Privacy Policy

1. Data controller

The controller of personal data processed through this website is Jarosław Szopa, Poland. For privacy questions or to exercise your rights, use the protected contact form and begin your message with "Privacy request".

2. Data collected

When you submit the contact form, the website processes your name, email address, message, IP address, and technical anti-spam verification data. Standard server and security logs may also contain your IP address, request time, requested URL, browser information, and response status.

The website does not use analytics or advertising cookies. It does not intentionally request special-category personal data. Please do not include sensitive personal information in your message unless it is necessary.

3. Purposes and legal bases

Contact details and message content are used to answer your inquiry, discuss possible work, and maintain related correspondence. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or the controller's legitimate interest in responding to professional inquiries (Article 6(1)(f) GDPR).

IP addresses, technical logs, rate limiting, and anti-spam checks are used to operate and secure the website, prevent abuse, and diagnose faults. The legal basis is the controller's legitimate interest in maintaining a secure and reliable service (Article 6(1)(f) GDPR).

If records must be retained to comply with law or establish, exercise, or defend legal claims, processing is based on the applicable legal obligation (Article 6(1)(c) GDPR) or legitimate interests (Article 6(1)(f) GDPR).

4. Recipients and international transfers

Data may be processed by service providers supporting website hosting, network security, and email delivery. They receive only the data needed to provide their services and are expected to protect it under applicable data-protection requirements.

This website uses Cloudflare Turnstile to protect the contact form from automated abuse. The Turnstile widget processes browser and device signals and sends a verification token, together with your IP address during server-side validation, to Cloudflare. See Cloudflare's Privacy Policy and Turnstile Privacy Addendum.

Some providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses, or another mechanism permitted by GDPR.

5. Retention

Contact correspondence is kept only as long as reasonably necessary to answer the inquiry, manage any resulting professional relationship, and meet legal or claims-related requirements. Security logs and anti-abuse data are retained only for the period needed for security, troubleshooting, and abuse prevention. Data is then deleted or anonymized when it is no longer required.

6. Your rights

Subject to the conditions in GDPR, you may request access to your personal data, correction, deletion, restriction of processing, or data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier processing.

Send requests through the protected contact form and begin your message with "Privacy request". You also have the right to lodge a complaint with a supervisory authority, in particular the authority for your habitual residence, workplace, or the place of an alleged infringement. In Poland, this is the President of the Personal Data Protection Office (UODO).

7. Required data and automated decisions

Providing contact-form data is voluntary, but the required fields are necessary to send and answer your inquiry. No decisions producing legal or similarly significant effects are made about you solely by automated means.

8. Changes to this notice

This notice may be updated when the website, its service providers, or legal requirements change. The current version and its review date will remain available at this address.