Privacy Policy

This privacy policy explains how I process the personal data of people who visit bartmagera.com and who contact me through it. It follows Regulation (EU) 2016/679 (the GDPR) and the Polish Telecommunications Act of 16 July 2004.

1. Data controller

The controller of your personal data is Bartłomiej Magera, operating under the brand „Bart Magera”, Tax ID (NIP): 9211993735.

For any matter concerning personal data or this policy, contact me at bart@bartmagera.com.

2. What data I process, why, and on what legal basis

a) Contact form

When you send a message through the contact form, I process the data you provide: name, email address, message content, and optionally a website address. Purpose: to respond and handle our correspondence. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (my legitimate interest in communication and handling inquiries).

b) Analytics data

If you consent in the cookie banner, I use Google Analytics 4 to understand, in aggregate, how visitors use the site (page views, traffic sources, approximate location based on a shortened IP address, device type). Legal basis: Art. 6(1)(a) GDPR (your consent) and Art. 173 of the Telecommunications Act for storing information on your device. You can withdraw consent at any time.

c) Server logs

My hosting provider automatically records technical logs (such as IP address, browser type, date and time of the request). Purpose: to keep the site secure and functioning. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in maintaining and protecting the site).

3. Cookies

This site uses cookies and similar technologies. Necessary cookies (including the record of your cookie choice) are always active; analytics cookies run only after you consent. The full list is in the Cookie Policy. You can change your choice at any time via the „Cookie settings” link in the footer.

4. Recipients and processors

I entrust data to trusted service providers who process it on my behalf under data processing agreements (Art. 28 GDPR):

• Vercel Inc. - hosting and delivery of the site;
• Resend (Plus Five Five, Inc.) - sending emails from the contact form;
• Neon Inc. - the database that powers the blog;
• Google Ireland Limited / Google LLC - Google Analytics 4 (only after consent);
• Cloudflare, Inc. - DNS for the domain.

I do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Transfers outside the EEA

Some of these providers (including Vercel, Google, Resend, and Cloudflare) are based in or process data in the United States. Transfers outside the European Economic Area rely on Standard Contractual Clauses approved by the European Commission or on the Data Privacy Framework, which ensure an adequate level of protection.

6. Retention periods

• Contact-form correspondence: for as long as needed to handle the inquiry, then for the limitation period of any potential claims.
• Analytics data: per the Google Analytics 4 settings (by default up to 14 months) or until you withdraw consent.
• Server logs: for the period set by the hosting provider.

7. Your rights

In connection with the processing of your data, you have the right to:

• access your data and obtain a copy of it;
• rectify (correct) your data;
• erase your data (the „right to be forgotten”);
• restrict processing;
• object to processing based on legitimate interest;
• data portability;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to bart@bartmagera.com.

8. Complaint to the supervisory authority

If you believe I process your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

9. Is providing data required

Providing data is voluntary, but a name, email address, and message are necessary for me to reply to an inquiry sent through the contact form.

10. Automated decisions and profiling

I do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.

11. Changes to this policy

I may update this policy when the scope of processing or applicable law changes. The current version is always available on this page, with the last-updated date shown at the top.