Privacy Policy

1. Data controller

The controller of personal data processed through bjaniuk.com is [NAZWA_JDG], a sole trader (JDG) registered in Poland. NIP: [NIP]. Place of business: [ADRES_DZIALALNOSCI].

Contact: [EMAIL_PUBLICZNY] or the contact form on this website. No Data Protection Officer has been appointed. Data-subject requests can be sent to the controller contact above.

2. What data is processed

When you use the contact form, the website processes the email address, subject, and message content that you provide, together with submission status.

For antispam protection, Cloudflare Turnstile may process technical signals such as a security token, IP address, user-agent, TLS/browser signals, site key, action, and hostname.

The hosting and analytics layer may process technical request data such as URL, referrer, approximate location, device type, browser, operating system, timestamp, and bot-detection signals. Vercel Web Analytics is configured as cookieless analytics and is used for aggregated traffic statistics.

The website stores the selected theme preference in the browser's localStorage under the key `theme-mode`. This is used only to remember the visual theme selected by the visitor.

Contact-form data comes from you. Technical security, hosting, and analytics data is generated by your device, browser, and the providers that operate the website.

3. Purposes and legal bases

• Replying to contact-form messages and handling correspondence - Article 6(1)(f) GDPR (legitimate interest in handling correspondence). Where the message concerns potential cooperation, Article 6(1)(b) GDPR may also apply (steps prior to entering into a contract).
• Protecting the contact form and website against spam, bots, abuse, and attacks - Article 6(1)(f) GDPR.
• Maintaining hosting, diagnostics, logs, and basic aggregated website analytics - Article 6(1)(f) GDPR, legitimate interest in measuring and improving the website without advertising profiling.
• Remembering the selected theme in localStorage - Article 6(1)(f) GDPR, legitimate interest in preserving a user-selected interface preference.

4. Recipients and tools

The website uses selected service providers only to run the website and process contact requests. Data may also be disclosed where required by law or necessary to establish, exercise, or defend legal claims.

• Vercel - hosting, deployment infrastructure, request handling, and cookieless Web Analytics.
• Resend - delivery of messages submitted through the contact form to the controller inbox.
• Cloudflare Turnstile - antispam and bot-protection verification for the contact form.
• Sanity - CMS and content/image delivery for public website content.
• [DOSTAWCA_SKRZYNKI] - storage and handling of received contact messages in the controller inbox.

5. Transfers outside the EEA

Some providers may process data outside the European Economic Area, including in the United States. Where this happens, the controller relies on appropriate safeguards described by those providers, in particular the European Commission's standard contractual clauses (SCCs) and, where a provider is certified, the EU-US Data Privacy Framework. A copy of the relevant safeguards can be requested from the controller or reviewed in the provider's legal documentation.

6. Retention

• Contact-form messages: for as long as needed to reply, then for an archive period of up to 12 months after the correspondence is closed, unless a longer period is required by law or is necessary to establish, exercise, or defend legal claims.
• Security, hosting, and diagnostic logs: according to the retention periods of the relevant providers and only as needed for security, operations, and abuse prevention.
• Aggregated analytics: retained as aggregated statistics and not used to identify visitors.
• Theme preference: until you change the setting or clear browser storage.

7. Cookies, browser storage, and analytics

This website does not use advertising cookies and does not profile visitors for marketing. No separate cookie policy or cookie banner is used for the current tools.

Vercel Web Analytics is cookieless and provides aggregated usage metrics.

The website uses browser localStorage only for the theme preference under the key `theme-mode`. This is not a cookie. You can remove it by clearing site data in your browser.

Cloudflare Turnstile is used only as a one-time security token check on the contact form. Pre-clearance cookies such as `cf_clearance` are not enabled by this website. Turnstile and the hosting layer may use technical signals necessary for security and abuse prevention.

8. Your rights

Under the GDPR, you may request access to your data, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. If processing were ever based on consent, you would also have the right to withdraw that consent at any time.

Requests can be sent to [EMAIL_PUBLICZNY]. The controller may need additional information to confirm your identity before fulfilling a request.

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

9. Voluntary data provision

Providing contact-form data is voluntary, but email address, subject, message content, and successful security verification are necessary to send and respond to a message. Without them, the website operator may be unable to respond.

10. Automated decision-making

The website does not use automated decision-making that produces legal or similarly significant effects. Turnstile performs an automated security check only to decide whether the contact form submission should be accepted as non-abusive. If the form is unavailable, you can contact the controller by email.

11. External links

The website may link to external websites or social profiles. Those external services are controlled by their own operators and their own privacy rules apply after you leave this website.