Privacy policy

Who processes your data

The data controller is FSE Dominik Szamburski, ul. Marcinkowskiego 59, 64-820 Szamocin, Tax ID (NIP) 6070055788, REGON 529441335 ("I"). For personal data matters, write to [email protected].

Contact form and e-mail

When you send the form or write to me, I process your name, e-mail address and the content of your message. I do this to answer your inquiry and prepare a quote.

• Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Retention: until the correspondence ends, then for 12 months in case you come back to the conversation.
• Providing data is voluntary, but without an e-mail address I can't reply.

Clients

If we sign a contract, I process the data needed to perform and settle it: first and last name, company name, address, tax ID, e-mail and project correspondence.

• Legal basis: performance of a contract (Art. 6(1)(b) GDPR), tax and accounting obligations (Art. 6(1)(c) GDPR) and pursuing claims (Art. 6(1)(f) GDPR).
• Retention: for the duration of the contract, then until claims become time-barred, and for 5 years from the end of the tax year for accounting records.

Analytics and cookies

With your consent I use Google Tag Manager, which loads Google Analytics 4, to know which pages are visited and where visitors come from. Without consent, Google scripts are not loaded and store no cookies.

• Legal basis: consent (Art. 6(1)(a) GDPR, Art. 399 of the Polish Electronic Communications Law).
• Cookies: _ga and _ga_*, stored for up to 2 years. Data in Google Analytics is retained for 14 months.
• I store your choice in browser storage (localStorage) under the key consent-analytics. It is not a cookie and never leaves your device.
• You can change your consent at any time using the "Cookie settings" link in the page footer.

Who I share data with

• Resend (Resend, Inc., USA): delivers messages from the form. Transfers to the USA are based on standard contractual clauses approved by the European Commission.
• Google Ireland Ltd.: Google Tag Manager and Google Analytics, only after consent. Data may be transferred to the USA under the EU-US Data Privacy Framework.
• OVH SAS (France): provider of the server running the Website and e-mail. I keep server logs with IP addresses for up to 30 days for security purposes (Art. 6(1)(f) GDPR).
• Accounting office and accounting service providers, to the extent of invoice data.

Your rights

You have the right to:

• access your data and receive a copy of it,
• rectify and erase your data,
• restrict processing and port your data,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

I do not make automated decisions and do not profile users.