Privacy Policy
This policy explains how personal data submitted through the contact form on piotr-capecki.pl is collected, processed, and protected in compliance with Regulation (EU) 2016/679 (GDPR).
Last updated: 16 September 2026
Data Controller
The controller of your personal data is Piotr Capecki, a natural person based in Gdynia, Poland.
Data Collected
When you submit the contact form, the following personal data is collected:
- Name: To address you in correspondence
- Email address: To send a reply to your inquiry
- Message content: The body of your inquiry or request
- Security and delivery metadata: Request, anti-abuse, and delivery status data used to protect and operate the form
The site does not set cookies. Your browser only stores the chosen colour theme locally; this setting is not sent to the server.
Purpose & Legal Basis
Data from the contact form is processed only to respond to your inquiry.
The legal basis is Article 6(1)(f) GDPR: legitimate interest: the controller has a legitimate interest in responding to messages directed to them. Where the inquiry concerns a potential contractual engagement, the additional basis is Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract).
In addition, Cloudflare Web Analytics is used to measure traffic and page performance in aggregate, without cookies, and Cloudflare Turnstile protects the form against spam and abuse. The legal basis for both is Article 6(1)(f) GDPR: the controller's legitimate interest in keeping the site secure and working well.
Retention Period
Your data is retained only for as long as necessary to handle your inquiry and any follow-up communication arising from it, for no longer than 12 months from the date of receipt. After that period it is permanently deleted.
Recipients
Your data is not sold, shared, or disclosed to third parties for marketing purposes. The data may be processed by Cloudflare for hosting, security, Turnstile, and Web Analytics; by Resend, which delivers contact form messages by email; and by the active mailbox provider for correspondence after delivery. These providers act under their applicable data processing terms. Any transfer outside the European Economic Area is subject to the safeguards required by applicable law.
Your Rights
Under GDPR you have the following rights regarding your personal data:
- Right of access (Art. 15): Obtain confirmation of whether your data is processed and receive a copy.
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
- Right to restriction (Art. 18): Request that processing be restricted in certain circumstances.
- Right to portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interest at any time.
To exercise any of these rights, contact the Data Controller at kontakt@piotr-capecki.pl.
Voluntary Nature
Providing your personal data via the contact form is entirely voluntary. However, failure to provide a name and email address will make it impossible to reply to your inquiry.
Contact
For any questions about this Privacy Policy or the processing of your personal data, please contact: kontakt@piotr-capecki.pl.