Privacypolicy

The controller of your personal data is Dawid Sobański, Poznań, Poland ("I" or "the Controller"). For any matter concerning your personal data, e-mail dawidconnect11@gmail.com or call +48 664 168 526.

• +Contact through the form, by e-mail or by phone: your e-mail address and — if you provide them — your name, company name, phone number, message and the answers you select in the form (e.g. project type, timeline, type of cooperation). I use them to reply, prepare an offer or estimate and discuss cooperation, including recruitment. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (my legitimate interest in handling correspondence).
• +Entering into and performing a contract: if we start working together, I process the data needed to conclude and perform the contract and for invoicing. Legal basis: Art. 6(1)(b) GDPR and, for tax and accounting obligations, Art. 6(1)(c) GDPR.
• +Website security: the server logs your IP address, the date and time of the request, the page requested and browser information. The IP address is also briefly used to limit how many messages can be sent through the form (spam protection). Legal basis: Art. 6(1)(f) GDPR (keeping the website secure and working correctly).
• +Establishing, exercising or defending legal claims: in case of a dispute I may process data from our correspondence and contract. Legal basis: Art. 6(1)(f) GDPR.

• +Correspondence that did not lead to a contract — up to 12 months after our last contact.
• +Contract-related data — for the duration of the contract and then until the limitation period for claims and the retention period required by tax law expire (as a rule, 5 years from the end of the year in which the tax payment was due).
• +Server logs — no longer than 30 days, unless needed to investigate a security incident.
• +The IP address used for spam protection — up to 10 minutes.

Data may be shared with companies that provide services to me: the website hosting provider, the e-mail provider (Google — Gmail), the provider that delivers messages from the form and, if we work together, my accounting office. They process data on my behalf, under data processing agreements and only as needed to provide their services.

Google may process data in the United States. Such transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework, in which Google participates, and on standard contractual clauses.

You have the right to access, rectify and erase your data, to restrict its processing, to data portability, and to object to processing based on legitimate interest. To exercise these rights, contact me at the address above.

If you believe I process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland) or with the supervisory authority in your country.

Providing data is voluntary, but without an e-mail address or phone number I cannot reply to your message. I do not make automated decisions about you and I do not profile you.

The website uses only cookies that are strictly necessary for it to work, so it does not ask for consent to store them:

• +dawid-sobanski-session — keeps your session, e.g. while sending the form. Expires after 2 h of inactivity.
• +XSRF-TOKEN — protects the form against CSRF attacks. Expires after 2 h.

I do not use analytics or marketing cookies. Fonts and all other assets are served from my own server, so the website does not connect to third-party servers. You can block cookies in your browser settings, but the contact form may then stop working.

I may update this policy, e.g. when the law or the way the website works changes. The current version is always available on this page.