Privacy policy

The controller of personal data is CzerCode Szymon Czermak, tax ID (NIP) 6282304730, a sole trader registered in Poland.

For any data protection matter, contact: czercode@gmail.com.

When you submit the form you provide: company name or your name, an email address, the message content and the selected enquiry category. We use them solely to answer your enquiry and, where relevant, prepare a quote.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in handling correspondence). Providing the data is voluntary, but without an email address we have no way to reply.

The form is handled by FormSubmit (formsubmit.co), a third-party service that relays the message to our mailbox. This means the form content passes through that provider's servers.

We use Google Analytics 4 to see which content is useful and how the site performs. The statistics are aggregated and are not used to identify individuals.

Legal basis: Art. 6(1)(a) GDPR — your consent. Without consent, analytics does not run at all: every consent signal (analytics and advertising) defaults to denied before the Google script can execute. We do not request advertising consent at all — we run no campaigns.

The site is hosted by Vercel Inc. The hosting provider records standard logs (including IP address, request time, browser type), which is necessary to serve and secure the site. Legal basis: Art. 6(1)(f) GDPR.

The site sets no cookies of its own. We store a single value in local browser storage — your analytics consent decision (key czercode-analytics-consent). It is never transmitted anywhere and exists only so we do not ask you on every visit.

Once consent is given, Google Analytics sets its own cookies (_ga, _ga_*). Without consent they are never created.

Fonts are self-hosted — browsing the site triggers no requests to Google Fonts.

• FormSubmit (formsubmit.co) — contact form relay
• Google Ireland Ltd. / Google LLC — statistics, only after consent
• Vercel Inc. — site hosting

Some of these providers process data in the United States. Transfers rely on the European Commission adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses.

Contact form correspondence is kept for 24 months from the last contact and then deleted. Google Analytics data is retained according to the service settings, for a maximum of 14 months.

You have the right to access your data, rectify it, erase it, restrict processing, port it, and object to processing based on legitimate interest. You may withdraw analytics consent at any time — withdrawal does not affect the lawfulness of processing carried out beforehand.

You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw).

You can withdraw analytics consent with one click. The banner will appear again and you can choose differently.