Privacy
Last updated:
This page covers the contact form and this website. I'm based in Poland, so the EU data protection law (GDPR) applies to everything you send me, wherever you are.
Who is responsible for your data
Stanisław Fekete, {{CONTROLLER_DETAILS}}. I decide what happens to your data. There is no company or team behind me. Questions or requests: {{CONTACT_EMAIL}}.
What I collect
Only what you type into the form:
- your name and email,
- which services you picked,
- what you already have: a website, a Google Business Profile, a booking app profile, Instagram or Facebook (optional),
- a link to your website or profile (optional),
- anything else you write (optional),
- which language version of this site you sent the form from.
The link points to a public page. I look at that page the way any customer would. I don't log in anywhere and don't ask for passwords.
You don't have to fill in the form. Without your name and email I can't reply.
Why, and on what legal basis
- To reply to your inquiry and prepare an offer. You asked first, and this is a step before we might work together. GDPR Art. 6(1)(b).
- To keep a record of our conversation in case of a dispute. My legitimate interest. GDPR Art. 6(1)(f).
I don't add you to a mailing list. I don't sell or share your data for marketing. No automated system decides anything about you, and I don't build profiles.
Who else handles it
Three services process data for me, under data processing agreements. None of them may use it for their own purposes.
- Web3Forms (Web3Creative, India) receives the form and forwards it to my email. It also keeps a copy of each message and technical logs (IP address, time, the page you came from).
- {{HOSTING_PROVIDER}} (USA) hosts this website.
- Cloudflare (USA) forwards email sent to my address. {{MAIL_PROVIDER}}stores my inbox.
Data leaving the EU
Some of these services are outside the European Economic Area. Each transfer has a legal basis:
- Web3Forms (India): the EU Standard Contractual Clauses, part of its data processing agreement. India has no EU adequacy decision, so the clauses are the basis.
- US services: the EU-U.S. Data Privacy Framework. The companies I use are certified under it.
You can ask me for a copy of these safeguards.
How long I keep it
- If we don't start working together: 12 months from our last message. Then I delete it from my inbox and from Web3Forms.
- If we do: for the length of our work, and after that as long as Polish tax law requires me to keep invoices and related correspondence.
- If you ask me to delete it earlier, I will, unless the law requires me to keep it.
Your rights
You can ask me to:
- show you what data I have about you and give you a copy,
- correct it,
- delete it,
- stop using it for a while (restrict processing),
- send it to you or someone else in a common file format (portability),
and you can object to any use based on my legitimate interest. Write to {{CONTACT_EMAIL}}. I'll reply within one month, as the GDPR requires.
If you think I handle your data unlawfully, you can complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland,uodo.gov.pl/en. If you live in the EU, you can also go to the authority in your own country.
Cookies and tracking
This site sets no cookies. It has no analytics script, no ads, no tracking pixels, and loads nothing from other domains when you open it. So there is no cookie banner.
Your browser contacts Web3Forms only when you press the button to send the form.
Server logs
Like any web server, the host of this site records basic request data: IP address, time, the page requested and browser type. This keeps the site running and safe from abuse. My legitimate interest, GDPR Art. 6(1)(f). The host deletes these logs after a short period set by its own rules. I don't use them to identify visitors.
Changes
If anything here changes, I'll update this page and the date at the top.