Privacy policy.

01Data controller

The data controller is Karol Minta, running a sole proprietorship under the business name Minta Karol, tax ID (NIP) 6772481706.

For anything related to personal data, write to kontakt@karlos97.eu.

02What data I collect

Contact form: your name, e-mail address and message, and if you provide them, your company name, approximate budget and phone number.

E-mails sent directly to my address: the sender address, signature and message content.

Server logs: on every visit the server records the IP address, date and time, the page visited, the referring page and browser information. I use them to count aggregate visit statistics with GoAccess running on my own server. The statistics are not used to identify anyone.

Form protection: the form is protected by Cloudflare Turnstile, which checks that a human is sending it. To do this, Cloudflare processes data such as the IP address and browser information.

03Purpose and legal basis

Replying to your enquiry and preparing a quote: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Keeping correspondence and establishing, exercising or defending legal claims: my legitimate interest (Art. 6(1)(f) GDPR).

Website security, protecting the form from spam and aggregate visit statistics: my legitimate interest (Art. 6(1)(f) GDPR).

If we work together: invoicing and tax obligations (Art. 6(1)(c) GDPR).

Providing data is voluntary, but without an e-mail address I cannot reply to your message.

04How long I keep data

I keep correspondence until you object or until it is no longer needed for the purposes for which it was collected.

If we work together, I keep accounting documents for the period required by tax law, i.e. 5 years from the end of the tax year.

I keep server logs for 12 months. Aggregate visit statistics, which contain no personal data, may be kept longer.

05Who receives data

I host the website on my own server. Data may be received by providers that support my business technically: the e-mail provider handling kontakt@karlos97.eu, Google (Gmail), to which I forward e-mail, and Cloudflare (Turnstile).

Google and Cloudflare may process data outside the European Economic Area. This is based on a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

06Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to processing based on legitimate interest (Art. 15–21 GDPR).

To exercise these rights, write to kontakt@karlos97.eu.

If you believe I process your data unlawfully, you can lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

I do not make automated decisions or profile visitors.

07Changes to this policy

I update this policy when the way I process data or the law changes. The date of the last change is shown at the top of this page.