1. Who controls your data
The controller of your personal data is InPerceptic Adam Walkowski, ul. Partyzantów 51/3, 80-254 Gdańsk, Poland, NIP 9570945825, entered in CEIDG (the Polish Central Register and Information on Economic Activity), e-mail adam.walkowski@inperceptic.com.
InPerceptic is my software architecture consulting practice. This policy covers the website inperceptic.com; the terms of service describe what the site supplies.
2. What I process, why, and for how long
2.1 Your enquiry through the contact form
- Data: your name, e-mail address, company and message (required); your role, the offer you ask about and how you found me (optional); when the enquiry was saved, whether it was sent with or without JavaScript, a random key that stops a resent form from being saved twice, whether the e-mail telling me about it was accepted, and the version of this policy shown under the form when you sent it.
- Purpose and legal basis: to read and answer your enquiry and, when you ask about working together, to take the steps you ask for before a contract (GDPR Art. 6(1)(b)); otherwise my legitimate interest in answering and following up on your message (Art. 6(1)(f)).
- How long: 12 months after I receive it, then deleted automatically. You can ask me to delete it sooner at any time (section 7).
2.2 The notification e-mail
- Data: the content of your enquiry, e-mailed to me through Resend so I see it quickly. Only I receive it; the form never sends mail to the address you type.
- Purpose and legal basis: as for the enquiry (Art. 6(1)(b) and (f)).
- How long: I delete it when the matter is closed, at the latest 12 months after it arrives.
2.3 Analytics
- Data: only if you accept analytics in the cookie banner, Google Analytics records the pages you view, time on the site, device and browser type, approximate region, the site that sent you here, and the fact that an enquiry was saved (never its content). It identifies your browser by a pseudonymous identifier, not by name.
- Purpose and legal basis: to see which pages are read and useful; your consent (Art. 6(1)(a)), which you can withdraw at any time with Cookie settings in the footer.
- How long: Google Analytics keeps user-level and event-level data for 14 months and then deletes it; what remains are aggregated reports that do not identify you.
2.4 Hosting
- Data: your IP address, browser details and the address you request, processed by Google's Firebase Hosting and Cloud Functions to deliver the pages and the form.
- Purpose and legal basis: to deliver the site and keep it secure; my legitimate interest (Art. 6(1)(f)).
- How long: Google states that Firebase Hosting keeps IP data for a few months and that Cloud Functions keeps IP addresses only temporarily, to provide the service. The code of this site stores none of it.
3. My legitimate interests
Where I rely on legitimate interest (Art. 6(1)(f)), the interest is to answer the people who write to me, to follow up on a conversation for up to 12 months, and to deliver the site and keep it secure. You can object to this processing at any time (section 7); I then stop, unless I have compelling legitimate grounds or need the data to establish, exercise or defend a legal claim.
4. Who receives your data
- Google: Firebase Hosting and Cloud Functions deliver the site and receive the form; Cloud Firestore stores enquiries in region europe-west1 (Belgium); Google Analytics measures use of the site after you accept.
- Resend, Inc. (United States): delivers the notification e-mail to me.
Both act as my processors under their data processing terms (GDPR Art. 28). I do not sell your data, do not use it for advertising and do not add you to any mailing list.
5. Transfers outside the European Economic Area
Google and Resend may process data in the United States. Each is certified under the EU-U.S. Data Privacy Framework, which the European Commission found to provide an adequate level of protection on 10 July 2023 (GDPR Art. 45), and their data processing terms also include the Commission's standard contractual clauses (Art. 46(2)(c)).
7. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data deleted (Art. 17)
- restrict how your data is used (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on my legitimate interest (Art. 21)
- withdraw your consent to analytics at any time with Cookie settings; this does not affect what was done before you withdrew it (Art. 7(3))
To use any of these rights, write to adam.walkowski@inperceptic.com. I answer within one month; where a request is complex I may extend this by two further months and tell you why within the first month (Art. 12(3)).
You can also complain to the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
8. Voluntary data and automated decisions
Sending the contact form is voluntary. Without the required fields the form cannot be sent; you can always write to me by e-mail instead. No decision about you is made automatically and no profile of you is built.
9. Changes to this policy
When my data practices change, I update this page, its effective date and its version. Each enquiry records the version of this policy that was shown under the form when it was sent.
10. Contact
For questions about this policy or your data, write to adam.walkowski@inperceptic.com.