Your message.
Handled with care.

Who is responsible?

Karol Stachura is the controller of personal data used to manage enquiries received through this portfolio. For privacy questions or to exercise your rights, email k.p.m.stachura@gmail.com.

What is collected, and why?

The contact form requests your name, email address and message. Providing this information is voluntary, but an email address and enough detail about your enquiry are needed to reply. Please do not send sensitive personal information, passwords or confidential client files through the form.

For enquiries about a potential project, processing is based on taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Other correspondence is handled on the basis of the legitimate interest in answering enquiries and managing professional communication (Article 6(1)(f)). Information needed to establish, exercise or defend legal claims may also be kept on that basis.

Hosting and delivery services may process technical information such as IP addresses, request times and browser information to deliver and protect their services. This portfolio does not use your enquiry for automated decision-making or profiling.

Where does your message go?

When you press Send, the form sends its contents to FormSubmit, which forwards the enquiry to Karol’s Gmail inbox. The form does not contact FormSubmit while you are simply browsing or typing. You may also contact Karol directly by email.

The website is published through Sites hosting infrastructure. Google provides the Gmail service used to receive and answer enquiries. These technical providers handle information required to deliver their respective services. See Google’s privacy information and FormSubmit’s linked notice for their published practices.

External providers can operate internationally, so processing is not necessarily limited to the European Economic Area. Contact Karol for information about the providers and applicable international-transfer arrangements for your enquiry.

How long is it kept?

Correspondence is retained for the time needed to handle the enquiry and any related follow-up. Where it leads to a project, relevant messages become part of the project records. Information may be retained longer when needed to meet applicable legal obligations or establish, exercise or defend claims, taking account of the relevant limitation periods. Provider-side retention is governed by the services used. Google Analytics user and event data retention is set to 2 months, without resetting the user-data period on new activity. These settings do not apply to most standard reports based on aggregated data.

Your choices and rights.

Depending on the circumstances, you can request access to your data, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests. These rights are subject to the conditions set out in the GDPR.

Write to k.p.m.stachura@gmail.com to make a request. You can also complain to the Polish data protection authority, Prezes Urzędu Ochrony Danych Osobowych, or your relevant supervisory authority.

Cookies and external links.

Google Analytics 4 is used only with your consent (Article 6(1)(a) GDPR) to understand visits, page views, email-link clicks and successful contact-form submissions. Analytics can process cookie identifiers, browser and device information, approximate location and usage events. Your name, email address and message are not sent to Analytics by this website. Advertising personalisation and Google signals are disabled.

Before you allow analytics, the Google tag is blocked and no analytics requests are sent. Choose “Reject optional” to browse without analytics. You can withdraw consent at any time using “Cookie settings” in the footer and choosing “Reject optional”; this stops future measurement and removes this site’s accessible Analytics cookies. Withdrawal does not affect the lawfulness of earlier processing.

The essential local-storage entry ks-analytics-consent-v1 remembers your choice for 180 days. If you consent, Google’s _ga and _ga_* cookies distinguish visits and maintain session information, with a maximum lifetime of 180 days configured by this site. Browser restrictions may shorten this period.

Analytics is provided by Google Ireland Limited. Google may process data outside the EEA under its applicable data-processing and international-transfer terms. Read how Google uses data from partner sites and Google’s data-processing terms. External links lead to independent websites with their own privacy practices.