Wyceń projekt

// privacy

Privacy Policy

How personal data is processed in connection with this website and the contact form, and your rights under GDPR.

Effective as of: 03.08.2026

§1 Data controller

  1. The controller of personal data processed in connection with the use of tomasziwanowski.com and the services provided is Tomasz Iwanowski, operating a sole proprietorship under the business name The Cloudest Tomasz Iwanowski, Tax ID (NIP): PL1251739186, registered address: Bandurskiego 47B, 05-270 Marki, Poland (“Controller”).
  2. Contact regarding personal data matters: contact@tomasziwanowski.com.

§2 Scope and purpose of processing

  1. Contact form – when using the form at tomasziwanowski.com/en/contact/, the Controller processes voluntarily provided data: full name, email address, phone number (optional), and message content. Data is processed to respond to the inquiry and take steps towards concluding and performing an agreement (Art. 6(1)(b) GDPR), and, for data provided beyond the necessary minimum, on the basis of consent (Art. 6(1)(a) GDPR).
  2. Email correspondence – for contact by email, the Controller processes data contained in the correspondence to respond and continue communication (Art. 6(1)(f) GDPR – legitimate interest).
  3. Agreement performance – upon conclusion of an agreement, the Controller processes data necessary for its performance and settlement (including invoicing data), based on Art. 6(1)(b) and (c) GDPR (contract performance and legal obligations, e.g. tax and accounting).
  4. Technical logs – the hosting provider (GitHub Pages, GitHub Inc.) may automatically record basic technical data in server logs (e.g. IP address, browser type, request timestamp) to ensure security and proper operation of the service (Art. 6(1)(f) GDPR).
  5. The site does not use Google Analytics or any other user-behavior tracking tools.

§3 Data recipients

  1. Data submitted via the contact form is processed using Web3Forms, which acts as a data processor to deliver the message to the Controller’s email address.
  2. The contact form is protected by hCaptcha, which, to verify submissions are not automated, may process technical data about the device and browsing session – see hCaptcha’s own privacy policy for details.
  3. The site uses Google Fonts, loaded from Google’s servers – as a result, your browser may connect to Google’s servers to download font files.
  4. The site is hosted on GitHub Pages infrastructure (GitHub Inc.).
  5. Data may also be shared with providers of accounting, legal, or IT services to the Controller, to the extent necessary for those services.
  6. The Controller does not sell or share personal data with third parties for marketing purposes.

§4 Transfers outside the EEA

Some of the providers listed in §3 (e.g. Web3Forms, hCaptcha, Google Fonts/GitHub) may process data on servers located outside the European Economic Area (including the USA). In such cases, transfers are based on mechanisms ensuring an adequate level of data protection under GDPR (e.g. standard contractual clauses).

§5 Data retention

  1. Data submitted via the contact form is retained for as long as necessary to respond to and handle the inquiry, and, if cooperation begins, for the duration of the agreement plus the statute-of-limitations period for potential claims.
  2. Data on invoices and accounting records is retained for the period required by tax law (generally 5 years from the end of the year in which the tax payment deadline fell).

§6 Your rights

In connection with the processing of your personal data, you have the right to:

  1. access your data and receive a copy of it,
  2. rectify (correct) your data,
  3. erase your data,
  4. restrict processing of your data,
  5. data portability,
  6. object to processing based on the Controller’s legitimate interest,
  7. withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal,
  8. lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland), if you believe processing violates GDPR.

§7 Cookies and similar technologies

  1. The site does not use cookies for marketing or analytics purposes.
  2. The site uses the browser’s localStorage mechanism solely to remember your chosen language version (PL/EN) – this data is stored locally in your browser and is not transmitted to the Controller.
  3. hCaptcha, used to protect the contact form from spam, may use cookies or similar technologies necessary for its operation – see hCaptcha’s own privacy policy for details.

§8 Data security

The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction, including an encrypted HTTPS connection and restricted access limited to authorized persons.

§9 Changes to this Privacy Policy

The Controller reserves the right to amend this Privacy Policy, in particular in connection with changes in law or the scope of services provided. The current version is always available at tomasziwanowski.com/en/privacy/.

This Privacy Policy is effective as of 03.08.2026.