Data controller
The data controller is Robert Piotrowski.
For questions about your personal data, email admin@robertpiotrowski.com.
Visiting the website
This site uses no forms, analytics or tracking cookies. When you open the site, the hosting infrastructure processes technical request data, such as your IP address, the requested resource, the time and browser information. This data supports site delivery, diagnostics and abuse prevention. The legal basis is the legitimate interest in keeping the website available and secure (Article 6(1)(f) GDPR).
Contacting me by email
When you email me, I process your email address and any information you provide in the message or attachments. I use it to respond, agree the scope of work or prepare a quote. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) when you act on your own behalf, or my legitimate interest in handling correspondence (Article 6(1)(f) GDPR), for example when you write on behalf of a company.
Providing data is voluntary. I need a return address to respond. A brief description of the task is enough for the first message. Please leave out passwords and information about other people.
Service providers and data transfers
Cloudflare provides the website infrastructure and forwards email to my Proton Mail inbox. Proton Mail is operated by Proton AG, based in Switzerland. Transfers to Switzerland rely on the European Commission’s adequacy decision. For Cloudflare, transfers outside the European Economic Area may rely on an adequacy decision, including the EU–US Data Privacy Framework for transfers covered by certification, or safeguards such as Standard Contractual Clauses.
For details about the safeguards and how to obtain them, consult the providers’ documentation or contact me at the email address above.
How long I keep data
Technical data is retained as needed to operate and secure the website, in line with the hosting settings and policies. I keep correspondence for as long as I need to handle the matter. If messages are needed to perform a contract, meet a legal obligation or establish, exercise or defend a claim, I keep them for the applicable period, taking account of relevant limitation periods.
Your rights
You may request access to, correction or erasure of your data, or restriction of its processing. Where the GDPR provides, you may also request data portability or object to processing based on legitimate interests. You may lodge a complaint with the President of Poland’s Personal Data Protection Office. I do not use solely automated decision-making, including profiling, in connection with visits to this site or when handling enquiries.