Privacy Policy

Last updated: 2026-05-16

1. Data Controller

The controller of personal data processed in connection with the use of the website https://tomasz.kaszuba.eu is:

2. Scope and Purposes of Data Processing

We process personal data exclusively for the following purposes and within the following scope (depending on how you use the website):

  1. Cookies and technical data (necessary) - configuration and operational data (e.g., selected language, privacy consent status) stored automatically on your device to ensure the proper functioning and stability of the website. Detailed technical information can be found in section 3. Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller).
  2. Contact form - name, email address, and message content provided voluntarily for the efficient handling of the submitted inquiry and ongoing communication. Legal basis: Art. 6(1)(b) GDPR (taking steps at the request of the individual) or Art. 6(1)(f) GDPR (legitimate interest of the controller). Data is stored for the time necessary to handle correspondence, up to 12 months after its conclusion.
  3. Server logs - IP address and technical connection data (including date of visit, requested address), and in the case of form submissions, submission and attachment metadata, recorded automatically in log files to ensure network security and technical diagnostics. Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller). Logs are deleted after a period not exceeding 12 months.
  4. Spam protection (Cloudflare Turnstile) - technical device data (including IP address) analyzed via an external script to protect forms against automated bots. Additionally, the IP address may be temporarily stored in the server's volatile memory to implement a rate limit. Independently of this, the IP address is recorded in the logs - see the 'Server and form logs' section above. Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller).

3. Cookies

The website uses cookies (small text files saved by the browser on your device). During your first visit, we display a banner asking for your consent.

RequiredThey are responsible for core website functions, such as remembering the selected language (cookie), privacy consent status (localStorage). They operate automatically and do not require prior consent.

If you want to delete or block cookies, you can use the appropriate functions of your software (web browser). Restricting their operation may affect certain functionalities of the website.

4. Data Recipients

We do not share personal data with third parties for marketing purposes. Data may only be transferred to trusted partners providing technical services necessary for the operation of the website and the management of day-to-day activities (e.g., hosting provider), solely to the extent necessary to achieve these purposes.

As part of spam protection, we use services from Cloudflare (USA), which involves transferring technical data (e.g., IP address) outside the European Economic Area. This transfer complies with GDPR requirements based on Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

5. Your Rights

Under GDPR regulations, you are entitled to the following rights:

  • -Right to view data - you have the right to view your personal data processed by the Controller (Art. 15 GDPR).
  • -Right to rectification - you have the right to request the rectification or completion of your data if it is incorrect or incomplete (Art. 16 GDPR).
  • -Right to erasure - you have the right to request the deletion of your personal data in cases provided for by law (Art. 17 GDPR).
  • -Right to restriction of processing - you have the right to request the restriction of processing of your personal data (Art. 18 GDPR).
  • -Right to object - you have the right to object to the processing of your personal data based on a legitimate interest (Art. 21 GDPR).
  • -Right to withdraw consent - if processing is based on consent, you have the right to withdraw it at any time, which does not affect the lawfulness of processing before its withdrawal.
  • -Right to lodge a complaint - you have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

To exercise your rights, please contact us at: tkware@kaszuba.eu

6. Changes to the Privacy Policy

We reserve the right to update this document to adapt it to legal or technological changes. The current version of the policy along with its publication date is permanently available in this section, and we inform about significant changes by updating the date visible at the top of the page.