Privacy Policy

1. Data Controller

The data controller for your personal data is:

2. Personal Data We Collect

2.1 Contact Form Data

When you contact us through our website form, we collect:

• Name
• Email address
• Message content
• IP address (for security purposes)
• Timestamp of submission

2.2 Website Analytics

We use PostHog analytics to understand how visitors use our website. This may include:

• IP address (anonymized)
• Browser type and version
• Device information
• Pages visited and time spent
• Referral sources
• User interactions (clicks, scrolls)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent (Article 6(1)(a)): For analytics cookies and non-essential data processing
• Legitimate Interest (Article 6(1)(f)): For responding to contact form inquiries and website security
• Contract Performance (Article 6(1)(b)): For providing requested services

4. How We Use Your Data

We use your personal data to:

• Respond to your inquiries and provide customer support
• Improve our website and services based on usage analytics
• Ensure website security and prevent abuse
• Comply with legal obligations
• Send you information about our services (only with your consent)

5. Data Retention

We retain your personal data for the following periods:

• Contact form data: 3 years from last contact
• Analytics data: 26 months (PostHog default)
• Security logs: 12 months

After these periods, your data will be securely deleted or anonymized.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for analytics at any time

To exercise these rights, contact us at kamil@kamnog.dev.

7. Data Sharing and Transfers

We do not sell, trade, or rent your personal data to third parties. We may share data with:

• PostHog: For website analytics (data processed in EU/US with adequate protection)
• Service providers: Hosting, email, and technical support (under strict data processing agreements)
• Legal authorities: When required by law or to protect our rights

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL encryption for data transmission
• Secure hosting with regular security updates
• Limited access to personal data on a need-to-know basis
• Regular security assessments and monitoring

9. Cookies

Our website uses cookies for analytics and functionality. For detailed information about our cookie usage, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish Data Protection Authority (UODO):