Privacy policy

1. Data controller

The controller of your personal data is Kamil Kseń, running an unregistered business activity under the name Odklik, correspondence address: Skrzynka pocztowa 175, 41-200 Sosnowiec, Polska. For anything about your data, write to Show email.

2. What data I process

• Contact form data: name, email address, company name (optional), process description and answers to the extra questions (frequency, time, tools, quick-check result).
• Data from the email correspondence and calls that follow your enquiry.
• Data needed to conclude and settle a contract: name or company name, address, tax ID (if applicable).
• Technical data: IP address and browser information, processed by the hosting and anti-spam provider for security.

Please do not send special-category data (e.g. health) or your customers’ personal data through the form. Examples without real data are enough to describe a process.

3. Purposes and legal bases

• Replying to your enquiry and preparing a quote — Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract), or, when you write on behalf of a company, Art. 6(1)(f) GDPR (my legitimate interest in answering the enquiry).
• Performing the contract — Art. 6(1)(b) GDPR.
• Issuing receipts and keeping sales records — Art. 6(1)(c) GDPR (tax obligations).
• Establishing, pursuing or defending claims — Art. 6(1)(f) GDPR.
• Site security and protecting the form against spam — Art. 6(1)(f) GDPR.

The form has no consent checkbox: consent is not needed to answer an enquiry. I do not send newsletters or advertising.

4. Do I have to provide data?

Providing data is voluntary. Without an email address and a process description I cannot reply, and without billing details I cannot conclude and settle a contract.

5. How long I keep data

• Enquiries that did not lead to a contract — up to 12 months after the last contact.
• Contract-related data — for the duration of the contract, then until claims become time-barred.
• Receipts and sales records — 5 years from the end of the year in which the tax obligation arose.
• Technical logs at the hosting provider — for the period set by its policies, usually short.

6. Recipients

I share data only with providers that help me run the site and communication, and only as far as needed:

• Cloudflare, Inc. — site hosting, form handling and spam protection (Turnstile).
• Resend (Plus Five Five, Inc.) — delivering form messages to my inbox.
• [EMAIL PROVIDER, e.g. Google Ireland Ltd.] — my mailbox.
• An accountant or tax adviser — if I use one, for bookkeeping.
• Public authorities — where the law requires it.

7. Transfers outside the European Economic Area

Some providers are based in the USA or use servers outside the EEA. Transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the Commission. Where possible I choose EU-region processing. You can request a copy of the safeguards at Show email.

8. Your rights

• access to your data and a copy of it,
• rectification,
• erasure,
• restriction of processing,
• data portability (for data processed under a contract),
• objection to processing based on legitimate interest,
• a complaint to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or to the authority in your country.

To use your rights, write to Show email. I will reply without undue delay and within one month at the latest. I do not make automated decisions about you or profile you.

9. Cookies and browser storage

The site uses no analytics or advertising cookies, so it shows no consent banner.

Browser storage (localStorage) keeps only the theme you chose (light or dark), and only after you click the switch. Form protection (Cloudflare Turnstile) may use technical data needed to tell people from bots. You can clear browser storage in your browser settings.

10. Your customers’ data in implementations

If an implementation or care gives me access to personal data controlled by your company, I process it only on your instructions, under a separate data processing agreement (Art. 28 GDPR).

11. Changes

When providers or processing change, I will update this page and the date at the top.