Privacy policy
This site sets no cookies, runs no analytics and loads no third-party scripts. Below I explain what data technically reaches the infrastructure providers and what happens to the messages you send me.
Data controller
The data controller is Filip Szarek.
Contact for data protection matters: kontakt@filipszarek.com
Contact
You can email me at the address above.
The message reaches my mailbox together with your email address, name and the content. I keep it for as long as the correspondence requires, and after that until any possible claims become time-barred. The recipient of this data is the email service provider I use.
The legal basis is Article 6(1)(b) GDPR when you ask about working together (steps taken before entering into a contract), or Article 6(1)(f) GDPR, my legitimate interest in replying to enquiries.
Hosting and server logs
The site runs on a VPS rented from mikr.us, located in the European Union. mikr.us is the hosting provider and, as a processor, has technical access to the server.
The web server (nginx) records the following in its access and error logs: IP address, date and time of the request, the requested URL, HTTP status code, referring page (referrer) and browser identifier (user-agent). The logs are used for security and troubleshooting.
Logs are kept for 14 days and then deleted automatically. The legal basis is Article 6(1)(f) GDPR, my legitimate interest in keeping the site secure and working.
Cloudflare
Traffic to this site passes through Cloudflare (Cloudflare, Inc.), which acts as a reverse proxy, CDN and DNS provider. Every request reaches Cloudflare first, so it processes your IP address and request metadata to deliver the page and protect it against attacks.
Data may be transferred outside the European Economic Area, in particular to the US. Cloudflare bases such transfers on the EU–US Data Privacy Framework and standard contractual clauses. The legal basis is Article 6(1)(f) GDPR, my legitimate interest in a fast and secure site.
Cookies, analytics and fonts
This site sets no cookies, uses no analytics or tracking tools and embeds no content from other services.
Fonts are served from the same domain as the site, not from Google Fonts or any other external service.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability (where applicable) and to object to processing based on Article 6(1)(f) GDPR.
To exercise these rights, email the address given in the data controller section.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, uodo.gov.pl).