GDPR

Privacy Policy

Version: 1.1Date: October 13, 2025

1) Who processes the data

I am the data controller, Maciej Judka. You can contact me at: info@maciejjudka.com.

2) What data I process

Correspondence: email address and message content sent through the contact form.

Technical logs: standard server information (e.g., IP address and timestamp) used exclusively for security and service maintenance.

3) Purpose and legal basis

  • I respond to your message – my legitimate interest (Art. 6(1)(f) GDPR).
  • I act on your request before entering into a contract/offer – if the inquiry concerns this (Art. 6(1)(b)).
  • I ensure service security (logs, abuse prevention) – legitimate interest (Art. 6(1)(f)).

I do not currently run a newsletter or marketing activities.

4) Data retention period

I keep correspondence for the duration of message exchange, and then for a maximum of 12 months for evidential purposes (or longer if required by regulations/claims).

Technical logs typically 30–90 days.

5) Technical service providers

I use essential IT providers (e.g., hosting, email) exclusively for technical purposes and based on data processing agreements. Details available upon request.

6) Transfers outside the EEA

If any provider processes data outside the EEA, the transfer is carried out with appropriate safeguards (e.g., standard contractual clauses – SCC). Detailed information available upon contact: info@maciejjudka.com.

7) Your rights

You have the right to: access, rectification, erasure, restriction of processing, objection (when the basis is Art. 6(1)(f)), data portability (when the basis is Art. 6(1)(b)), and to lodge a complaint with the supervisory authority.

Send your request regarding rights to info@maciejjudka.com.

8) Voluntary provision

Providing data in the form is voluntary, but necessary for me to respond to you.

9) Security

I use HTTPS/TLS, access control, and backups. Only authorized persons have access to the data.

10) Analytics and cookies

Vercel Analytics: I use Vercel Web Analytics to collect anonymous data about website traffic (number of visits, most popular pages, user's country of origin). The tool works without cookies and does not collect personal data – it is based on anonymous identifiers.

Collected data: anonymous visit data (page URL, country, traffic source, browser, device), without storing full IP addresses.

Purpose: improving content quality and user experience (Art. 6(1)(f) GDPR – legitimate interest).

Retention: analytics data is stored by Vercel according to their retention policy (typically up to 12 months).

Provider: Vercel Inc. (USA) – data transfer outside the EEA secured by standard contractual clauses (SCC). More: Vercel Privacy Policy.

11) Policy changes

I may update this document in case of legal or technical changes. The new version will be published with the current date.

Have questions?

If you have questions about the privacy policy or data processing, contact me:

info@maciejjudka.com