What happens to what you write to me.
Short, and without the legal padding. This site collects exactly one thing: the message from the contact form. Below is what happens to it, who else sees it and how long it stays with me.
Who is behind this
The data controller is Jakub Słuszniak, running the Słuszny studio in Kraków, Poland. It is a one-person business, so there is no department to pass you on to: I read the messages myself.
For anything to do with your data, write to 2003kub@gmail.com. There is no appointed data protection officer, because at this scale of processing the law does not require one.
What the form collects
Four fields: your name or company name, your email address, a subject from the list and the body of the message. That is all. There is no phone field, no address field and no hidden question about your budget.
On top of that, the server keeps your IP address for one hour. Only to count how many submissions came from one network and to cut off floods from bots. After an hour that record expires on its own, and it never reaches the message I receive.
What I need it for
To write back. Nothing beyond that: it builds no mailing list, goes into no newsletter, and is used for no profiling and no advertising.
The legal basis is Article 6(1)(b) GDPR when you write about possible work together (these are steps prior to entering into a contract), and Article 6(1)(f) GDPR when you write about anything else: my legitimate interest is answering a person who asked a question.
Who else sees it
Message delivery is handled by Resend Inc. in the United States. The transfer outside the European Economic Area relies on the standard contractual clauses approved by the European Commission.
The site runs on Cloudflare Pages. Cloudflare sees what any hosting provider sees: the IP address and technical request data needed to deliver the page and to protect it from attacks.
Beyond those two companies, nobody. I do not sell data, I do not trade it, and I do not plug any third-party analytics into this site.
How long it stays
I keep the message until the conversation ends, and no longer than twelve months from the last contact. If the conversation turns into a commission, the correspondence stays for as long as accounting rules require.
The per-IP submission counter clears itself after an hour. The setting that remembers you closed the phone-number panel is stored for a day in your browser and never leaves your device.
What you can do
You have the right to ask for access to your data, for its rectification, erasure or restriction of processing, and to object to processing based on legitimate interest. One message to 2003kub@gmail.com is enough, with no forms and no justification needed.
If you think I am getting something wrong, you can lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Cookies and tracking
This site sets no cookies. There is no Google Analytics and no other visit counter, no advertising pixels, no heatmaps and no session recording. That is why you will not see a consent banner here: there is nothing to consent to.
The only trace left in your browser is a note that you closed the phone-number panel. It sits in local storage for a day, then expires, and no person can be identified from it.
Typefaces and images
The typefaces sit on the same server as the page, so your browser never reaches out to Google or any other content delivery network for them. The same goes for images and animation code.
Client thumbnails and screenshots are images from this server, not frames embedded from other people's sites. Browsing the portfolio sends no request outside this domain.
If after reading this you still want to write, the form is at the bottom of the home page. Back to the form