Privacy policy

The controller is Ksawery Kamiński, a private individual. For anything related to your data: kontakt@kamyk.dev.

I have not appointed a data protection officer, because at this scale the law does not require one. You write to me directly.

From the form: your name, email address, optionally a project type and your message. Exactly what you type in.

The hosting server records standard access logs: IP address, timestamp, browser type. Every web server does this and it is needed to keep the site running and to deal with abuse.

If you email me instead of using the form, I handle that data the same way.

To answer your enquiry and work out the terms of possible cooperation. Basis: Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract.

To stay in touch, protect the form from spam and keep the site secure. Basis: Art. 6(1)(f) GDPR, my legitimate interest.

Providing the data is voluntary, but without an email address I have no way to reply.

Resend Inc., based in the USA, delivers the form message to my inbox. Data leaves the European Economic Area under Standard Contractual Clauses approved by the European Commission.

The hosting provider running this site (Cloudflare, Inc.), for access logs and infrastructure maintenance.

The mailbox provider that receives your message.

Nobody else. I do not pass data on for advertising and do not trade it.

Correspondence stays for 12 months after the last message. If we end up working together, for as long as needed to settle the work and defend against claims, normally 6 years.

Server logs are rotated according to the hosting provider's policy.

You can ask me to delete it sooner and I will, unless a legal obligation says otherwise.

You have the right to access your data, correct it, have it erased, restrict processing and port it to another controller. You can also object to processing based on my legitimate interest.

To use any of them, email kontakt@kamyk.dev. I respond within a month at the latest.

If you think I am handling your data unlawfully, you can lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland.

The site stores one cookie, NEXT_LOCALE, which remembers your language choice. It is strictly necessary for the language switcher to work, so no consent prompt and no banner.

No Google Analytics, no advertising pixels, nothing that follows you across sites.

Visit statistics come from Cloudflare Web Analytics. It is a cookieless tool: it counts page views in aggregate, stores nothing in your browser and cannot reconstruct who you are or what you do on other sites.

The form is protected by Cloudflare Turnstile. It checks whether a human is sending the message and processes your IP address and basic browser information to do so.

Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in keeping the inbox free of spam. Unlike common captchas, Turnstile does not profile you for advertising and does not track you across sites.

The service is provided by Cloudflare, Inc., based in the USA. Data leaves the European Economic Area under Standard Contractual Clauses.

Beyond counting page views, I measure what people click on: the order button, the email address, form submissions, and which FAQ questions get opened. Umami handles this.

Umami is cookieless too: it stores nothing in your browser, assigns you no identifier and cannot tie those clicks to a person. I only ever see aggregate numbers.

Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in knowing which parts of the site work and which do not. I do not pass this data on to anyone.

No profiling and no automated decision-making concerning you.

If something changes, for example a new tool on the site, I update this document and the date at the top.