Skip to content
zeprzalka.com

Privacy policy

This page explains what personal data reaches me through zeprzalka.com, why, and what your rights are. No hidden consents and no tracking.

Who controls your data

The data controller is Michał Zeprzałka. For anything related to your data, email m@zeprzalka.com.

What I collect and why

The contact form collects your name, email address, project type and message. I receive the same data when you email me directly.

I use it only to reply to your message and, if you ask for it, to prepare a quote or proposal (Art. 6(1)(b) GDPR). I may also keep the correspondence on the basis of my legitimate interest in being able to show how it went (Art. 6(1)(f) GDPR).

Providing the data is voluntary, but without an email address I cannot reply.

How long I keep it

For as long as we correspond and, if we do not end up working together, no longer than 12 months after the last message. If we do work together, the data needed for invoicing is kept for as long as the law requires, tax law in particular.

Who processes it on my behalf

The site runs on Vercel Inc. infrastructure (hosting), and form messages pass through my email provider's mail server. Both process data only on my instructions.

Vercel is based in the United States; data transfers rely on the EU-US Data Privacy Framework. I do not sell or share your data with anyone else.

Visitor statistics

I use Vercel Web Analytics and Speed Insights. They set no cookies and create no identifiers that could single out a person — I only see aggregate data: which pages are read, from which countries and on which devices, and how fast they load.

Cookies and browser storage

The site sets no cookies. The theme you choose (light or dark) is remembered in your browser's local storage, on your device only — it never reaches me.

Security and third-party content

To protect the form from spam, the sender's IP address is used for a few minutes to count submitted messages. It is never stored permanently. The hosting server keeps short-lived technical logs.

Some blog posts embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com). Once you play a video, Google processes data under its own privacy policy.

Your rights

You have the right to access, rectify, erase and port your data, to restrict its processing, and to object to processing based on legitimate interest. Just email m@zeprzalka.com.

If you believe your data is processed unlawfully, you can lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, or with the authority in your country.

Last updated: