Privacy policy

Effective from: June 10, 2026

1. Data Controller

The controller of personal data processed in connection with potacki.com and its language versions is Paweł Potacki, address: Rządza, Świerkowa 14, 05-304 Stanisławów, Poland, e-mail: [email protected].

For personal-data matters, you may also use the contact form.

2. Scope of This Policy

This Policy describes personal-data processing related to visiting the Website, sending an inquiry through the contact form, technical security and cookies. The Website does not currently provide User accounts, a newsletter, comments or online payments.

3. What Data May Be Processed?

  • data submitted through the form: first and last name, e-mail address, optionally a telephone number, project type, preferred technology and message content,
  • technical log data: IP address, request date and time, visited page, browser and device information, technical identifiers and information required to diagnose errors and prevent abuse,
  • information related to cookie preferences and anti-spam safeguards.

Please do not submit special-category data, such as health information, unless it is necessary for your inquiry.

4. Purposes and Legal Bases

PurposeLegal basis
Responding to an inquiry and providing information about possible cooperationArticle 6(1)(b) GDPR where you request steps before entering into a contract, or Article 6(1)(f) GDPR where I respond to a general inquiry
Website security, spam prevention, error diagnosis and technical logsArticle 6(1)(f) GDPR – the legitimate interest in protecting the Website and communication
Establishing, pursuing or defending legal claimsArticle 6(1)(f) GDPR – protection of the Controller's rights
Tax or accounting obligations if cooperation beginsArticle 6(1)(c) GDPR – compliance with a legal obligation
Optional analytics or marketing, if enabled and accepted in cookie settingsArticle 6(1)(a) GDPR and Articles 399 and 400 of the Polish Electronic Communications Law – consent

5. Is Providing Data Mandatory?

Providing data in the form is voluntary. Fields marked as required are necessary to answer your message. The telephone number and preferred technology remain optional.

6. Recipients of Personal Data

Data may be disclosed only to providers required to operate the Website and handle inquiries, in particular hosting, e-mail, technical support, and security providers. Depending on the active configuration, they may also include:

  • Cloudflare, Inc. – where Website traffic is handled through Cloudflare CDN or security services,
  • Google LLC – where the contact form is protected by reCAPTCHA.

Before publication, verify the actual Website configuration and provider agreements. The Policy should not list services that are not used.

7. Transfers Outside the European Economic Area

Some technology providers may process data outside the European Economic Area. Where this occurs, the transfer should rely on an appropriate legal mechanism, such as an adequacy decision or standard contractual clauses, together with any additional safeguards required in the relevant case.

8. How Long Is Data Retained?

  • inquiries that do not lead to cooperation: for the time needed to handle the message and then for no longer than 12 months after the last contact, unless further retention is required in connection with legal claims,
  • contract-related data: for the duration of cooperation and afterwards for the period required by law or necessary to defend legal claims,
  • technical logs and security data: generally for no longer than 90 days, unless required to investigate an incident,
  • data processed on the basis of consent: until consent is withdrawn or the data is no longer required.

9. Your Rights

Within the limits provided by the GDPR, you may request access to your data, rectification, erasure, restriction of processing and data portability. You may also object to processing based on Article 6(1)(f) GDPR and withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You may lodge a complaint with the President of the Polish Personal Data Protection Office.

10. Automated Decision-Making

Your data is not used to make decisions producing legal effects or similarly significantly affecting you. Anti-spam tools may automatically assess the risk of contact-form abuse.

11. Cookies

Details about cookies and changing your preferences are available in the Cookie Policy.

12. Changes to This Policy

This Policy may be updated when the law, the scope of the Website or the tools used on the Website change. The current version is published on this page.

magnifiercrosschevron-left