Skip to content

Document

Privacy policy

Who processes your data, for what purpose and on what legal basis, how long it is kept and what your rights are. This is an informational translation; the Polish version is binding.

Last updated:

1. Data controller

The controller of your personal data is Jakub Dzikowski, a sole trader operating as KD SEO Jakub Dzikowski, ul. Twarda 18, 00-105 Warsaw, Poland, NIP (tax ID): 5581881417, REGON: 525670843 (the “Controller”, “I”).

For any matter concerning personal data, you can write to hello@kubadzikowski.com.

This policy covers the kubadzikowski.com website in both its Polish and English versions. Information on cookies and similar technologies is also available in the cookie policy.

2. What data I process and why

Contact form and project brief

On the Contact and Project brief pages (and their Polish equivalents) you can send me a message or a project brief. I then collect:

  • your name and e-mail address,
  • the subject and content of your message (contact form),
  • your company name or website address, your role and your answers to the brief questions (project brief),
  • the date of submission, the address of the page the form was sent from, and which consents you ticked.

Your submission is sent to me by e-mail and saved in a file on the hosting server, outside the public website directory. I use the data to reply to your message and to prepare a quote.

Legal bases:

  • Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract (e.g. preparing a quote),
  • Article 6(1)(f) GDPR — my legitimate interest in handling correspondence and answering questions.

Consent to commercial information

The forms include a separate, optional consent to the processing of your data for marketing purposes and to receiving commercial information by e-mail. If you tick it, I may send such information to the address you provided. The legal basis is your consent (Article 6(1)(a) GDPR and the rules on sending commercial information by electronic means). Not giving this consent does not affect my reply to your enquiry. You can withdraw it at any time by writing to hello@kubadzikowski.com.

Spam protection and security

The forms are protected by a hidden honeypot field, a check of how long the form took to complete and a limit on the number of messages from a single IP address. For the purpose of that limit, the IP address is stored only as a hash (with a random key), which is deleted after about 24 hours. The legal basis is my legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

Server logs and the Cloudflare network

Each time you visit the website, the hosting server and the Cloudflare network automatically record technical data: IP address, date and time, the page requested, browser and operating system type, and the referring page. This data is used to run, secure and troubleshoot the website (Article 6(1)(f) GDPR). I do not combine it with form data.

Visitor statistics (Google Analytics 4)

I use Google Analytics 4 to understand which content is read and where visitors come from. Google Analytics cookies are set only with your consent to analytics cookies (Article 6(1)(a) GDPR). You can withdraw your consent at any time via the “Cookie settings” link in the footer.

I use Google Consent Mode v2 in advanced mode. This means that without your consent the Google script still loads, but it does not set any cookies and only sends Google simplified signals without identifiers (e.g. that a page was viewed), from which Google estimates aggregate statistics. The legal basis for processing these signals is my legitimate interest in keeping basic statistics (Article 6(1)(f) GDPR). Advertising data is redacted, and Google Analytics 4 does not store IP addresses.

Embedded videos and maps

Some pages contain YouTube videos and maps. When they load, your browser connects to their providers’ servers, which receive, among other things, your IP address. Details of what loads, when and from whom are set out in the cookie policy.

What I do not do

I do not use remarketing or advertising tags, heatmaps or session recording, and I do not run a shop, a newsletter or comments. I do not sell data.

3. How long I keep data

  • Form submissions — until the matter is concluded, and no longer than 24 months from our last contact. If we start working together, the data needed for the contract and invoicing is kept for the period required by law, e.g. tax law.
  • Data for commercial information — until you withdraw your consent.
  • Hashed IP address for the message limit — about 24 hours.
  • Server logs — for the period set by the hosting provider and Cloudflare for security and troubleshooting purposes.
  • Google Analytics 4 data — in line with the data retention setting in the service, no longer than 14 months.

4. Who receives the data

Data may only be received by parties that help me run the website:

  • LH.pl sp. z o.o. — website hosting, form handling and server logs (a processor acting on my behalf),
  • Cloudflare, Inc. — content delivery network (CDN), protection against attacks and connection encryption (TLS),
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — Google Analytics 4 and the YouTube player,
  • OpenFreeMap (openfreemap.org) — base maps on city pages.

I may also disclose data to public authorities where required by law.

5. Transfers outside the European Economic Area

Google and Cloudflare may also process data in the United States (in Google’s case, by Google LLC). Both companies participate in the EU‑U.S. Data Privacy Framework, under which the European Commission has recognised an adequate level of data protection. They also use standard contractual clauses approved by the European Commission.

6. Your rights

You have the right to:

  • access your data and receive a copy of it,
  • rectify your data,
  • have your data erased,
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest,
  • withdraw your consent at any time — without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, write to hello@kubadzikowski.com. You can change your cookie consents yourself via the “Cookie settings” link in the footer.

If you believe that I process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Do you have to provide data

Providing data in the forms is voluntary, but without your name and e-mail address I will not be able to reply. The brief questions are optional.

8. Automated decisions and profiling

I do not make automated decisions about you and do not profile you within the meaning of Article 22 GDPR.

9. Security

The connection to the website is encrypted (HTTPS). The website is served as static files, and form submissions are stored outside the public server directory.

10. Changes to this policy

I update this policy when the way the website works changes, e.g. after a new tool is added. The date of the last update is shown at the top of the document.