Contact

Privacy policy

Effective from 28 September 2026

This policy explains what personal data I process in connection with the website jakubsiusta.pl, why, for how long and what rights you have. The Polish version of this policy is the binding one.

1. Data controller

The controller of your personal data is Jakub Siusta, running a sole proprietorship under the name Media Internetowe Jakub Siusta, Bartoszewo 2B, 72-004 Tanowo, Poland, VAT ID (NIP) 8513011510.

For any data protection matters, write to kontakt@jakubsiusta.pl or to the postal address above. I have not appointed a data protection officer, as I am not required to do so.

2. What data I process and why

Contact form, e-mail and enquiries

When you contact me through the contact form or by e-mail, I process the data you provide – in the form: your name, e-mail address, the service and your message, and optionally your company, budget and deadline. Messages from the form are delivered to my mailbox and are not stored in the website database.

  • purpose: replying to your message and preparing an offer – legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) or my legitimate interest in handling correspondence (Art. 6(1)(f) GDPR);
  • period: until the correspondence ends and then for the limitation period of possible claims, no longer than 3 years – unless we sign a contract.

Client projects

  • purpose: concluding and performing a contract – Art. 6(1)(b) GDPR;
  • purpose: accounting and tax obligations – Art. 6(1)(c) GDPR;
  • purpose: establishing or defending claims – Art. 6(1)(f) GDPR;
  • period: for the duration of the contract and then as required by tax law (5 years from the end of the year in which the tax obligation arose) and the limitation period of claims.

Website statistics (Google Analytics)

With your consent I use Google Analytics to see which pages are visited, where visitors come from and how the website performs. Data is collected with cookies and similar technologies (see section 3).

  • purpose: statistics and improving the website – legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with Art. 399 of the Polish Electronic Communications Law);
  • period: until you withdraw consent, no longer than the data retention period set in Google Analytics (maximum 14 months).

Without your consent Google Analytics does not store cookies on your device. You can withdraw consent at any time in the cookie settings on the website; withdrawal does not affect the lawfulness of processing before it.

Website operation and security

To protect the contact form against spam, the website stores a one-way hash of your IP address together with the number of messages sent for one hour – the address cannot be read from it. The form does not use reCAPTCHA or other third-party services.

The web server automatically records basic connection data in log files: IP address, date and time, the requested page and browser type. This is my legitimate interest in keeping the website running and secure (Art. 6(1)(f) GDPR). Logs are kept for a short time and are not used to identify visitors.

3. Cookies

  • necessary – required for the website to work and to remember your cookie choice; no consent needed;
  • statistics – Google Analytics (cookies starting with _ga); stored only after you consent.

On your first visit you will see a window asking for consent. You can change your choice later in the cookie settings on the website, or delete and block cookies in your browser. The website does not use advertising cookies or fonts loaded from external servers.

YouTube videos

The portfolio shows videos hosted on YouTube (Google). The player loads only after you click a video – before that only the thumbnail image is downloaded from YouTube servers, which means your IP address is sent to Google. After clicking, the video plays in privacy-enhanced mode (youtube-nocookie.com) and YouTube may set its own cookies in line with the Google Privacy Policy.

4. Recipients of data

  • hosting and e-mail providers – storing the website files and messages;
  • Google Ireland Limited – Google Analytics (only with your consent);
  • an accounting office or invoicing software – for clients;
  • public authorities – where required by law.

I do not sell data or share it for marketing purposes.

5. Transfers outside the European Economic Area

Google Analytics may transfer data to Google LLC in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, under which the European Commission has recognised an adequate level of data protection.

6. Your rights

  • access to your data and a copy of it,
  • rectification,
  • erasure (“right to be forgotten”),
  • restriction of processing,
  • data portability,
  • objection to processing based on legitimate interest,
  • withdrawal of consent at any time, without affecting earlier processing.

To exercise these rights, write to kontakt@jakubsiusta.pl. I will reply without undue delay and within one month at the latest. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa).

7. Is providing data mandatory?

Providing data is voluntary, but without an e-mail address I cannot reply to your message, and without invoicing details I cannot perform and settle a contract.

8. Automated decision-making

I do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

9. Changes to this policy

This policy may change, for example when new features are added to the website. The current version is always available on this page.