Privacy Policy

Effective date: July 18, 2026

1. Data controller

The data controller for personal data collected by hubertzygmunt.pl is Hubert Zygmunt (hereinafter: "Controller"). Contact for data protection matters: kontakt@hubertzygmunt.pl.

The Controller has not appointed a Data Protection Officer - for GDPR matters write to the email above.

2. What data I collect

I only collect data you provide yourself in the contact form on the website:

• email address,
• phone number,
• content of your message (description of the problem / inquiry).

The contact form does not send data to any external server - it opens your email client with a pre-filled message that goes to my mailbox kontakt@hubertzygmunt.pl (hosted by the email provider OVH); I may forward it to my private Google inbox. I do not use an external form processor. The hosting provider (Cloudflare) may log standard technical data (IP address, timestamp) at the server level - solely for security and reliability.

3. Purpose and legal basis for processing

• Handling your inquiry submitted through the contact form - based on your consent (Art. 6(1)(a) GDPR).
• Contact for marketing and sales purposes (offers, cooperation proposals, informational materials) - based on your consent (Art. 6(1)(a) GDPR).
• Preparing and concluding a potential cooperation agreement - Art. 6(1)(b) GDPR (actions on request before contract conclusion).
• Establishing, exercising, and defending potential claims - Art. 6(1)(f) GDPR (legitimate interest).

I do not make automated decisions about you (e.g., profiling).

4. With whom I share your data

I use external providers who process data only to the extent necessary:

• OVH SAS (France) - email provider for the hubertzygmunt.pl domain, where the content of your message arrives.
• Google LLC (USA) - Gmail operator, to which I may forward messages from the above mailbox.
• Cloudflare, Inc. (USA) - website hosting provider (technical maintenance, server logs).

Each of these entities is a data processor within the meaning of Art. 28 GDPR and acts under a data processing agreement.

5. Transferring data outside the European Economic Area

Google (Gmail) and Cloudflare (hosting) store data on servers including in the United States. The transfer is based on the European Commission's adequacy decision under the EU-US Data Privacy Framework (Google and Cloudflare are on the DPF list) and Standard Contractual Clauses (SCC).

6. How long I store your data

• Contact form data - for the period necessary to fulfill the purpose for which it was collected (inquiry handling, sales and marketing contact), no longer than until consent is withdrawn or objection is filed.
• If the inquiry leads to an agreement - for its duration and for 6 years after its termination (tax/accounting obligations and limitation of claims).
• You can request earlier deletion or withdraw consent at any time - see point 7.

7. Your rights

According to GDPR (Art. 15-22) you have the right to:

• access your data and obtain a copy,
• rectification of incorrect or incomplete data,
• erasure of data ("right to be forgotten"),
• restriction of processing,
• object to processing,
• data portability,
• withdraw consent at any time (does not affect the lawfulness of processing before withdrawal),
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland; uodo.gov.pl).

To exercise any right - write to kontakt@hubertzygmunt.pl.

8. Voluntary provision of data

Providing data in the form is entirely voluntary, but without providing your email I will not be able to respond to your inquiry.

9. Cookies and analytics

The hubertzygmunt.pl website uses Cloudflare Web Analytics to collect anonymous, aggregate traffic statistics (number of visits, referral sources, pages viewed). This tool does not use cookies, does not store any information on your device, and does not profile users - the collected data cannot be linked to an individual.

I do not use Google Analytics, Facebook Pixel, or cookie-based tracking tools. Single technical cookies necessary for the proper operation of the site (e.g., the hosting provider Cloudflare's cookies) may be used. These cookies do not require consent under the Polish Electronic Communications Law (Art. 399).

10. Changes to the privacy policy

I may update the policy - e.g., after adding new tools (analytics, newsletter, meeting booking, email marketing system). The current effective date is shown at the top. Significant changes will be announced on the home page.