Legal document
Privacy policy
[TO BE PROVIDED: publication date]
This is a draft prepared as a starting point. Before publication the document must be reviewed and approved by a qualified lawyer, in particular for compliance with the GDPR and current Polish law.
1. Data controller
The controller of your personal data is Jakub Zając, operating a sole proprietorship under the name “Usługi informatyczne Jakub Zając”, ks. Jana Konopczyńskiego 1, 85-309 Bydgoszcz, Poland, NIP (tax ID): 9532802271, REGON: 527976138 (the “Controller”).
For any matter concerning personal data, you can contact me at kontakt@jakubzajac.eu.
2. What data I collect and why
The only place on this website where personal data is collected is the contact form. Through it you provide:
- your name,
- your email address,
- your phone number (optional field),
- the content of your message.
I process this data solely to respond to your enquiry and to handle further correspondence about the matter it concerns. Providing the data is voluntary, but without an email address I will not be able to reply.
3. Legal basis for processing
The legal basis for processing contact form data is:
- Article 6(1)(b) GDPR, where your enquiry aims at entering into a contract or concerns an existing one (steps taken at your request prior to entering into a contract),
- Article 6(1)(f) GDPR, the Controller's legitimate interest in handling other correspondence and, where necessary, in establishing or defending legal claims.
(Draft wording — the mapping of legal bases must be confirmed by a lawyer.)
4. How long I keep the data
Contact form correspondence is kept for: [TO BE PROVIDED: retention period, e.g. until the matter is closed and for a defined period afterwards]. After that period the data is deleted.
5. Recipients of the data
I do not sell your data and do not share it with third parties for marketing purposes. The data may be accessed only by entities that process it on my behalf under data processing agreements:
- [TO BE PROVIDED: hosting provider] — the website hosting provider,
- [TO BE PROVIDED: email provider] — the email provider through which correspondence is handled.
Data may be disclosed to public authorities only where the law requires it.
6. Transfers outside the European Economic Area
Contact-form messages are delivered via Resend (Plus Five Five, Inc.) — an email infrastructure provider based in the USA. This means form data (name, email address, optional phone number, message content) may be processed outside the European Economic Area.
Such transfers rely on appropriate safeguards provided for by the GDPR: [TO BE PROVIDED: confirm the mechanism — Standard Contractual Clauses (SCCs) or EU-U.S. Data Privacy Framework certification; alternatively configure the provider's EU region and update this clause].
7. Your rights
In connection with the processing of your personal data, you have the following rights:
- the right of access,
- the right to rectification,
- the right to erasure,
- the right to restriction of processing,
- the right to object to processing,
- the right to data portability.
To exercise these rights, write to kontakt@jakubzajac.eu. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO) if you believe the processing of your data infringes the GDPR.
8. Automated decision-making and profiling
No decisions concerning you are made in an automated way and no profiling takes place. Contact form messages are read and handled by a person: me.
9. Changes to this policy
This policy may be updated, for example when the scope of services or the providers I use change. The current version is always published on this page together with the date of the last change.