Privacy policy

Last updated: 2026-09-27

This page explains what personal data I collect on twoloszyn.eu, why, for how long, and what rights you have. I follow the GDPR, Regulation (EU) 2016/679 of the European Parliament and of the Council.

1. Data controller

The controller of your personal data is Tomek Wołoszyn, ul. Grodeckiego 8c, 44-105 Gliwice, NIP 6312404041, who runs twoloszyn.eu. For anything related to your data, write to the contact form.

2. Contact form

When you send the contact form, I process the data you provide:

• your name,
• your e-mail address,
• the type of project you selected,
• the message and anything you include in it.

Purpose and legal basis. I use this data to reply to your message and, if you ask for it, to prepare an offer or a quote. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and otherwise my legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).

Voluntary. Providing the data is voluntary, but without a name, an e-mail address and a message I cannot reply.

How it works. The form does not store your data in any database. Your message is delivered by e-mail to my inbox. To block spam, the server keeps a one-way hash of your IP address and the time of sending for one hour. After that the entry is deleted automatically the next time the form is used.

How long. I keep correspondence for as long as it is ongoing and, if we do not end up working together, no longer than 12 months after the last message. If we sign a contract, I keep the data for its duration and then for the period required by tax law and until any claims become time-barred.

3. Who receives the data

I do not sell your data or share it for marketing. Only the companies that run the site and e-mail on my behalf have access to it:

• seohost.pl, which hosts the website and the mailbox (servers in Poland),
• Google (Google Fonts), which serves the typefaces. Google receives your IP address in the process,
• Vimeo, if you open a case study with an embedded video. The player runs in "do not track" mode.

Google and Vimeo may process data outside the European Economic Area, including in the US, based on standard contractual clauses or the EU-US Data Privacy Framework.

4. Server logs and cookies

Like any server, the hosting keeps basic visit logs (IP address, time, page address, browser). They are used for security and troubleshooting, not for tracking visitors. This site does not use analytics, advertising tools or its own cookies.

5. Your rights

You have the right to:

• access your data and receive a copy,
• have your data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on legitimate interest.

To use any of them, write to the contact form. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

6. Automated decisions

I do not make automated decisions about you and do not profile you.