Privacy

    Privacy Policy

    The short version: this site collects almost nothing. Analytics are off until you say otherwise, and the only data I hold is what you deliberately send me.

    Who is responsible for your data

    Michał Krzyżanowski is the controller of personal data collected through this website. For any question about your data, or to exercise any of the rights described below, write to michal.krzyzanowski@wp.pl.

    What this site collects, and why

    There are three cases. Outside of them, this site collects nothing about you.

    1. Contact form

    When you use the contact form, the name, email address, company (optional) and message you type are sent to me by email so I can reply. Legal basis: your consent and my legitimate interest in responding to enquiries (Art. 6(1)(a) and 6(1)(f) GDPR). Nothing is added to a mailing list.

    2. AI maturity assessment

    The assessment runs entirely in your browser. Your answers and scores are not transmitted anywhere unless you explicitly submit them together with your email address to receive recommendations. If you do, I use them to prepare and send you that response, on the basis of your consent (Art. 6(1)(a) GDPR).

    3. Analytics

    I use Google Analytics 4 to see which pages people find useful. It is switched off by default: no analytics cookies are written and no measurement takes place unless you accept in the consent banner (Art. 6(1)(a) GDPR). IP addresses are anonymised. Declining costs you nothing, the site works identically.

    Who processes data on my behalf

    I keep the stack deliberately small. These providers process data as part of running the site:

    • →Lovable — website hosting and delivery
    • →Supabase — serverless functions that handle form submissions
    • →Resend — email delivery for form notifications and replies
    • →Google (Analytics 4) — usage statistics, only after you consent

    Some of these providers operate outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. I do not sell your data, and I do not share it for advertising.

    How long data is kept

    Correspondence, including contact form messages and assessment results you send me, is kept for as long as it is useful for our conversation or an ongoing engagement, and no longer than three years after our last contact, unless a longer period is required for accounting or legal reasons. Analytics data is retained according to the Google Analytics 4 default retention period. You can ask me to delete your data sooner at any time.

    Your rights

    Under the GDPR you can ask me to: confirm what data I hold about you and give you a copy, correct it, delete it, restrict how I use it, or provide it in a portable format. Where processing is based on consent, you can withdraw that consent at any time, which does not affect processing that already happened.

    Write to michal.krzyzanowski@wp.pl and I will respond within one month. If you believe I have handled your data improperly, you have the right to complain to a supervisory authority; in Poland that is the President of the Personal Data Protection Office (UODO).

    Cookies and local storage

    This site sets no cookies of its own. Two things are stored locally in your browser:

    • →Your analytics choice, so you are not asked on every visit. This is stored in your browser's local storage, not sent anywhere.
    • →Google Analytics cookies, but only after you accept. To change your mind, clear this site's data in your browser settings and the banner will reappear.

    Changes to this policy

    If what this site does with data changes, this page changes with it, and the date below is updated. Material changes to how existing data is used will be communicated directly where I have a way to reach you.

    Last updated: 30 July 2026

    Questions about any of this? Get in touch