Draft. To be reviewed before publication.
Privacy policy
1. Controller
Marcin Balcerak, Marcin Balcerak Business Services, [street, number], [postcode] [city], Poland. Email: marcin.balcerak@mbbs.com.pl.
2. Visiting this website
The website is hosted on Cloudflare Pages (Cloudflare, Inc.). When you open a page, technically necessary connection data (IP address, time, requested page, browser type) is processed to deliver the page and protect it against attacks. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation of the website).
For visitor statistics we use Cloudflare Web Analytics. It does not set cookies, does not use local storage and does not create user profiles.
3. Cookies
We set a single technically necessary cookie (lang) when you choose a language manually, so the site opens in that language next time. No marketing or tracking cookies are used, so no consent banner is required.
4. Contact form and email
When you send the contact form or an email, we process the data you provide (name, work email, company, topic, message) to answer your request and prepare a possible contract. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR (answering business enquiries).
The form is protected against spam with Cloudflare Turnstile, which processes technical data about your browser. Form data is forwarded to an automation server operated by us on infrastructure of OVH SAS (data centres in the EU) and delivered to our mailbox hosted by OVH.
We keep enquiries for as long as needed to handle them and, if no contract follows, delete them after at most 12 months, unless legal retention duties apply.
5. Recipients and transfers
- Cloudflare, Inc. (hosting, security, statistics, Turnstile). Data may be processed in the USA; Cloudflare is certified under the EU–US Data Privacy Framework and uses standard contractual clauses.
- OVH SAS (server and email hosting, EU).
We do not sell personal data or use it for advertising.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6(1)(f) GDPR. To exercise them, write to the email address above.
You may lodge a complaint with a supervisory authority, in particular the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, or the authority in your country of residence.