Privacy policy

1. Controller and contact

The data controller is Paweł Bielecki, based in Sosnowiec, Poland. For privacy questions and requests concerning your data, write to pbielecki1024@gmail.com.

2. Data being processed

The form requires your name, email address, subject and message. It also processes the form language and the time you started filling it in. For direct email contact, sender details, correspondence and any attachments are processed. Providing data is voluntary, but the form cannot send a message without the required fields; you can use direct email instead.

The hosting infrastructure processes connection data, including your IP address, request time and URL, and browser information. Form protection uses a hash of your IP address and submission attempt times. Resend delivers the message to the controller's Gmail inbox; the application does not maintain a submissions database.

3. Purposes and legal bases

Data is processed to answer messages, handle professional correspondence and protect the website against abuse under Article 6(1)(f) GDPR — the controller's legitimate interests in handling enquiries and operating a secure website. If steps are taken at your request before entering into a contract with you, the basis is Article 6(1)(b) GDPR.

Necessary data may be retained to establish, exercise or defend legal claims (Article 6(1)(f)); data rights requests are handled to comply with GDPR obligations (Article 6(1)(c)). The form does not subscribe you to a newsletter. Marketing profiling and automated decisions with legal or similarly significant effects are not used. Anti-spam limits may temporarily block the form; email remains available.

4. Providers and international transfers

The services used are Vercel (hosting and form processing), Resend (email delivery), Google — Gmail (email and correspondence), and Cloudflare (domain DNS). Providers process data needed for their services; form contents are not shared with Cloudflare as the DNS provider.

Data may be processed outside the EEA, particularly in the United States, where Resend stores messages. Safeguards include Standard Contractual Clauses and, where applicable, adequacy decisions, including the EU–US Data Privacy Framework. See the linked provider documents for details; you can also ask the controller for information or a copy of the applicable safeguards.

5. How long data is kept

Correspondence is kept while the enquiry is being handled. Longer retention is limited to data needed to perform a contract, meet a legal obligation or protect legal claims — until the contract ends and the relevant statutory retention or limitation period expires, as applicable. Data concerning an ongoing dispute may be kept until it is resolved. The application does not automatically delete messages from the inbox.

Resend retains messages and logs for 30 days, with a 7-day backup cycle. Vercel runtime logs available to the controller are retained for up to 30 days, depending on the plan. IP hashes and attempt times remain in application memory until the entry is removed or the process ends; they are not stored in a separate database. Providers may retain their own security data and technical copies under the linked policies.

6. Cookies and browser preferences

The portfolio-locale cookie remembers your language for one year after it is set or renewed. The portfolio-theme local storage entry remembers your chosen theme until you change it or clear the website's data. These mechanisms do not store form contents. You can change preferences using the website controls, or clear or block site data in your browser; preferences may then no longer be remembered.

The website does not use Google Analytics, Vercel Web Analytics or advertising trackers. Links to external services take you to websites with their own privacy policies.

7. Your rights

Subject to the GDPR, you can request access to and a copy of your data, rectification, erasure, restriction of processing and data portability where applicable. You can object to processing based on legitimate interests on grounds relating to your particular situation.

Send requests to pbielecki1024@gmail.com. A response will normally be provided within one month. You can also complain to the competent supervisory authority, including the President of the Polish Personal Data Protection Office (UODO). The current version of this policy is available at this address with its update date.