Privacy Policy
This website is operated under the GKD Agency brand by Grzegorz Kaczmarek Development.
This policy explains what personal data we process, who else handles it on our behalf, where it is stored, and what rights you have.
The data controller is a Polish legal entity operating under Polish law. The Polish-language version of this policy is the original and legally binding version. Translations into English, German, and Ukrainian are provided for convenience only and carry no legal effect.
Data controller
- Name
- Grzegorz Kaczmarek
- Business name
- Grzegorz Kaczmarek Development
- Operating brand
- GKD Agency
- Address
- ul. Na Grobli 22A/1, 50-421 Wrocław, Poland
- NIP
- 8993023736
- REGON
- 541579260
- contact@gkk-dev.com
The controller is the party that decides why and how your data is processed. For requests under data protection law, use the email address above.
What data we process and why
Hosting and security telemetry — IP address, user-agent, requested path, timestamp, referrer — processed by our hosting provider to deliver pages, prevent abuse, and debug errors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in running a secure service).
Direct contact — email address and message content — processed when you contact us or open a booking. Legal basis: Art. 6(1)(b) GDPR (steps at your request before a contract).
Consent preferences — a small record of your cookie choices and the consent version, stored locally in your browser. Legal basis: Art. 6(1)(c) and (f) GDPR.
Optional analytics — pseudonymous identifiers, page-view metadata, and interaction events — processed only after you consent to the Analytics category. Legal basis: Art. 6(1)(a) GDPR (consent).
We do not run advertising profiling, automated decision-making, or sell your data.
Data processors and service providers
- Vercel Inc. (USA, EU edge regions)
- Hosting, Vercel Analytics, Speed Insights. Transfer: EU-US Data Privacy Framework.
- Google LLC (USA)
- Google Analytics 4. Loaded only after analytics consent. Transfer: EU-US Data Privacy Framework.
- PostHog Inc. (US parent, EU processing on eu.i.posthog.com)
- Product analytics and exception capture. Loaded only after analytics consent. Transfer to US parent: Standard Contractual Clauses.
- Ahrefs Pte. Ltd. (Singapore)
- Cookieless web analytics. Loaded only after analytics consent. Transfer: Standard Contractual Clauses.
- Calendly LLC (USA)
- Booking. Loaded only when you open a booking. Transfer: EU-US Data Privacy Framework.
The following processors handle data on our behalf, under written data processing agreements where required.
International data transfers
Some processors are based outside the European Economic Area. The transfer mechanism for each is named above.
The EU-US Data Privacy Framework is an adequacy decision adopted by the European Commission on 10 July 2023. Standard Contractual Clauses are pre-approved contractual safeguards under Commission Implementing Decision (EU) 2021/914.
Retention
- Hosting and security logs
- Short operational periods at the provider level (typically up to 30 days); not retained by us.
- Direct contact emails
- Up to 12 months from the last exchange, unless a contract follows.
- Booking records
- Up to 12 months from the last booking, unless a contract follows.
- Invoices and contractual records
- 5 years from the end of the tax year, as required by Polish tax law.
- Consent preferences
- Until you clear them in your browser or the consent version changes.
- Analytics events
- Provider-side; configured to 14 months in Google Analytics and 12 months in PostHog.
Your rights and how to complain
- Polish supervisory authority
- Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa. E-mail: kancelaria@uodo.gov.pl. https://uodo.gov.pl
- Other EU/EEA residents
- You may complain to your local supervisory authority.
Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. You may also withdraw any consent you have given, without affecting prior lawful processing. To exercise any right, write to the controller email above; we aim to respond within one month.
You may also lodge a complaint with a supervisory authority.
Storage technologies and consent
We use your browser’s localStorage to remember your cookie consent choice and to support certain analytics providers when consent has been given. localStorage is treated as a similar technology to cookies under EU ePrivacy rules.
You can change or withdraw your cookie consent at any time by clicking “Cookie settings” in the website footer. Withdrawal stops future analytics collection and removes known analytics identifiers from your browser.
For details about which technologies are set, when, and how to remove them, see our Cookie Policy.
Updates
We update this policy when our practices change. Material changes also bump the consent version, which re-prompts you for any consent-based processing the next time you visit.