Privacy policy
This page explains what personal data I collect on backendowybigos.pl, why and for how long I keep it, and what rights you have. This information is provided under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). The Polish version of this policy is the binding one.
1. Data controller
The controller of your personal data is Bartek Kolasa, who runs backendowybigos.pl. For anything related to your personal data, write to [email protected].
2. What data I process and where it comes from
- Contact form on the home page — your name or company name, e-mail address and message.
- Project brief — full name, company name, e-mail address, phone number (optional) and the information about your business and planned website that you choose to enter.
- E-mail correspondence — the data you provide when you write to me directly.
- Technical data — IP address, date and time of the visit, the address of the page visited and browser information, recorded automatically in server logs.
When you click “Send”, the form data goes to my server, which immediately forwards it to me by e-mail and sends a short confirmation to the address you provided. The server does not store form contents — there is no database of submissions, and the logs only record whether sending succeeded. If automatic sending fails, the form opens a ready-made message in your e-mail app — in that case the data reaches me only when you send it yourself.
3. Purposes and legal bases
- Replying to your inquiry, preparing a quote, contacting you about the project and confirming receipt of your message — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and, for the brief, also Article 6(1)(a) GDPR (your consent).
- Performing the contract, if we sign one — Article 6(1)(b) GDPR.
- Meeting tax and accounting obligations related to the contract — Article 6(1)(c) GDPR.
- Keeping the website secure and working properly (server logs), and establishing, pursuing or defending legal claims — Article 6(1)(f) GDPR (my legitimate interest).
4. How long I keep the data
- Inquiries and briefs that did not lead to a project — up to 12 months after our last contact.
- Data related to a signed contract — for the duration of the contract and then until the limitation period for claims expires.
- Accounting records — for 5 years from the end of the year in which the tax payment deadline passed.
- Server logs — up to 30 days.
- Data processed on the basis of consent — until you withdraw it, and no longer than the periods above.
5. Who receives the data
I do not sell your data or share it with other companies for marketing. Data may only reach the service providers I use to run the website and handle e-mail:
- OVH SAS (France) — the e-mail provider for the backendowybigos.pl domain: the mailbox where messages arrive, and the sending of form messages and confirmations.
- Google Ireland Ltd. — the Google Fonts typefaces your browser downloads from Google’s servers (Google receives your IP address in the process).
- Cloudflare, Inc. — a service that speeds up and protects the website; traffic to the site passes through it.
- If we sign a contract — an accounting office or other parties where the law requires it.
The website runs on a server that I administer myself.
6. Transfers outside the European Economic Area
Google and Cloudflare may also process data in the United States. Both companies take part in the EU-U.S. Data Privacy Framework, under which the European Commission has recognised an adequate level of data protection, and they additionally use standard contractual clauses approved by the European Commission.
7. Your rights
You have the right to:
- access your data and receive a copy of it (Article 15 GDPR),
- have your data corrected (Article 16 GDPR),
- have your data erased (Article 17 GDPR),
- restrict processing (Article 18 GDPR),
- data portability (Article 20 GDPR),
- object to processing based on legitimate interest (Article 21 GDPR),
- withdraw your consent at any time — without affecting the lawfulness of processing carried out before the withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe I process your data unlawfully.
To exercise these rights, write to [email protected]. I will reply without undue delay and within one month at the latest.
8. Do you have to provide data?
Providing data is voluntary, but without an e-mail address and basic information about the project I will not be able to reply to your inquiry or prepare a quote.
9. Automated decisions and profiling
I do not make automated decisions about you and I do not profile your data.
10. Cookies and browser storage
The website does not use analytics or marketing cookies and does not use tracking tools such as Google Analytics. In your browser’s storage (localStorage) I only save:
bb-theme— the colour theme you chose (light or dark),bb-brief— a draft of the brief, so your answers are not lost if you refresh the page. The draft is deleted once you send the brief or click “Start over”.
This data stays on your device only and is never sent to me. You can delete it at any time by clearing this site’s data in your browser settings. Cloudflare may set technical cookies needed to protect the website against attacks.
11. Changes to this policy
If the way I process data changes, I will update this page and the date at the top.