Privacy Policy

This policy explains how Maciej Szymczak handles personal data collected through szymczak.at. The site is operated from Poland and is intended for an international audience.

Controller and contact

The controller of your personal data is Maciej Szymczak. For privacy questions or to exercise your rights, use the contact form.

Data collected through the contact form

When you use the contact form, I process the name, email address, and message you provide. I use this information solely to respond to your enquiry and, where relevant, to take steps at your request before entering into a professional relationship.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a potential agreement, or Article 6(1)(f) GDPR for my legitimate interest in communicating about professional enquiries and protecting the site from misuse.

Technical data and security

The site uses Cloudflare Pages for hosting and Cloudflare Turnstile to protect the contact form from abuse. These services may process technical information such as IP address, browser and device information, and security signals. A theme preference is stored locally in your browser so the site can remember your light or dark mode choice.

Optional analytics

With your permission, the site uses Google Tag Manager to load analytics tags. Those tags may process online identifiers and usage information to help me understand how the site is used. Analytics stay disabled unless you choose to allow them.

Recipients and international transfers

Personal data is shared only with service providers needed to operate the site, deliver the contact form, or protect it against abuse. This includes Cloudflare. Those providers may process data outside the European Economic Area; where applicable, transfers are protected by the safeguards made available by the provider under GDPR.

Retention

I keep contact-form data only for as long as necessary to handle the enquiry and any relevant follow-up. I may retain it longer where necessary to establish, exercise, or defend legal claims, or to meet a legal obligation.

Your rights

Subject to the conditions in GDPR, you may request access to, correction, deletion, or restriction of your data; object to processing based on legitimate interests; and request data portability. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).

Changes to this policy

I may update this policy when the site or its data processing changes. The date at the top of this page shows when it was last revised.