Privacy policy

Draft — pending legal review. The effective date will be completed at publication.

This site is the personal portfolio of Grzegorz Senetra. This policy explains what personal data is collected, for what purpose, on what legal basis, and what rights data subjects have — in line with the GDPR (Regulation (EU) 2016/679).

The text below is a solid draft prepared for launch and requires legal review before publication. Passages that still need completing are clearly flagged.

Data controller

[For legal review — complete administrator details]

Processors and third-party services

The site relies on the external processors listed below. Analytics and embeds (Google Analytics, Cal.com) load only after consent is given in the cookie banner.

Resend — Delivery of emails sent from the contact form.
Cal.com — Embedded scheduling calendar for booking calls (loaded only after consent).
Google Analytics (GA4) — Anonymous website-traffic analytics (loaded only after consent).
Upstash — Rate limiting of the contact form to prevent abuse.
Cloudflare Turnstile — Protecting the contact form against spam and bots.
Hosting — The hosting provider serves the site and processes technical server logs (e.g. IP addresses) to deliver it. [For legal review — complete the hosting provider]

What data is collected

Contact form: your name, email address, and message content — provided voluntarily so we can reply.

Technical data: server logs (including IP address, browser type, request time) and — after consent — analytics data about how the site is used.

The site does not collect special categories of data and does not profile users for automated decision-making.

Legal bases for processing

Consent (Art. 6(1)(a) GDPR): analytics (Google Analytics) and the embedded Cal.com calendar — activated only after acceptance in the cookie banner and revocable at any time.

Steps taken at your request and legitimate interest (Art. 6(1)(b) and (f) GDPR): handling contact-form enquiries and protecting the site from abuse (rate limiting, anti-spam).

Retention

Contact-form messages are kept for as long as needed to handle the enquiry and any follow-up, then deleted. [For legal review — specify the exact retention period]

Your analytics/embeds consent is stored locally in the browser (localStorage) and remains valid until you change it or clear your browser data.

Your rights

You have the right to access your data, to rectification, erasure, and restriction of processing, as well as the right to object to processing and the right to data portability.

You can withdraw your analytics/embeds consent at any time via 'Cookie settings' in the site footer — withdrawing consent does not affect the lawfulness of processing carried out beforehand.

You also have the right to lodge a complaint with a supervisory authority — in Poland this is the President of the Personal Data Protection Office (UODO).

For any data-protection matter, contact the data controller. [For legal review — complete the controller's contact details]