Marcin Dobrzyński, home page

Privacy policy

Who processes your data on this website, for what purpose, on what legal basis and for how long. Last updated: .

1. Data controller

The controller of your personal data is:

Marcin Dobrzyński, trading as Marcin Dobrzyński Sellon
ul. Kostrzyńska 2B, 65-127 Zielona Góra, Poland
Tax ID (NIP): 9730786130
Email: kontakt@marcin-dobrzynski.pl

I have not appointed a data protection officer, as this is not required for the scope of processing involved. For any matter concerning personal data, write to the email address above or by post.

2. When I process your data

On this website I process personal data in only three situations: when you send a message via the contact form or by email, when the server writes a technical access log, and when you consent to analytics (Google Analytics 4). The website has no user accounts and no newsletter.

3. Hosting, server logs and encryption

The website runs on a VPS in Poland provided by the hosting company cyber_Folks S.A. (Poznań), which processes data as a processor under a data processing agreement (Art. 28 GDPR). The connection to the website is encrypted (TLS, Let's Encrypt certificate).

On every visit, the server (nginx) automatically records in its logs: IP address, date and time, the page requested, the server response code, browser and operating system (user agent) and the page you came from (referrer).

Purpose and legal basis: security and proper operation of the website, error diagnostics and detection of abuse, i.e. my legitimate interest (Art. 6(1)(f) GDPR). I do not combine the logs with other data or use them for profiling.

Retention period: 14 days, after which the logs are deleted automatically.

4. Contact form and email

Data processed: email address, optionally first name, the selected topic, the content of your message and anything else you choose to include in it.

Purpose and legal basis: replying to your enquiry and any further correspondence, including steps taken prior to entering into a contract (Art. 6(1)(b) GDPR), and otherwise my legitimate interest in responding to messages (Art. 6(1)(f) GDPR). Providing the data is voluntary, but without an email address and the content of your message I cannot reply.

Web3Forms: the form sends your message via the Web3Forms service, which forwards it to my email inbox. The service is operated by Web3Creative (India). Data is stored on Amazon Web Services servers in the USA (US-East region); the service also uses Cloudflare and Hetzner. Web3Forms keeps submissions for up to 3 years unless I delete them earlier. The data leaves the European Economic Area; the transfer is based on the standard contractual clauses (SCCs) included in the Web3Forms data processing agreement (web3forms.com/dpa). If you prefer not to use the form, write directly to kontakt@marcin-dobrzynski.pl.

Email: messages are delivered to a mailbox hosted on cyber_Folks S.A. servers in Poland.

Retention period: until the correspondence ends, and then for no more than 3 years from the last contact, unless the law requires longer retention (for example tax law, if we end up working together).

5. Cookies and analytics (Google Analytics 4)

Without your consent the website sets no cookies and loads no analytics or advertising scripts. In that case nothing is sent to Google.

If you click “Allow analytics”, the website loads Google Analytics 4. Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

  • Purpose: statistics on how the website is used, i.e. which content is read and where visitors come from.
  • Legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej); for visitors from Germany also § 25(1) TDDDG).
  • Cookies: _ga and _ga_<ID>, valid for 13 months.
  • Retention in GA4: 14 months.
  • Settings: Google Signals, ad personalisation and data sharing with Google for other purposes are switched off. IP addresses are not stored; in the EU they are used only for approximate location and then discarded.
  • Transfer to the USA: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10.07.2023).
  • Withdrawing consent: at any time via the “Cookie settings” button in the footer. Withdrawal does not affect the lawfulness of processing carried out before it (Art. 7(3) GDPR).

6. Information stored in your browser without consent

I save only your choice from the banner: the key mb_consent in your browser’s storage (localStorage), containing the banner version, your choice (yes/no) and the date. It contains no identifier and is not sent to the server. It is strictly necessary so that you are not asked on every visit (Art. 399(3) of the Polish Electronic Communications Law, § 25(2) no. 2 TDDDG). I ask for consent again after 12 months or when the banner text changes.

7. Fonts

Fonts are served from this website’s own server. The website does not connect to Google Fonts or any other external font provider.

The website contains plain links to my profiles (LinkedIn, YouTube, TikTok, Instagram, Facebook, X), to my badge profile on Credly and to my other projects. I do not embed plug-ins or scripts from these services. They process data only once you click a link and go to their website, under their own privacy policies.

9. Recipients of data

Data may be passed only to providers that help me run the website: cyber_Folks S.A. (hosting and email), Web3Forms (contact form) and, with your consent, Google (analytics). I do not share data for marketing purposes.

10. Your rights

You have the right to access your data and to have it rectified or erased, the right to restrict processing and the right to data portability. You can withdraw your consent to analytics at any time, without affecting the lawfulness of processing carried out before withdrawal. Write to kontakt@marcin-dobrzynski.pl.

11. Right to object (Art. 21 GDPR)

Where I process your data on the basis of legitimate interest (Art. 6(1)(f) GDPR, e.g. server logs or correspondence), you may object at any time on grounds relating to your particular situation. I will then stop processing that data unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. Send your objection to kontakt@marcin-dobrzynski.pl.

12. Complaint to the supervisory authority

You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

13. Profiling and automated decision-making

I do not make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR).

14. Changes to this policy

I update this policy when the way the website works changes. The current version is always available at this address, with the date at the top. Previous versions are archived.