Privacy policy (GDPR)

1. Data controller

The controller of your personal data is Tytus Kozak, email: tytuskozak@gmail.com.

2. Purposes and legal bases of processing

• performing the service and contract — Art. 6(1)(b) GDPR,
• contact and preparing a quote — Art. 6(1)(b) and (f) GDPR (legitimate interest),
• legal obligations, including tax and accounting — Art. 6(1)(c) GDPR,
• pursuing or defending claims — Art. 6(1)(f) GDPR.

3. Scope of data

Full name, email address, data necessary to conclude a contract and issue an invoice, and the content of correspondence.

4. Data recipients

Data may be entrusted to: the useme.com platform (contracts), bizky.ai (VAT invoices), FormSubmit (formsubmit.co — contact-form handling; data transferred to the USA based on standard contractual clauses), Google Ireland Limited (the Google Analytics statistics tool — only after cookie consent), the hosting and email provider, an accounting office, and entities authorized under the law.

5. Retention period

We store data for the duration of the service and for periods required by law (e.g. accounting documents — under tax law), and until claims become time-barred.

6. Your rights

You have the right to: access your data, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).

7. Transfers outside the EEA and AI tools

In my work I use tools, including artificial intelligence tools, that may process data outside the European Economic Area. This takes place based on appropriate safeguards (e.g. standard contractual clauses). I pass to AI tools only the data necessary to perform the service.

8. Cookies and Google Analytics

This site uses the analytics tool Google Analytics 4 (provider: Google Ireland Limited), which uses cookies (including _ga, _ga_*) to create anonymous visit statistics and improve the site. Analytics cookies are not essential, so they run only after you give consent in the cookie banner (basis: consent — Art. 6(1)(a) GDPR and the provisions of the Polish Electronic Communications Law Act of 12 July 2024 on access to information on a terminal device). Until consent is given, thanks to Google Consent Mode, the tool does not store cookies. You can withdraw consent at any time — just clear the cookies in your browser; this does not affect the lawfulness of processing carried out before withdrawal. Apart from the above, the site uses only essential (technical) cookies, which do not require consent by law. Statistical data may be transferred to Google outside the European Economic Area based on standard contractual clauses.

9. Automated decisions

I do not make decisions about you based solely on automated processing that would produce legal effects.

10. Voluntary provision of data

Providing data is voluntary but necessary to prepare a quote and perform the service.