Privacy Policy
Effective date: 10/03/2026
This Privacy Policy explains how personal data is processed on kacperosinski.com.
1. Data Controller
The controller of your personal data is:
Krótka 14a
87-700 Odolion
Poland
Email: contact@kacperosinski.com
2. Legal basis and applicable law
Personal data is processed in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, "GDPR"; in Poland commonly referred to as "RODO"), and
- the Polish Act of 10 May 2018 on the Protection of Personal Data.
3. What data may be processed
I do not use analytics tools, advertising trackers, profiling tools, or marketing cookies on this website.
If you use the contact form or contact me by email, I may process the personal data you provide, in particular:
- your name
- your email address
- your phone number, if provided
- your company name, if provided
- the content of your message
- any other information you choose to include
In addition, certain technical data may be processed automatically as necessary for the operation and security of the website, such as:
- IP address
- date and time of the request
- browser and device information
- technical and security-related server or infrastructure logs
4. Purposes and legal bases of processing
Your personal data may be processed for the following purposes:
a) Responding to your inquiry and pre-contract communication
If you contact me through the contact form or by email, your data is processed in order to respond to your message and, where applicable, take steps prior to entering into a contract.
Legal basis:
- Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract
- Article 6(1)(f) GDPR – legitimate interest in handling correspondence and responding to inquiries
b) Performance of a contract
If we start working together, your personal data may be processed to perform the contract.
Legal basis:
- Article 6(1)(b) GDPR
c) Compliance with legal obligations
Your personal data may be processed where necessary to comply with legal obligations, in particular accounting and tax obligations under Polish law.
Legal basis:
- Article 6(1)(c) GDPR
d) Establishment, exercise or defence of legal claims
Your personal data may be processed where necessary to protect my rights and defend against claims.
Legal basis:
- Article 6(1)(f) GDPR – legitimate interest in protecting legal rights
e) Ensuring website operation and security
Technical data may be processed to ensure the proper functioning, reliability and security of the website.
Legal basis:
- Article 6(1)(f) GDPR – legitimate interest in operating and securing the website
5. Is providing data mandatory?
Providing personal data is voluntary. However, if you want to receive a reply through the contact form or by email, providing at least the information necessary to contact you and understand your message is required. Without it, I may be unable to respond.
6. Recipients of personal data
Personal data may be disclosed only where necessary to trusted service providers supporting the operation of my business, including in particular:
- Google / Gmail – for email communication
- Cloudflare – for website infrastructure, performance and security
- IT or website maintenance providers, if used
- accounting or legal service providers, where required
- public authorities, where disclosure is required by law
Such entities process data only to the extent necessary and under applicable legal safeguards.
7. Transfers outside the EEA
Some service providers used in connection with the website or email communication may process personal data outside the European Economic Area (EEA).
Where this happens, personal data is transferred only in accordance with applicable law and with appropriate safeguards, for example on the basis of an adequacy decision of the European Commission or standard contractual clauses, where required.
8. Retention period
Personal data is retained only for as long as necessary for the purpose for which it was collected, in particular:
- contact form and email inquiries – for up to 12 months from the end of the correspondence
- contract-related data – for the duration of the contract and thereafter for the period required by applicable law
- accounting and tax records – for the period required by Polish law
- data processed for the purpose of establishing, exercising or defending claims – until the expiry of the applicable limitation period
9. Your rights
Under the GDPR, you have the right to:
- access your personal data
- obtain a copy of your personal data
- rectify your personal data
- request erasure of your personal data
- request restriction of processing
- object to processing based on legitimate interest
- request data portability, where applicable
- lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych)
Where processing is based on consent, you also have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
10. Cookies and similar technologies
This website does not use analytics cookies, advertising cookies, or profiling technologies.
However, strictly necessary technical or security-related cookies may be used by the website infrastructure provider in order to ensure proper website operation, traffic management and protection against abuse.
11. Automated decision-making
Your personal data is not used for automated decision-making, including profiling.
12. Contact regarding personal data
If you have any questions about this Privacy Policy or the processing of your personal data, you can contact:
Krótka 14a
87-700 Odolion
Poland
Email: contact@kacperosinski.com