish Act of 6 March 2018 – Entrepreneurs’ Law.
For all matters concerning personal data, privacy, or the exercise of rights under the GDPR, the Controller can be contacted at:
The email address newsletter@assaultpublishing.com is used solely as the sending address for newsletter messages and is not a contact address for the Controller or for matters concerning personal data.
3. Website and User Accounts
The Website is operated using the WordPress content management system.
External user registration is disabled. The Website does not provide ordinary visitors with the possibility of creating public user accounts.
Technical administrator accounts may exist for the purposes of managing and maintaining the Website. Such accounts are not available to ordinary visitors.
4. What Personal Data May Be Processed?
4.1. Data provided voluntarily
Depending on how a visitor interacts with the Website, the following information may be processed:
- email address;
- contents of messages or correspondence sent to the Controller;
- information voluntarily provided by the visitor in connection with contacting the Website or subscribing to the newsletter;
- other information voluntarily provided by the visitor.
Providing such information is generally voluntary. However, certain information may be necessary to provide a particular service, such as receiving the newsletter.
4.2. Technical data
When the Website is accessed, certain technical information may be processed automatically, including:
- IP address;
- information about the device and operating system;
- browser type and version;
- date and time of connection;
- addresses of pages or resources requested;
- server and security logs;
- information necessary to detect errors, prevent abuse, and maintain the security and proper operation of the Website.
Such information is primarily used for technical, security, administrative, and diagnostic purposes.
5. Newsletter
The Website may offer a voluntary newsletter operated by Assault Publishing Studio.
The newsletter may contain information about:
- new content and materials published on 2670rpg.org;
- new projects, publications, and other activities of Assault Publishing Studio;
- conventions, events, and other activities in which Assault Publishing Studio participates;
- significant changes concerning the Website or the activities of Assault Publishing Studio;
- other important information related to Assault Publishing Studio and its projects.
Subscription to the newsletter is voluntary.
The email address provided for this purpose is processed on the basis of the subscriber’s consent pursuant to Article 6(1)(a) GDPR.
The sending of electronic information that constitutes commercial information or direct marketing is also subject to the requirements of Article 398 of the Polish Electronic Communications Law of 12 July 2024, including the requirement for prior consent where applicable.
The newsletter is sent from:
newsletter@assaultpublishing.com
This address is used solely for sending newsletter messages. It is not the address for contacting the Personal Data Controller.
For questions concerning the newsletter, personal data, privacy, or the exercise of data protection rights, please use:
6. Unsubscribing from the Newsletter
A subscriber may withdraw consent and unsubscribe from the newsletter at any time.
The easiest way to unsubscribe is to use the unsubscribe link included in the newsletter.
A subscriber may also contact:
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
After unsubscribing, the email address will no longer be used for sending the newsletter, except where its temporary retention is necessary to comply with a legal obligation, establish, exercise, or defend legal claims, or maintain a record of the withdrawal of consent.
Withdrawal of newsletter consent is intended to be as easy as giving consent.
7. Hosting
The Website is hosted by Hostido.pl.
The hosting provider may process technical information necessary for providing hosting services, including server logs, IP addresses, and other technical information generated in connection with accessing and operating the Website.
Such processing may be necessary for:
- providing hosting services;
- maintaining the security and stability of the infrastructure;
- detecting and preventing abuse;
- diagnosing technical problems;
- maintaining and protecting the Website.
The hosting provider processes data within the scope necessary for the provision and security of its services and in accordance with applicable data protection law.
8. External Services, Plugins and Embedded Content
The Website may use standard third-party services, WordPress plugins, and external technical components necessary or useful for its operation.
Depending on the configuration of the Website, these may include:
- security and technical services;
- services supporting Website functionality;
- analytics tools, where used;
- newsletter-related services;
- embedded multimedia and other external content, including YouTube;
- other standard online services used in connection with WordPress.
The use of an external service may result in certain technical information being transmitted to or processed by the provider of that service.
Such providers may process data in accordance with their own privacy policies and terms.
The Controller aims to use only services that are reasonably necessary for the operation, security, development, or functionality of the Website. The exact set of plugins and external services may change over time.
9. Who May Receive Personal Data?
The Controller does not sell personal data.
Personal data is not provided to other entities for their own independent marketing purposes or sold as a mailing list or contact database.
Depending on the circumstances, personal data may be processed by entities providing services necessary for the operation of the Website, including:
- hosting providers;
- newsletter and email delivery providers;
- technical and IT service providers;
- providers of WordPress plugins or other technical components;
- providers of embedded multimedia or other external content;
- providers of security, maintenance, or analytics services, where such services are used.
Such entities may process personal data only within the scope necessary for the relevant service and subject to applicable data protection requirements.
10. Transfers Outside the European Economic Area
Some third-party services used by the Website may be provided by entities located outside the European Economic Area (EEA), or may use infrastructure located outside the EEA.
Where personal data is transferred outside the EEA, such transfer will take place only where permitted by applicable data protection law and using an appropriate legal mechanism or safeguard required by the GDPR.
The Website does not intentionally transfer personal data outside the EEA unless this results from the use of a particular external service or is otherwise necessary for the proper operation of the Website.
11. Cookies and Similar Technologies
The Website may use cookies and similar technologies.
Cookies are small text files stored on a user’s device and may be used, among other things, for:
- the proper operation of the Website;
- security and protection against abuse;
- maintaining selected settings;
- WordPress and plugin functionality;
- analytics, where analytics services are used;
- displaying or supporting external content and services.
Technically necessary cookies and similar technologies may be used without separate consent where permitted by applicable law.
Where the Website uses optional cookies or similar technologies for purposes for which consent is legally required, the Website may use an appropriate consent-management mechanism.
Users can also manage or restrict cookies through their browser or device settings. Disabling certain cookies may affect the availability or functionality of some parts of the Website.
12. Purposes and Legal Bases for Processing
Personal data may be processed for the following purposes:
Newsletter
The legal basis is the user’s consent under Article 6(1)(a) GDPR and, where applicable, the requirements concerning electronic communications and direct marketing under Article 398 of the Polish Electronic Communications Law.
Operation and security of the Website
Personal data and technical information may be processed where necessary for the legitimate interests of the Controller under Article 6(1)(f) GDPR, including:
- maintaining the security of the Website;
- preventing abuse and unauthorised access;
- detecting and resolving technical errors;
- maintaining the IT infrastructure;
- protecting the Website and its users.
Contact and correspondence
Where a visitor contacts the Controller, personal data may be processed for the purpose of responding to the enquiry, handling correspondence, or taking steps requested by the visitor.
Depending on the circumstances, the legal basis may include Article 6(1)(a), (b), (c), or (f) GDPR, where applicable.
Cookies and optional external services
Where consent is legally required for the use of particular cookies or similar technologies, the legal basis is the user’s consent.
13. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Newsletter subscription data is normally retained until the subscriber withdraws consent or unsubscribes.
Technical logs may be retained for periods determined by the technical configuration of the hosting and security infrastructure and the requirements of security, maintenance, and incident prevention.
Correspondence may be retained for as long as reasonably necessary to handle the matter, maintain appropriate records, or establish, exercise, or defend legal claims.
Where applicable, certain data may be retained for longer periods because of legal obligations.
14. Rights of Data Subjects
Under the GDPR, individuals whose personal data is processed may have the following rights, subject to the conditions and limitations provided by law:
- the right to obtain confirmation as to whether their personal data is being processed;
- the right of access to their personal data;
- the right to obtain a copy of their personal data;
- the right to rectify inaccurate or incomplete personal data;
- the right to erasure of personal data (“right to be forgotten”), where applicable;
- the right to restrict processing, where applicable;
- the right to data portability, where applicable;
- the right to object to processing based on legitimate interests, where applicable;
- the right to withdraw consent at any time where processing is based on consent;
- the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).
Consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Requests concerning these rights should be sent to:
The Controller will respond to requests in accordance with the applicable provisions of the GDPR.
15. Automated Decision-Making and Profiling
The Website does not use personal data for solely automated decision-making that produces legal effects or similarly significant effects on individuals.
The Website does not carry out marketing profiling unless a particular service or tool requiring such processing is introduced and the relevant information and, where required, consent are provided.
16. Data Security
The Controller takes reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
Access to personal data is limited to persons and service providers for whom access is necessary for the relevant purposes and who are subject to appropriate confidentiality and data protection obligations.
17. Changes to this Privacy Policy
This Privacy Policy may be updated where necessary, in particular due to:
- changes in applicable law;
- changes in the operation or functionality of the Website;
- introduction or removal of WordPress plugins or external services;
- changes in the way personal data is processed;
- changes to the technical infrastructure of the Website.
The current version of this Privacy Policy will be made available on 2670rpg.org.
18. Contact
For all matters concerning this Privacy Policy, personal data, or the exercise of rights under the GDPR, please contact:
Marcin Gerkowicz
Assault Publishing Studio
Unregistered business activity pursuant to Article 5 of the Polish Act of 6 March 2018 – Entrepreneurs’ Law
Email: marcingerkowicz.aps@gmail.com
The address newsletter@assaultpublishing.com is used solely as the sending address for the newsletter and is not the general contact address for the Controller or for privacy and data protection matters.