Privacy policyPrivacy policy

The controller of personal data is Bartosz Stefaniak. For privacy matters, you can contact me at barth.webdesign@gmail.com.

When you use the contact form, I process the name, email address, and message you provide. Your IP address is also read to protect the form from abuse through rate limiting.

I use contact-form data to respond to your enquiry and take steps at your request before entering into a contract, and on the basis of my legitimate interest in conducting business communication.

I use the IP address on the basis of my legitimate interest in protecting the form and website from abuse. If the optional AI SEO tracker is enabled, analytics data is processed only after the prior consent required for those technologies.

Data may be shared with categories of providers that support the website: hosting and infrastructure providers, the configured SMTP and mailbox provider, and, when the AI SEO tracker is enabled, its analytics provider.

If a provider is actually enabled and confirmed, and its service involves a transfer of data outside the European Economic Area, I will state that provider and the applicable safeguards in this policy before that transfer begins.

I keep enquiry data while handling the correspondence and then only as long as necessary to establish, pursue, or defend legal claims. The IP address is kept only in process-local memory for the rate-limit window.

If the AI SEO tracker is enabled, analytics retention follows its provider's documented configuration and is stated before the tracker is introduced.

Providing data in the contact form is voluntary, but without a name, email address, and message I cannot respond to an enquiry sent through it.

You may request access to your data, rectification, erasure, restriction of processing, object to processing based on legitimate interests, and receive your data in a portable format where applicable. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

You may also lodge a complaint with the President of the Polish Personal Data Protection Office.

This website does not assume the operation of analytics or marketing tools. If the optional AI SEO tracker is enabled, it uses the __tr_visitor cookie for one year, the __tr_session cookie for 30 minutes, and sessionStorage for UTM data and retry events.

The tracker may process the URL, referrer, user-agent, UTM parameters, visitor and session identifiers, and conversion events. Those optional technologies should not be enabled before the required consent is obtained.

This website does not carry out automated decision-making or profiling.

Before introducing a new analytics or marketing tool, or another personal-data processing activity, I will update this policy with its purpose, data categories, recipients, retention, and consent arrangements.