Privacy policy

What data I collect

From the form: your name, a phone number or an email address (whichever you give) and your message.

The form also sends the page’s language (PL or EN), so I can reply in the same language. Two more things are there only to filter out automated spam: how long the form took to fill in, and a hidden field that only bots fill in. I don’t store either of them anywhere.

If you call or email: your phone number or email address and whatever you say or write.

Why, and on what legal basis

To reply to your message and talk about your project before you decide whether to work together. The legal basis is Article 6(1)(b) GDPR, steps taken at your request before entering into a contract, and for the correspondence itself Article 6(1)(f) GDPR, my legitimate interest in replying to your message.

I don’t use this data for newsletters or advertising. I don’t make automated decisions based on it and I don’t profile anyone.

How long

For as long as it takes to reply and talk about the project. If we work together, also for the duration of the work and for the period the law requires.

Who else has access

Only the providers without which the site and email can’t work: Vercel, whose servers run the site and pass on the form message, Resend, which delivers it to my inbox, and the provider of that mailbox. They act on my behalf, as processors.

Vercel and Resend are based in the USA, so form data leaves the European Economic Area. Both companies are certified under the EU-US Data Privacy Framework, so the transfer relies on the European Commission’s adequacy decision.

I don’t sell data or pass it on to anyone for marketing.

Your rights

You have the right to access your data, have it corrected or deleted, restrict its processing and receive it in a portable form, and the right to object to processing based on my legitimate interest. To use them, write to the address above.

You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-⁠193 Warsaw), or with the authority in the EU country where you live.

Do I have to give my data?

It’s voluntary, but without a name, a contact (phone or email) and a message I won’t be able to reply.

Cookies, analytics and technical data

This site uses no cookies and no analytics, doesn’t track visitors and stores nothing in your browser. The opening animation and the demos run only in your browser and send nothing. Fonts are served from this domain, without connecting to outside services.

As with any website, the hosting provider (Vercel) technically processes your IP address and basic request data, such as the page address and browser type, on every visit, to deliver the site and protect it from abuse. Vercel does this on my behalf, as a processor, under a data processing agreement. The legal basis is my legitimate interest in delivering the site and keeping it secure (Article 6(1)(f) GDPR). This technical data is kept for the log retention period of Vercel’s hosting service. Vercel’s firewall also limits how many times the form can be sent from one IP address.

To limit abuse of the form, the site’s code keeps IP addresses only in the server’s working memory and counts send attempts from the last 10 minutes. An entry disappears with the first form submission after those 10 minutes, and the whole memory disappears when the server shuts down. The address never goes into the message or any database. The legal basis is my legitimate interest in running the form safely (Article 6(1)(f) GDPR).

The “Live” button next to projects loads their websites in a window from addresses on the vercel.app domain. They are my own projects, served by the same hosting provider. Links to HelpTravel.pl, GitHub and LinkedIn open in a new tab, and only then do you connect to those services.