Privacy policy
Data controller
The controller of your personal data is MCONSIT Michał Chłopczyński, tax ID (NIP) 836 166 59 43, a sole proprietorship registered in the Polish CEIDG business register. Contact on personal data matters: via the contact form on this site.
What we collect
Through the contact form we collect your name, email address, selected topic and message. We do not use cookies for marketing or analytics. The server keeps standard technical logs (including IP address, time and requested URL) needed for security and troubleshooting.
Purpose and legal basis
We process the data only to reply to your message and continue the correspondence, based on your consent (Art. 6(1)(a) GDPR) and our legitimate interest (Art. 6(1)(f) GDPR), which is handling enquiries, keeping the site secure, preventing abuse and establishing or defending legal claims. Providing the data is voluntary but necessary to send the message.
Recipients
We entrust data to providers that run the site and email: Resend (delivering form messages), Google (the Gmail mailbox that receives them), Mikr.us (hosting of the server running the site) and Cloudflare (form protection). We do not sell data or pass it to anyone else unless the law requires it.
Transfers outside the EEA
Some providers (Resend, Google, Cloudflare) may process data outside the European Economic Area, in particular in the USA. This is done under the mechanisms provided by the GDPR, such as the Data Privacy Framework or standard contractual clauses.
Spam protection
The form is protected by Cloudflare Turnstile, a service of Cloudflare, Inc. During verification Cloudflare may process your IP address and basic browser information. Details: cloudflare.com/privacypolicy.
Retention
We keep messages for as long as needed to handle the enquiry, no longer than 2 years after the last contact, unless a contract is concluded. In that case we may keep part of the data longer where required by law (e.g. tax rules) or needed to establish or defend legal claims. Server logs are kept for 30 days. Mailbox backups expire according to the provider's settings.
Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing based on our legitimate interest, and to withdraw consent at any time (without affecting the lawfulness of earlier processing). You may also lodge a complaint with the supervisory authority (UODO in Poland). To exercise your rights, write to us via the contact form, preferably from the email address you used before; we may ask you to confirm your identity. We will reply within one month. After an erasure request we delete our correspondence with you, unless the law requires or allows us to keep part of the data, in which case we will tell you.