01 Who is responsible for your data
The person responsible for your personal data (the "data controller" under the GDPR / Polish RODO) is the freelance developer operating this site as unregistered self-employment (działalność nierejestrowana) in Poland.
02 What data I collect
This is a static website. It has no contact database, no login, and no server collecting information in the background. Data only reaches me when you actively send it:
- When you use the contact form — the form opens your own email app with the message pre-filled. Nothing is sent until you press send in your email client. I then receive whatever you included: typically your name, email address, and your message.
- When you email me directly — I receive your email address and anything you write or attach.
- During a project — to do the work, I may receive whatever you share with me (files, access details, content, screenshots, repositories, and similar).
03 Why I use it, and the legal basis
I only use your data for the reason you got in touch:
- To answer your message and discuss your project — based on your request and steps taken before entering an agreement (GDPR Art. 6(1)(b)) and my legitimate interest in responding to enquiries (Art. 6(1)(f)).
- To carry out and deliver work you've hired me for — to perform our agreement (Art. 6(1)(b)).
- To keep basic records of who I've worked with, where I'm required to or where it's reasonable for running this activity (Art. 6(1)(c) and (f)).
I do not use your data for advertising, profiling, or automated decision-making, and I never sell it.
04 Cookies and analytics
This site sets no cookies and runs no analytics or tracking scripts. The page loads fonts from Google Fonts, which means your browser contacts Google's servers to fetch them; that request includes your IP address, as any web request does. No other third-party tracking is used.
05 How long I keep it
I keep enquiry messages only as long as needed to deal with your request and for a reasonable period afterward in case you follow up. Project-related data is kept for the length of the project and a sensible period after, then deleted. You can ask me to delete your data sooner at any time.
06 Who else sees it
I don't share your personal data with third parties for their own use. It may pass through services I rely on to do business — for example my email provider (your messages live in my inbox) and, where relevant, a hosting or deployment provider for the site. These providers process data on my behalf and aren't permitted to use it for anything else. If a project specifically requires a third-party service, I'll tell you first.
07 Your rights
Under the GDPR you have the right to:
- Access the personal data I hold about you
- Have inaccurate data corrected
- Have your data deleted ("right to be forgotten")
- Restrict or object to how I use it
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these, just email me at cosmocozy819@gmail.com. I'll respond within one month.
08 Complaints
If you believe I've handled your data improperly, you have the right to lodge a complaint with the Polish supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), at uodo.gov.pl.
09 Changes to this policy
If anything about how I handle data changes — for example if I add analytics or a real contact backend — I'll update this page and change the "last updated" date at the top.
10 Contact
Questions about your privacy or this policy? Email cosmocozy819@gmail.com and I'll help.