Privacy Policy

The controller of your personal data is Karol Dydo, Kielce, Poland. You can reach me at contact@karoldydo.dev. This policy covers the whole karoldydo.dev website: the contact form, analytics and cookies, and the hosting of the site.

When you use the contact form, I process the following data:

• your name, your email address, the subject and the text of your message;
• your confirmation that you have read this policy;
• a hidden anti-spam field, which is empty for real visitors;
• your IP address, which is used to limit how many messages can be sent in a short time.

In addition, the servers that deliver the site keep technical logs of requests, and Google Analytics collects usage data if you allow analytics in the cookie banner (see Cookies below).

I process personal data for the following purposes and on the following legal bases:

• Replying to your message: Art. 6(1)(b) GDPR when your message concerns steps before entering into a contract, and Art. 6(1)(f) GDPR (my legitimate interest in answering the people who write to me) in other cases.
• Security and protection against abuse, such as request rate limiting and server logs: Art. 6(1)(f) GDPR (my legitimate interest in keeping the site secure and available).
• Analytics: Art. 6(1)(a) GDPR (your consent given in the CookieYes banner). You can withdraw it at any time in the banner.

I keep personal data only as long as it is needed:

• Contact form messages: the website does not store your message. It is delivered to my mailbox and kept there for up to 12 months after our last contact, then deleted.
• Server logs: rotated automatically, older entries are overwritten.
• Request rate limit counter: expires after 10 minutes.
• Google Analytics data: kept according to the retention settings of Google Analytics.

I share personal data only with service providers that process it on my behalf or deliver the site to you:

• Resend, which delivers the contact form message by email;
• my email hosting provider, which hosts the mailbox that receives your message;
• OVH, which hosts the servers of the website;
• Cloudflare, which provides the CDN and protects the site traffic;
• Google, which provides Google Analytics, Google Tag Manager and Google Fonts;
• CookieYes, which provides the cookie consent banner;
• imgix, which delivers the images shown on the site.

Some of these providers may transfer data outside the European Economic Area. Such transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses.

You have the right to:

• access to your data;
• rectification of your data;
• erasure of your data;
• restriction of processing;
• data portability;
• objection to processing based on my legitimate interest (Art. 21 GDPR);
• withdrawal of your consent to analytics at any time.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO): uodo.gov.pl (opens in a new tab).

To use any of your rights or to ask a question about this policy, write to me at contact@karoldydo.dev.

The website itself does not set cookies on your device. Cookies are set by Google Analytics (_ga, _ga_*) and by CookieYes (cookieyes-consent). Cloudflare may also set technical cookies that protect the site traffic.

You can change your choice at any time in the CookieYes banner.