Privacy policy

1. Data controller

The controller of personal data is Hubert Salwa, based in Poland. Contact on personal data matters: email [email protected].

2. What data is processed

Data provided in the contact form or in a message: name or company name (optional), e-mail address and the content of the enquiry. Please do not include confidential information or other people’s personal data in the form. The form also sends technical information on which page and language version it was sent from and, if provided, your answer to how you heard about this website. No identifiers or device data are collected for this purpose.

3. Purpose and legal basis

• replying to the enquiry and preparing a quote — steps taken at the request of the data subject before entering into a contract (Art. 6(1)(b) GDPR);
• keeping correspondence and, where necessary, establishing, exercising or defending legal claims — the controller’s legitimate interest (Art. 6(1)(f) GDPR);
• if cooperation begins — performance of the contract and obligations under tax and accounting law (Art. 6(1)(b) and (c) GDPR).

4. Retention period

I keep your enquiry in my mailbox for as long as the correspondence continues and then for no longer than 12 months after the last message. If cooperation begins, data is kept for the duration of the cooperation and for the period required by law (e.g. tax law).

Separately, the content of the submitted form is stored by the form service provider (Web3Forms) under its data processing agreement — for up to 3 years from submission, with backups overwritten in the ordinary cycle. On request, I can delete the submission from the provider's dashboard earlier.

5. Recipients

Data is entrusted to processors that provide technical services needed to run the website and handle correspondence:

• Web3Forms (Web3Creative, India) — contact form handling; it uses sub-processors including Amazon Web Services, Hetzner (EU), Cloudflare and spam-filtering and analytics services operating in the USA;
• Cloudflare, Inc. — website hosting and domain;
• Google (Gmail) — the e-mail service that receives enquiries.

Some of these processors handle data outside the European Economic Area (including India and the USA). Such transfers are based on standard contractual clauses approved by the European Commission and, for US providers participating in the EU-U.S. Data Privacy Framework, on the Commission's adequacy decision. If cooperation begins, the data needed for billing is shared with Useme, the platform through which the invoice is issued.

6. Your rights

You have the right to access your data, to have it rectified, erased or its processing restricted, the right to data portability and the right to object to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland; current details at uodo.gov.pl) or with the supervisory authority in your country.

7. Voluntary provision of data

Providing data is voluntary, but an e-mail address is required to reply to the enquiry.

8. Cookies and analytics

The website does not use cookies or tracking tools. The browser only remembers the selected colour theme (light or dark), locally on your device. The hosting provider may log technical connection data (e.g. IP address) to keep the service secure and running.

9. Data shared for a project

Files and data shared for a project (for example spreadsheets with sales or customer data) are used only to carry out that project, working on copies of the files. On request I sign a non-disclosure agreement (NDA).If the files you share contain personal data of your customers, employees or survey respondents, we sign a data processing agreement (Art. 28 GDPR) before I start. Shared data is deleted after the project ends.

Last updated: 11 October 2026. The Polish version is available at Polityka prywatności.