Who the controller is
The controller of your data is Kacper Szymczuch, trading as Kacper Szymczuch - Delta-Prim Software, ul. Wiejska 51, 39-300 Mielec, Poland.
VAT ID (NIP) 5213952974, REGON 520995836. For data matters: [email protected]. Electronic delivery address: AE:PL-60861-28870-JCHJB-35.
What we collect
Only what you type into the contact form: your name, email address, optionally a company name, and the message itself. Plus the language version of the site you sent it from, so we reply in the same language.
We don't buy data, we don't pull it from other sources, and we don't create an account for you. The site has no database: your enquiry goes straight to our mailbox.
Why, and on what legal basis
The data is used solely to answer your enquiry and to correspond about it. We don't send a newsletter and we don't add anyone to any list.
The legal basis is Art. 6(1)(b) GDPR - steps taken at your request before entering into a contract - and Art. 6(1)(f) GDPR, our legitimate interest in conducting business correspondence.
It is not consent. That is why there is no "I agree" tick box on the form: consent has to be freely given, and consent you cannot send a message without is not freely given.
Do you have to provide it
Providing the data is voluntary, but without an email address we have no way to reply, and without a message we don't know what you're asking about. The company name is optional.
You can always write straight to [email protected] and skip the form.
Who else has access
Resend (Resend, Inc., USA) - delivers the form message to our mailbox. Google (Google Ireland Limited and Google LLC, USA) - Google Analytics statistics, only if you consented to them. Microsoft (Microsoft Ireland Operations Limited) - hosting, in the Poland region.
Each of them processes the data only on our instructions and only as far as their service requires. We don't sell data and we don't pass it to anyone for their own purposes.
Transfers outside the European Economic Area
The site is hosted in the Poland region, so the site's own data does not leave the country.
Resend and Google also process data in the USA. Both are certified under the EU-U.S. Data Privacy Framework, and the European Commission decided on 10 July 2023 that such transfers provide an adequate level of protection (Art. 45 GDPR). No additional consent from you is required.
How long we keep it
Enquiries that didn't lead to work: 12 months from the last message on the matter. Then we delete the thread.
If an enquiry leads to a contract: for the term of that contract and the limitation period for claims, and accounting records for 5 years from the end of the financial year, as required by Art. 74 of the Polish Accounting Act.
Your rights
You can exercise any of them at any time by writing to [email protected]. We reply within a month.
- Access to your data and a copy of it.
- Rectification, if the data is wrong.
- Erasure of your data.
- Restriction of processing.
- Portability to another controller.
- Objection to processing based on legitimate interest - at any time, without giving a reason.
- A complaint to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Statistics
We use Google Analytics 4 to see how many people visit the site and which pages they read. Google's script only starts after you click "Accept" in the banner - until then not a single request reaches Google's servers.
We have turned advertising signals off: the data is not used for remarketing or ad personalisation. You can withdraw consent at any time via the "Cookie settings" link in the footer - that clears your choice and stops the statistics.
Cookies
Without your consent the site stores no cookies on your device at all. The form doesn't need them, and dark mode follows your system setting rather than a stored preference.
Once you consent, Google Analytics stores the _ga and _ga_* cookies - they distinguish repeat visits and expire after two years.
Either way we store one value in your browser's localStorage, called dp-consent: your decision itself. Without it the banner would ask again on every visit. It identifies no one and is never sent anywhere.
What we don't do
We don't profile you and we make no automated decisions. No algorithm scores your enquiry - a person reads it, the same person who then replies.