Privacy policy

1. Who is responsible for your data

The controller of your personal data is the owner of this website, that is the business whose contact details are shown on the site ("we", "us").

For any question about your personal data, contact us using the details shown on this website.

2. What we collect and why

Contacting us. When you email or call us, we process the details you give us in order to reply and handle your request (Art. 6(1)(b) and (f) GDPR).

Server logs. On every visit the server records technical details of the request: IP address, date and time, the page requested, and your browser and operating system. We use them to keep the website secure and to fix errors (Art. 6(1)(f) GDPR).

Visitor statistics. Visits are counted with umami, a tool that uses no cookies and does not store IP addresses. We only see aggregated figures (number of visits, pages viewed, device type and country) that cannot identify you. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in improving the website).

3. Cookies

This website uses no advertising or analytics cookies. It may store one cookie with the language you chose for the site. It is needed only for that feature and is not used for tracking. You can delete or block cookies at any time in your browser settings.

4. Who we share your data with

We never sell your data. We share it only with service providers that help us run this website and process data on our behalf under a data processing agreement (Art. 28 GDPR):

• Jan Czerwiński (Prostrona) (Polish tax ID 5842816986, ul. Rubinowa 2, 09-400 Ludwikowo, Poland), which built and runs this website: hosts it on its servers, compiles visitor statistics.
• Railway Corp.: server infrastructure the website runs on.
• Cloudflare, Inc.: handles traffic to the website (DNS, content delivery network, protection against attacks).

Your data may also be received by our email provider, by our accountants if we enter into a contract, and by public authorities where the law requires it.

5. Transfers outside the European Economic Area

Some of our providers (Railway and Cloudflare) are based in the United States, so your data may be transferred there. Such transfers rely on the European Commission's adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

6. How long we keep your data

• Messages and contact details: until our correspondence ends, then for no longer than 12 months. If we enter into a contract: for its duration, until any claims become time-barred, and for as long as tax law requires.
• Server logs: up to 30 days.
• Visitor statistics: only in aggregated form that cannot identify you.

7. Your rights

You have the right to:

• access your data and receive a copy of it;
• have inaccurate or outdated data corrected;
• have your data erased;
• restrict processing;
• data portability;
• object to processing based on our legitimate interests (Art. 21 GDPR).

To exercise these rights, contact us. We will respond without undue delay and within one month at the latest.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the data protection authority of the EU country where you live or work.

We do not make decisions about you based solely on automated processing, including profiling.

8. Changes to this policy

We may update this policy when the way the website works changes. The current version is always available at this address.