Privacy Policy

Last Updated: November 24, 2024

1. Introduction

This Privacy Policy explains how Piotr Sikora ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website piotr-sikora.com (the "Website").

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Name: Piotr Sikora

Email: piotr.sikora.ck@gmail.com

3. What Data We Collect

We collect the following types of data:

3.1 Automatically Collected Data

• Analytics Data: When you consent to analytics cookies, we collect data through Google Analytics including:
  • Pages visited and time spent on pages
  • Browser type and version
  • Device type and screen resolution
  • Geographic location (country/city level)
  • Referral source
  • IP address (anonymized)
• Essential Cookies: Session cookies necessary for the website to function properly

3.2 Data You Provide

• Contact Forms: If you contact us through forms on our website, we collect your name, email address, and message content
• Newsletter: If you subscribe to our newsletter, we collect your email address

4. How We Use Your Data

We use your data for the following purposes:

• Website Analytics: To understand how visitors use our website and improve user experience (with your consent)
• Communication: To respond to your inquiries and provide customer support
• Marketing: To send you newsletters and updates (only with your explicit consent)
• Legal Compliance: To comply with legal obligations and protect our rights

5. Legal Basis for Processing

We process your personal data based on:

• Consent: For analytics cookies and marketing communications (GDPR Article 6(1)(a))
• Legitimate Interest: For essential website functionality and security (GDPR Article 6(1)(f))
• Legal Obligation: When required by law (GDPR Article 6(1)(c))

6. Cookies We Use

6.1 Essential Cookies

These cookies are necessary for the website to function and cannot be disabled:

• cookie_consent: Stores your cookie preferences (stored in localStorage)

6.2 Analytics Cookies (Requires Consent)

We use Google Analytics to understand how visitors use our website:

• _ga: Distinguishes users (expires after 2 years)
• _ga_*: Stores session information (expires after 2 years)

6.3 Managing Cookies

You can manage your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website. You can also disable cookies through your browser settings, though this may affect website functionality.

7. Data Sharing and Third Parties

We share your data with the following third parties:

• Google Analytics: For website analytics (only with your consent). Google's privacy policy: https://policies.google.com/privacy
• Vercel: Our hosting provider for website infrastructure

We do not sell your personal data to third parties.

8. Data Retention

• Analytics Data: Retained for 26 months (Google Analytics default)
• Contact Form Data: Retained for as long as necessary to respond to your inquiry
• Cookie Consent: Stored until you clear your browser data or withdraw consent

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw your consent at any time

To exercise any of these rights, please contact us at [YOUR EMAIL - UPDATE THIS].

10. Right to Complain

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

For Poland: Urząd Ochrony Danych Osobowych (UODO) - https://uodo.gov.pl

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure
• Regular security updates and monitoring
• Access controls and authentication

12. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (Google Analytics, Vercel). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

13. Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: piotr.sikora.ck@gmail.com
Website: https://www.piotr-sikora.com