Privacy Policy

1. Who we are

This website is operated by Kamil Janeczek, sole trader, trading as webforma.

• Business name: [BUSINESS NAME — e.g. Kamil Janeczek webforma]
• Registered address: [FULL ADDRESS]
• NIP (VAT ID): [NIP NUMBER]
• REGON: [REGON NUMBER]
• Contact: janeczekkamil@gmail.com

2. Data controller

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is Kamil Janeczek, contactable at the address and email above.

3. What data we collect

We collect personal data only when you choose to contact us:

• Contact form submissions: your name, email address, and the message you send us.
• Technical metadata: approximate IP address and timestamp, used for spam prevention and abuse protection.
• Turnstile challenge data: Cloudflare Turnstile collects signals to verify you are human. See Cloudflare's privacy policy for details.
• Analytics: we use privacy-friendly Cloudflare Web Analytics. No cookies are set and no personal data is collected for analytics purposes.

4. Why we use your data

• To reply to your inquiry and, where applicable, deliver the services you request.
• To protect the site and our infrastructure from spam and abuse (legitimate interest).
• To comply with our legal and accounting obligations once a contract is formed.

5. Legal basis

We process your data on the basis of: your consent (GDPR art. 6(1)(a)) when you submit the contact form; the performance of a contract (art. 6(1)(b)); our legitimate interests in security and fraud prevention (art. 6(1)(f)); and compliance with legal obligations (art. 6(1)(c)).

6. How long we keep it

Contact form messages are retained for up to 24 months to allow us to respond to follow-ups, unless a client relationship is formed — in which case data is retained for the legal accounting period (typically 5 years in Poland).

7. Who we share data with

We use the following sub-processors. Each is bound by a data processing agreement (DPA):

• Cloudflare, Inc. — hosting, Turnstile anti-bot, and privacy-friendly analytics.
• Google LLC (Gmail) — email correspondence.
• [Add any other tools you use: Resend, Stripe, GitHub, etc.]

Some of these providers may process data outside the EEA. Where this occurs, transfers are safeguarded by Standard Contractual Clauses or equivalent mechanisms.

8. Your rights

Under GDPR you have the right to:

• access your personal data;
• rectify or erase your data;
• restrict or object to processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with the Polish supervisory authority — Prezes Urzędu Ochrony Danych Osobowych (UODO).

To exercise any of these rights, email janeczekkamil@gmail.com.

9. Cookies

This site does not set any cookies of its own. Cloudflare Turnstile may set a short-lived cookie strictly necessary for bot verification when you submit the form.

10. Changes to this policy

If we update this policy, we'll revise the "Last updated" date above. Material changes will be flagged on the homepage.