Privacy Policy
Updated:
Here I explain what happens to your data when you visit the website or send me an enquiry.
Who is responsible for your data?
I am Ryszard Śpiewak, operating under the brand “Rysiek robi strony”. I run the business Ryszard Śpiewak Rautkod, Polish tax ID (NIP): 7282753724.
I am the data controller, meaning the person who decides why and how your data is used. For privacy matters, you can contact me at [email protected].
What happens to data from the form?
I need it to respond to your enquiry, prepare a website plan and quote, and discuss possible cooperation.
- Required fields: first and last name, email, a description of your business, whether you already have a website, and your expectations for the new website.
- Optional fields: deadline and budget. You can leave them blank.
Your answers reach me by email. I send confirmation that I have received your enquiry to the address you provide. I do not sign you up for a newsletter.
You decide whether to provide your data. You cannot submit the form without completing the required fields. Do not provide sensitive information, such as health information, or unnecessary data about other people.
Legal basis: when you enquire about a service for yourself, I use the data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). When you represent another person or a business, the basis is my legitimate interest in conducting business correspondence (Article 6(1)(f) GDPR).
Form protection: Cloudflare Turnstile
When you attempt to submit the form, I run Cloudflare Turnstile to limit spam and automated submissions. Cloudflare processes signals relating to your browser, device and interactions with the website, as well as your IP address. I do not include the contents of your enquiry in the verification request.
Form protection works independently of consent to statistics and advertising. The basis for processing data to protect against abuse is my legitimate interest (Article 6(1)(f) GDPR). Turnstile verifies submissions automatically and may block form submission. If this happens, you can try again or email [email protected] directly.
The service provider is Cloudflare, Inc. Data may be processed outside the EEA. Details are set out in the Cloudflare Turnstile Privacy Addendum.
How do cookies and statistics work?
Cookies are small files saved by your browser on your device. On this website, optional cookies are used for visitor statistics and checking the effectiveness of advertising.
Matomo and Google Ads are disabled until you give consent. You can enable one category, both, or reject all of them. The offer and form work regardless of your choice. The basis for processing data for these measurements is your consent (Article 6(1)(a) GDPR).
Visitor statistics: Matomo
These help me understand which pages are visited and where visitors come from. Matomo may collect information about pages visited, the source of the visit, the browser, device and connection, as well as cookie identifiers.
The tool runs at stats58.mydevil.net. Its cookie names start with _pk_.
Advertising measurement: Google Ads
This helps check whether a visit from an advertisement led to an enquiry being submitted. It may use ad click identifiers and cookies with names starting with _gcl_.
I do not send Google the contents of the form, your name or your email. I do not enable ad personalisation, meaning tailoring ads to a particular person.
Remembering your choice
Your browser saves the selected consent categories, the settings version and the date of your choice in its storage, called localStorage, under the key website-offer-consent-v1. This record is not used for advertising or statistics.
Your choice is valid for 180 days. After that, the website will ask again. It may also ask sooner if you clear your browser data or use a different browser.
Your browser also stores your selected language in localStorage under the key website-offer-language. This language preference is separate from consent to optional analytics and advertising measurement.
How can you change or withdraw consent?
- Return to the offer page.
- At the bottom of the page, select “Cookie settings”.
- Change the categories and click “Save choice”, or select “Reject optional”.
After you disable measurement that is running, the page will reload to stop it. It will also remove measurement cookies it can access. You can remove cookies from other domains in your browser settings.
Withdrawing consent does not affect the lawfulness of the use of data before consent was withdrawn.
Who else may process your data?
Website and email providers
The website, email and Matomo use MyDevil infrastructure. Hosting providers, which provide server space, and email providers process the data needed to operate these services.
The server may keep a record of events, called a log. This includes, among other things, the IP address, connection time, the address of the page or file opened, and information about the browser. This supports the operation and security of the website, including when you do not consent to optional cookies. The basis is my legitimate interest in maintaining a secure, functioning website (Article 6(1)(f) GDPR).
Google (if you consent to advertising measurement)
Google, including Google Ireland Limited, also receives data related to advertising measurement. Google may process it outside the European Economic Area, meaning outside the EU, Iceland, Liechtenstein and Norway.
Google describes the safeguards it uses for such data transfers, including standard contractual clauses, which are contractual provisions intended to protect data. You can find more information in Google’s privacy policy and Google’s data protection policies for advertising services.
How long do I retain data?
- Enquiries and messages: for the time needed to respond and conclude discussions.
- Documents relating to cooperation: for the duration of the contract, and afterwards for as long as required by law or necessary to establish or defend against claims.
- Server logs and measurement data: according to the settings of the relevant services, no longer than necessary for the purposes described above.
What rights do you have?
Under the conditions set out in the GDPR, you can:
- Access your data and receive a copy.
- Correct your data if it is inaccurate or out of date.
- Request deletion of your data or restriction of its use.
- Receive your data in a format that allows it to be transferred to another controller, when the conditions for this right are met.
- Object when the basis for using your data is legitimate interest.
- Withdraw consent at any time if your data is used on that basis.
To exercise these rights, email [email protected]. Some rights have limitations. For example, a legal obligation may require a document to be retained despite a request to delete it.
If you believe your data is being used unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office in Poland. Information is available on the UODO website.
I do not make decisions that produce legal effects concerning you or similarly significantly affect you solely on the basis of automated data processing.