Skip to content
Let’s talk

Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains how personal data is processed in connection with the website swirydowicz.dev, hereinafter referred to as the “Website”.

The Website is operated from Poland and personal data is processed in accordance with applicable European Union data protection law, in particular Regulation (EU) 2016/679 (“GDPR”), as well as applicable Polish law.

1. Data Controller

The controller of personal data processed in connection with the Website is:

Marek Świrydowicz
email: hello@swirydowicz.dev

If you have any questions regarding the processing of your personal data or wish to exercise your rights under the GDPR, you may contact me using the email address above.

2. Personal data that may be processed

Depending on how you use the Website, the following categories of data may be processed:

  • information submitted through the contact form,
  • first and last name,
  • email address,
  • company name,
  • website address,
  • information concerning the type of service requested,
  • budget and expected project timeframe,
  • the content of your message and any other information voluntarily provided,
  • IP address,
  • information about your device and browser,
  • information contained in server logs,
  • information connected with cookies and similar technologies,
  • analytics data concerning the use of the Website, where analytics tools have been enabled and the required consent has been obtained.

Please do not submit special categories of personal data, such as information concerning health, political opinions, religious beliefs or other sensitive information, through the contact form unless it is strictly necessary.

3. Contact form and email correspondence

If you contact me through the contact form or by email, the information you provide is processed in order to respond to your enquiry and conduct further correspondence.

Where your enquiry concerns potential cooperation, a quotation or the provision of services, the legal basis for processing is Article 6(1)(b) GDPR, meaning processing necessary to take steps at your request prior to entering into a contract.

In other cases, the legal basis may be Article 6(1)(f) GDPR, namely my legitimate interest in handling correspondence, responding to enquiries and communicating with people who contact me.

Where an enquiry does not lead to cooperation, correspondence and related personal data may generally be retained for up to 12 months after the correspondence has ended, unless earlier deletion is required or longer retention is justified for the establishment, exercise or defence of legal claims.

If a contract is entered into, relevant data may be retained for the period necessary to perform the contract, comply with legal obligations and establish, exercise or defend legal claims.

Providing personal data through the contact form is voluntary. However, providing sufficient contact information is necessary for me to respond to your enquiry.

4. Server logs and Website security

When you use the Website, certain technical information may automatically be recorded in server logs.

This may include:

  • IP address,
  • date and time of the request,
  • requested resource,
  • browser and operating system information,
  • server response code,
  • technical information relating to the request.

This information is used primarily to operate the Website, maintain its security, diagnose errors and detect or investigate attempted abuse or attacks.

The legal basis for processing personal data for these purposes is Article 6(1)(f) GDPR, namely the legitimate interest in maintaining the security and proper operation of the Website.

Server logs are retained in accordance with the technical configuration and retention policies of the hosting provider and for as long as reasonably necessary for security purposes. Relevant information may be retained for longer where necessary to investigate a security incident or establish, exercise or defend legal claims.

5. Cookies and similar technologies

The Website may use cookies and similar technologies to store information on your device or access information already stored on it.

These technologies may be used for purposes such as:

  • ensuring the proper functioning of the Website,
  • maintaining Website security,
  • remembering your cookie preferences,
  • remembering the language selected by you,
  • remembering Website display preferences,
  • measuring and analysing Website usage.

Technologies that are strictly necessary to provide a service explicitly requested by you or to transmit communications may be used without additional consent where permitted by applicable law.

Optional cookies, including analytics cookies, are activated only after obtaining the required consent.

Detailed information is available in the Cookie Policy.

6. Google Analytics 4

This section applies once Google Analytics 4 has been enabled on the Website.

The Website may use Google Analytics 4, a website analytics service provided in the European Economic Area by Google Ireland Limited.

Google Analytics may be used to understand how visitors use the Website and to prepare aggregate usage statistics.

Google Analytics is activated for a user only after consent to analytics cookies has been provided.

The legal basis for the processing carried out by the controller for this purpose is Article 6(1)(a) GDPR.

You may withdraw your consent at any time through the cookie settings available on the Website.

Google Analytics may process information such as:

  • pages visited,
  • interactions with Website content,
  • approximate duration of visits,
  • device type,
  • browser and operating system,
  • traffic source,
  • approximate location derived from technical information.

Google operates global technical infrastructure and data may, in certain circumstances, be processed outside the European Economic Area.

Where personal data is transferred outside the EEA, such transfers must be based on a mechanism permitted under Chapter V GDPR, such as an applicable adequacy decision or appropriate safeguards.

7. Google Search Console

The Website may use Google Search Console to monitor its visibility in Google search results, identify technical issues and analyse information relating to search traffic.

The use of Google Search Console by the Website administrator does not itself require the Website to place additional analytics cookies on a visitor’s device.

8. Recipients of personal data

Personal data may be disclosed to service providers used to operate and maintain the Website, but only to the extent necessary for the relevant purpose.

Such recipients may include:

  • hosting providers,
  • email service providers,
  • IT infrastructure and maintenance providers,
  • Website security service providers,
  • Google Ireland Limited where Google Analytics is used following the required consent,
  • legal, accounting or professional advisers where necessary,
  • public authorities where disclosure is required by applicable law.

Service providers processing personal data on my behalf may process it only on an appropriate legal basis and within the scope necessary to provide the relevant service.

9. Transfers outside the European Economic Area

As a general rule, I seek to use services that process data within the European Economic Area.

However, some global service providers may process data outside the EEA.

Where personal data is transferred to a third country, the transfer is carried out using a mechanism permitted under Chapter V GDPR, including, where applicable:

  • a European Commission adequacy decision,
  • Standard Contractual Clauses approved by the European Commission,
  • another lawful transfer mechanism provided for under the GDPR.

10. Your rights

Depending on the circumstances and legal basis for processing, you may have the following rights under the GDPR:

  • the right of access to your personal data,
  • the right to obtain a copy of your personal data,
  • the right to rectification,
  • the right to erasure,
  • the right to restriction of processing,
  • the right to data portability where applicable,
  • the right to object to processing based on Article 6(1)(f) GDPR,
  • the right to withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

To exercise your rights, contact:

hello@swirydowicz.dev

You also have the right to lodge a complaint with a competent data protection supervisory authority.

Because the controller is established in Poland, the Polish supervisory authority is:

President of the Personal Data Protection Office
(Prezes Urzędu Ochrony Danych Osobowych – UODO).

Where permitted under the GDPR, you may also contact the competent supervisory authority in the EU or EEA country of your habitual residence, place of work or place of the alleged infringement.

11. Automated decision-making and profiling

Personal data collected directly through the Website is not used by me to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Analytics tools may be used to understand aggregate Website usage, but I do not use them to make such automated decisions about individual visitors.

12. External links

The Website may contain links to third-party websites, including social media platforms such as LinkedIn.

When you follow an external link, the operator of the external website may process your personal data in accordance with its own privacy policy.

A standard external hyperlink does not itself mean that swirydowicz.dev transfers your personal data to the linked website before you follow that link.

13. Security

Appropriate technical and organisational measures are used to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

The Website uses encrypted HTTPS connections.

Access to systems containing personal data is limited to persons and service providers who require such access for legitimate purposes.

14. Cookie preferences

You may change or withdraw your consent to optional cookies at any time through the Cookie Settings available on the Website.

You may also manage or delete cookies through your browser settings.

Blocking cookies that are strictly necessary may cause some parts of the Website to stop functioning correctly.

15. Changes to this Privacy Policy

This Privacy Policy may be updated where necessary, including as a result of:

  • changes in applicable law,
  • changes to the Website,
  • implementation of new analytics or third-party services,
  • changes to service providers,
  • changes to the way personal data is processed.

The current version of this Privacy Policy will always be published on the Website together with the date of the most recent update.