How your data is handled

Who the controller is

The controller of your personal data — the party that decides why and how it is processed — is the entity named above.

No data protection officer has been appointed; the scale of processing here does not require one. Every request concerning your data goes to the e-mail address above.

What data is collected

Two things: what you type into the form, and the standard technical data without which the site could not be served.

• Contact form data — your name, company name, e-mail address, optionally a phone number, and the content of your message. If you reach the form from the quote calculator, the summary of the options you picked is attached as well.
• Technical data — IP address, browser and system type, date and time of the request — logged automatically by the hosting provider and used solely to keep the site secure and working.
• Correspondence — the content of the e-mails we exchange once we are in touch.

Purposes and legal bases

Every purpose has its basis in the GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council.

• Answering your enquiry — your consent, given by ticking the box next to the form (Art. 6(1)(a) GDPR) and, when we are discussing a specific project, steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Performing and settling a contract — performance of the contract (Art. 6(1)(b) GDPR) and, for invoices and accounting records, a legal obligation of the controller (Art. 6(1)(c) GDPR).
• Site security and abuse prevention — the controller's legitimate interest (Art. 6(1)(f) GDPR): keeping the service up, blocking spam and keeping access logs.
• Establishing, exercising or defending legal claims — the controller's legitimate interest (Art. 6(1)(f) GDPR).

Is providing data mandatory

No. Providing your data is voluntary, but without a name and an e-mail address there is no way for me to reply. The phone number is optional — leave it only if you prefer a call to an e-mail.

I do not collect special categories of data, such as health, beliefs or memberships — please do not put them into your message.

How long data is kept

Data is kept only as long as the purpose it was collected for requires.

• Enquiries that did not lead to a project — up to 12 months from the last message, after which the correspondence is deleted.
• Contract-related data — for the duration of our cooperation, then until claims become time-barred, and for 5 years from the end of the tax year in which an invoice was issued, as Polish tax law requires.
• Server logs — for as long as diagnostics and security require, in line with the hosting provider's policy — normally no longer than 30 days.

Who the data is shared with

Your data is never sold and never passed on for anyone's marketing. I use providers that process data on my behalf under data processing agreements:

Data may also reach an accounting office once we work together, and public authorities entitled to it under the law.

Some of these providers are established outside the European Economic Area, mainly in the United States. Such transfers rely on the Standard Contractual Clauses approved by the European Commission or on the provider's participation in the Data Privacy Framework.

• Cloudflare, Inc. — site hosting and protection against attacks (Cloudflare Pages).
• Resend, Inc. — technical delivery of contact form messages to my mailbox.
• E-mail provider — running the mailbox that receives the correspondence.

Cookies and browser storage

This site sets no analytics cookies, no marketing cookies and no cookies at all — which is why there is no cookie consent banner here.

It does use your browser's local storage for two things: remembering the theme you picked, light or dark, and the summary from the quote calculator so it can be carried over to the form. That data stays on your device, is never sent to the server, and clearing the site data in your browser removes it.

The site embeds no videos, maps or social widgets, so no third-party scripts are loaded.

Your rights

In relation to the processing of your data you have the right to:

To exercise any of these rights, an e-mail to the address given at the top of this document is enough. I reply within one month at the latest.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl) or with the supervisory authority in your country, if you believe your data is processed unlawfully.

• access your data and receive a copy of it,
• rectify data that is inaccurate or incomplete,
• erase your data, the so-called right to be forgotten,
• restrict processing,
• port your data to another controller,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Automated decisions and profiling

No decisions concerning you are made by automated means and no profiling takes place. The quote calculator runs entirely in your browser and sends nothing anywhere until you submit the form yourself.

Changes to this policy

If the tools or the scope of processing change, this document and the date at the top of the page will be updated. The version published at this address is always the one in force.