Tools
Privacy policy
Last updated:
Data controller
The controller of your personal data is Kamil Olczyk. For privacy matters write to hi@kamilolczyk.com.
What data I process
Only what you give me when you send an e-mail, plus the technical data needed to show the site:
- your name and e-mail address,
- your company name, if you share it,
- the content of your message and anything you choose to include,
- technical visit data: IP address, time, the page visited and browser details.
Purposes and legal bases
- Replying to your message and talking about your project: legitimate interest (Art. 6(1)(f) GDPR).
- Performing a contract when you decide to work with me or use a KO service: Art. 6(1)(b) GDPR.
- Legal obligations such as invoices and accounting records: Art. 6(1)(c) GDPR.
- Security and operation of the site (technical logs): legitimate interest (Art. 6(1)(f) GDPR).
Cookies and analytics
The site itself sets no cookies and uses no advertising or tracking scripts. There is no Google Analytics and no social media pixels. Fonts, films and images come from the same server.
The only exception: when Cloudflare checks whether traffic comes from a malicious bot, it may set a technical security cookie. It is necessary to protect the site, is not used for tracking and expires shortly.
Visits are counted with Cloudflare Web Analytics: no cookies, no browser fingerprinting and no identifying of people. I only see aggregate numbers, such as views per page.
Who receives your data
I do not sell your data or share it for marketing. I use providers who process it on my behalf:
- Cloudflare: site hosting, attack protection (including checks that the site’s scripts have not been tampered with) and analytics; a US company that transfers data under the EU-U.S. Data Privacy Framework and standard contractual clauses,
- my e-mail provider, through which messages arrive.
I may disclose data to authorities only where the law requires it.
How long I keep data
- Correspondence without a contract: up to 12 months after the last message.
- Client data: for the duration of our work and 5 years after it ends (limitation of claims).
- Accounting records: 5 years from the end of the tax year.
- Cloudflare technical logs: a few days, only for diagnostics and security.
After that, data is deleted or irreversibly anonymized.
Your rights
You have the right to:
- access your data,
- rectify it,
- erase it,
- restrict processing,
- data portability,
- object to processing based on legitimate interest.
Write to hi@kamilolczyk.com and I will reply within 30 days. You can also lodge a complaint with a supervisory authority; in Poland, the President of the Personal Data Protection Office (UODO), ul. Moniuszki 1A, 00-014 Warsaw.
Security
The site is served only over encrypted HTTPS, with HSTS and a strict Content Security Policy that allows only the site’s own scripts and the Cloudflare visit counter. Only I have access to the data.
Changes to this policy
When I change something, I will update the date at the top of this page.
Contact
Questions about privacy or your data: hi@kamilolczyk.com.