Privacy Policy

01 Data controller

The controller of your personal data is Katarzyna Kowalczyk-Mielcarek, a frontend developer based in Warsaw, Poland, operating the website kowalczyk-mielcarek.com.

• Email: kowalczyk.mielcarek@gmail.com
• Location: Warsaw, Poland

02 What data is processed, why, and on what basis

a) When you contact me (email)

If you reach out, I process the data you choose to share: your name, email address and the content of your message.

• Purpose: to reply to your message, hold the conversation, and discuss possible collaboration.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in handling enquiries sent to me) and, where relevant, Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract).

b) Technical data (server logs)

The server hosting this website automatically records basic technical data for each request: IP address, date and time, the page requested and the browser type (user-agent).

• Purpose: security and stability of the website, error diagnostics and aggregate visit statistics.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping the website secure and working correctly).

03 Cookies and consent

This website uses a cookie-consent banner that lets you decide what you agree to. Cookies fall into two categories:

• Essential - a single cookie that remembers your cookie choice (named cc_cookie). It is required for the banner to work and is not used for analytics or marketing. Legal basis: Art. 6(1)(f) GDPR.
• Analytics - loaded only after you give consent. They are off by default (Google Consent Mode v2 is set to "denied"). If you consent, the site uses Google Analytics, which stores cookies (e.g. _ga, _gid) for anonymous traffic statistics. Legal basis: Art. 6(1)(a) GDPR (your consent).

No advertising cookies or marketing profiling are used. Fonts and other site assets are served from the same server, with no external font providers.

You can withdraw or change your consent at any time via the cookie settings on the site. Withdrawal does not affect the lawfulness of processing carried out before it.

04 Third parties and web fonts

I do not sell your data or share it with third parties for marketing. Data may be processed by trusted providers that support the website:

• Hosting provider - Hetzner Online GmbH (Germany, EU/EEA), whose servers host the website, acting as a data processor solely to the extent needed to provide hosting.
• Google Analytics - a traffic-analytics service by Google (Google Ireland Limited and Google LLC), used only if you consent to analytics cookies. Where enabled, Google processes anonymous statistics about visits to the site.

05 Transfers outside the EEA

Hosting takes place within the EU/EEA. If you consent to analytics, Google Analytics may involve transferring your IP and usage data to Google LLC in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which serves as the safeguard for such transfers under the GDPR.

06 Data retention

• Correspondence: for as long as needed to handle your matter, and then for a period justified by legitimate interest (e.g. keeping a record of what was agreed) or by applicable law.
• Server logs: for a short period, until they are automatically overwritten during log rotation; used only on an ad hoc basis for security and diagnostics.

07 Your rights

In relation to the processing of your data, you have the right to:

• access your data and obtain a copy of it,
• rectify (correct) your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent to analytics cookies at any time (via the cookie settings on the site), without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact me at kowalczyk.mielcarek@gmail.com.

You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, if you believe your data is processed in breach of the GDPR.

08 Is providing data mandatory?

Providing your data is voluntary but necessary to receive a reply - without contact details I will not be able to get back to you.

09 Automated decision-making and profiling

Your data is not used for automated decision-making, including profiling.

10 Security

I apply appropriate technical and organisational measures to protect data against unauthorised access and loss, including:

• an encrypted HTTPS connection (TLS certificate) across the whole site,
• a firewall and protection against intrusion attempts,
• server access restricted to cryptographic keys only,
• regular backups and security updates.

11 Changes to this policy

This policy may be updated if the way the website works or the law changes. The current version is always available on this page, with the last-updated date shown at the top.