Privacy Policy

1. Who is responsible for your data?

The data controller is Michal Kanclerz ("I", "me" or "the Controller"). You can contact me about this policy or your personal data at hi@michalkanclerz.com.

2. What data may I process?

The data depends on how you interact with the website and my services. It may include:

• contact details you choose to provide, such as your name, email address and phone number;
• the contents of messages and information you share about your website, business or project;
• details needed to agree, deliver and support a service, including project, communication and payment-related information;
• basic technical information generated when you visit the website, such as IP address, browser and device information, access time, requested page and security logs, where these are recorded by the hosting or infrastructure provider.

Please do not send sensitive personal information unless it is genuinely necessary for your request.

3. Why and on what legal basis is data processed?

• To reply to enquiries and discuss a potential project: steps taken at your request before entering into a contract, or my legitimate interest in responding to business enquiries (Article 6(1)(b) or 6(1)(f) GDPR, as applicable).
• To agree, deliver and support a service: performance of a contract (Article 6(1)(b) GDPR).
• To keep accounting, tax and other legally required records: compliance with a legal obligation (Article 6(1)(c) GDPR).
• To protect the website, prevent misuse and establish or defend legal claims: my legitimate interests (Article 6(1)(f) GDPR).

I do not use the information submitted through ordinary enquiries to send unsolicited marketing newsletters.

4. How can you contact me?

You can contact me by email or by choosing the WhatsApp link on this website. If you use WhatsApp, the conversation is handled through WhatsApp and its provider, Meta. WhatsApp's own privacy terms apply to its processing of your data. You do not have to use WhatsApp; you can contact me directly by email instead.

This website also loads some images and static files from external servers, including jsDelivr, Google-hosted resources, WordPress.org, Wikimedia and image servers used by referenced businesses. When your browser requests these files, the relevant provider may receive your IP address and standard technical connection information. These requests are used to display page content, not to run an advertising profile.

When you follow an external link, the relevant third-party service may receive technical information from your device. I do not control how that service processes data once you leave this website.

5. Who may receive your data?

Data may be made available only where reasonably necessary to:

• the providers that host, secure and maintain this website and its email communications;
• WhatsApp / Meta, if you choose to contact me through WhatsApp;
• accounting, payment, professional or legal service providers, where needed to manage a project or comply with the law;
• public authorities, where disclosure is required by law.

I do not sell your personal data.

6. International data transfers

Some third-party providers, including providers of communication or website infrastructure services, may process data outside the European Economic Area. Where such a transfer takes place, it must be based on a valid GDPR transfer mechanism, such as an adequacy decision or appropriate safeguards (for example, Standard Contractual Clauses), where required. The third-party provider's own privacy information explains its processing and transfer arrangements.

7. How long is data kept?

I keep personal data only for as long as it is reasonably needed for the purpose for which it was collected:

• enquiry and pre-contract correspondence: for as long as needed to handle the enquiry and, normally, for up to 12 months after the last meaningful contact, unless a longer period is needed to deal with a follow-up or claim;
• project and contract records: for the duration of the service and afterwards for the period needed to handle claims and meet applicable legal, accounting and tax obligations;
• accounting and tax records: for the retention period required by applicable law;
• technical and security logs: for the period set by the hosting or security provider, according to operational and security needs.

8. Cookies and analytics

This website does not currently use Google Analytics, advertising pixels or analytics/advertising cookies to profile visitors or track them for advertising. The website may rely on technical data processed by its hosting and infrastructure providers to deliver, maintain and secure the service. If non-essential analytics or advertising technologies are added in the future, this policy and any required consent mechanism will be updated before they are used.

Your browser may also allow you to manage or block cookies and similar technologies. Blocking strictly necessary technical functions may affect how a website works.

9. Your rights

Subject to the conditions and exceptions in the GDPR, you may have the right to:

• request access to your personal data and a copy of it;
• request correction of inaccurate or incomplete data;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• request data portability, where the right applies;
• withdraw consent at any time, where processing is based on consent. Withdrawal does not affect processing carried out before it.

To exercise a right, email hi@michalkanclerz.com. You also have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (UODO), uodo.gov.pl.

10. Is providing data required?

Providing information is generally voluntary. However, if you do not provide the details needed to respond to your enquiry or perform a requested service, I may not be able to proceed with it. Certain records must be kept where the law requires it.

11. Automated decisions

I do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

12. Changes to this policy

This policy may be updated if the website, services or applicable legal requirements change. The current version will be published on this page with its updated date.