← Back to homepage
Privacy Policy
Last updated: January 4, 2026
We respect your privacy! This Privacy Policy explains what data we collect, for what purpose, and how we protect it.
1. Personal Data Administrator
The administrator of your personal data is:
- Damian Bednarski
- Business activity
- Email: kontakt@damianbednarski.com
- Website: www.damianbednarski.com
2. What Data Do We Collect?
2.1. Voluntarily Provided Data
When you contact us through the contact form or email, we collect:
- First and last name
- Email address
- Phone number (optional)
- Message content
- Other data you decide to provide us
2.2. Automatically Collected Data
While browsing our website, we automatically collect:
- IP address
- Browser type and operating system
- Visit time and date
- Visited subpages
- Referral source
- Website usage data (via Google Analytics)
2.3. Cookies
Our website uses cookies. Details can be found in the Cookie Policy.
3. Purpose of Data Processing
We process your data solely for the following purposes:
3.1. Contact and Inquiry Handling
- Legal basis: Art. 6 para. 1 lit. b GDPR (contract performance) or lit. f (legitimate interest)
- Purpose: responding to inquiries, quote preparation, communication
- Retention period: until the matter is resolved or 3 years from last contact
3.2. Contract Performance
- Legal basis: Art. 6 para. 1 lit. b GDPR (contract performance)
- Purpose: order execution, invoice issuance, project-related contact
- Retention period: contract duration + 5 years (tax regulations)
3.3. Marketing
- Legal basis: Art. 6 para. 1 lit. a GDPR (consent) or lit. f (legitimate interest)
- Purpose: sending information about our services (only if you have consented)
- Retention period: until consent withdrawal
3.4. Analytics and Statistics
- Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
- Purpose: website traffic analysis, content optimization (Google Analytics)
- Retention period: 26 months (Google Analytics)
3.5. Protection Against Abuse
- Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
- Purpose: protection against spam, attacks, abuse
- Retention period: up to 12 months
4. Disclosure of Personal Data
Your data may be disclosed to the following entities:
4.1. Subcontractors
- Hosting provider - data storage on server
- Google Analytics - website traffic analysis (anonymized data)
- EmailJS - email sending service from contact form
- Accounting services provider - invoice issuance (if applicable)
4.2. State Authorities
In justified cases, data may be transferred to law enforcement agencies or other authorized institutions.
4.3. Data Transfer Outside the EEA
Some tools (e.g., Google Analytics, EmailJS) may transfer data outside the European Economic Area. We only use services that ensure an appropriate level of data protection.
5. Your Rights
Under GDPR, you have the following rights:
5.1. Right of Access to Data
You have the right to obtain confirmation whether we process your data and receive a copy thereof.
5.2. Right to Data Rectification
You may request correction of incorrect data or completion of incomplete data.
5.3. Right to Erasure ("right to be forgotten")
You may request deletion of your data unless regulations require their storage (e.g., invoices).
5.4. Right to Restriction of Processing
You may request restriction of processing of your data in specific situations.
5.5. Right to Data Portability
You have the right to receive your data in a structured format or transfer it to another administrator.
5.6. Right to Object
You may object to data processing, especially for marketing purposes.
5.7. Right to Withdraw Consent
If processing is based on consent, you may withdraw it at any time.
5.8. Right to Lodge a Complaint
You have the right to file a complaint with the President of the Personal Data Protection Office (PUODO).
How to exercise your rights?
To exercise your rights, send an email to: kontakt@damianbednarski.com
We will respond within 30 days of receiving the request.
6. Data Security
We apply appropriate technical and organizational measures to protect your data:
- SSL/TLS encryption - secure HTTPS connection
- Secure servers - hosting with reputable providers
- Restricted access - only authorized persons have access to data
- Regular backups - protection against data loss
- Security updates - regular patching of security vulnerabilities
- Monitoring - detection of unauthorized access attempts
7. Children's Data
Our website is not directed at persons under 16 years of age. We do not knowingly collect data from children. If you are a parent/guardian and learn that your child has provided us with data, please contact us.
8. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy. We will inform about significant changes through:
- Announcement on the homepage
- Email (if we have your address)
- Update of the "Last updated" date at the top of this document
We recommend regularly checking this page to familiarize yourself with any changes.
9. Detailed Information About Tools
9.1. Google Analytics
We use Google Analytics to analyze website traffic. Google Analytics collects data through cookies, including:
- Information about visited pages
- Time spent on the website
- Referral source
- Demographic data (age, gender, interests - in aggregated form)
- Geographic data (country, city)
IP addresses are anonymized. You can opt out of Google Analytics by installing the add-on: Google Analytics Opt-out Browser Add-on
9.2. EmailJS
The contact form uses the EmailJS service to send messages. Data from the form (name, email, message content) is transmitted to EmailJS to deliver the email message.
EmailJS Privacy Policy: emailjs.com/legal/privacy-policy
9.3. Hosting
The website is hosted on professional hosting service provider servers. The hosting provider has technical access to the data but is contractually obligated to protect it and does not use it for its own purposes.
10. Legal Basis
Personal data processing is based on:
- GDPR Regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
- Act on the Protection of Personal Data - Act of 10 May 2018
- Act on the Provision of Electronic Services - Act of 18 July 2002
- Consumer Rights Act - Act of 30 May 2014
11. Privacy Contact
If you have questions about this Privacy Policy or how your data is processed, please contact us:
12. Personal Data Protection Office
You may contact the supervisory authority:
- Personal Data Protection Office (PUODO)
- ul. Stawki 2, 00-193 Warszawa
- Tel.: 22 531 03 00
- Email: kancelaria@uodo.gov.pl
- www.uodo.gov.pl
This Privacy Policy has been prepared in accordance with GDPR and Polish personal data protection regulations.