Privacy policy
Last updated:
Below I explain what personal data I collect through this website, for what purpose, and what rights you have.
Data controller
- Company
- epic-it Pawel Wykurz
- Address
- Wladyslawa Krygowskiego 9/13, 30-437 Krakow, Poland
- NIP
- 6782923985
- kontakt@epic-it.pl
What data I process and why
Contact form: your name, email address and the content of your message. I use them to reply to your enquiry and to discuss a possible collaboration.
Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (my legitimate interest in handling enquiries).
Anti-spam protection: when you submit the form, your IP address and technical browser data are processed to tell humans from bots and limit abuse (Art. 6(1)(f) GDPR).
Recipients of data
Data may be passed on to providers whose services I use to run the website and handle messages:
- the website hosting provider (AWS Amplify),
- the email service provider through which the form message reaches me,
- Google (Google Tag Manager and Google Analytics), only if you consent to analytics,
- Cloudflare (Turnstile) – anti-spam verification; processing may involve transferring data outside the European Economic Area on the basis of standard contractual clauses or another GDPR-compliant mechanism.
Retention period
I keep form data for as long as needed to handle the enquiry and, if we start working together, until claims arising from the contract expire. I do not store anti-spam data beyond the time needed for verification.
Your rights
You have the right to:
- access your data and obtain a copy of it,
- rectify your data,
- erase your data or restrict its processing,
- object to processing based on legitimate interest,
- data portability,
- lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) or another supervisory authority.
Providing data is voluntary
Providing data in the form is voluntary, but necessary for me to be able to reply to your message.
Cookies and analytics
With your consent I use Google Analytics (run through Google Tag Manager) to see which pages and tools are viewed. Without your consent I load no analytics scripts. I do not use advertising cookies.
Google Analytics stores cookies in your browser and passes data about your visit to Google, which may be transferred outside the European Economic Area. You can change or withdraw your consent at any time using the "Cookie settings" link in the footer.
If you change the website language manually, I remember your choice in a small cookie so the site opens in the same language next time.
The contact form uses Cloudflare Turnstile to check that the message is sent by a human. It may store some essential technical data in your browser for that purpose.