1. Controller
The controller of personal data of marcinmatla.pl users, including the form available at formularz-www.marcinmatla.pl, is Marcin Matla, email: kontakt@marcinmatla.pl, phone: +48 732 964 400 (“Controller”).
2. Data processed and purpose
The Controller may process:
- data provided in an email, conversation or other contact to answer an enquiry, prepare an offer and take steps before a contract, or for the legitimate interest of correspondence;
- name, email address and responses sent through the brief form to answer, prepare a project or offer and take steps before a contract; name and email are required to handle the form, other data is optional;
- payment data, in particular amount, service name, name or company name, email, payment description and transaction status, to perform the contract, settle payment, meet tax and accounting obligations, and pursue or defend claims;
- technical data, including IP address, session identifier, device and browser type, visited address, referring page, approximate country, language and service-operation information, to ensure security and correct operation; analytics data and optional technologies are processed on consent.
Data are not used for decisions producing legal effects based solely on automated processing.
3. Data recipients
Data may be transferred to providers of hosting, security, email, form handling, database and analytics services (in the current configuration, including Cloudflare, Lovable/Tinybird and Supabase), the HotPay payment operator, accounting providers, legal advisers or public authorities — only where necessary and lawful.
Some providers may process data outside the European Economic Area. In that case data are transferred under an appropriate European Commission decision, standard contractual clauses or another mechanism permitted by GDPR.
4. Retention period
Enquiry and brief data are retained for the time necessary to handle the matter and then until the expiry of potential claims. Contract and settlement data are retained for periods required by tax and accounting law. Consent-based data are retained until consent is withdrawn or the purpose ends. Security data and logs are retained as necessary to protect the service. Analytics data are retained for one year.
5. Your rights
In cases set out in GDPR, you have the right to access, rectify, erase, restrict processing of and port your data, object to processing, and withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing. Send requests to kontakt@marcinmatla.pl. You may also lodge a complaint with the relevant supervisory authority.
6. Cookies and similar technologies
The service uses technologies necessary for security and operation, in particular Cloudflare’s __cf_bm cookie (bot protection, usually around 30 minutes), plus browser storage for language and session state.
After consent, the service may use an analytics session-id cookie (around 30 minutes) and Lovable/Tinybird tools measuring page views and operating parameters. You can change or withdraw consent at any time through “Cookie settings”. Refusal does not affect access to core functions. You can also delete or block data in browser settings.
After moving to HotPay payment, that provider may use its own cookies under its policy. The brief form loads fonts from Google servers, which transfers technical data such as IP address to Google.
7. Policy changes
This policy may be updated if law, service functions or providers change. The current version is published on the website together with its effective date.