Privacy policy

Who is responsible for your data

The data controller is Adam Kramarczyk. For anything related to your data, write to [email protected].

What I collect and why

The contact form gives me your name, email address and the message itself. If you click “Order” next to a service, the message also carries that service's name, the package price and the language you were browsing in.

I use this data for one thing: to reply to your inquiry and prepare an offer or a contract. The legal basis is steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), and my legitimate interest in keeping the correspondence itself (Article 6(1)(f)).

Providing your data is voluntary. Without an email address I simply have no way to reply.

Where your message goes

The form delivers its content through Web3Forms, a form-delivery service run by Web3Creative in India, to my [email protected] mailbox on Zoho Mail. Mail for this domain sits in Zoho's European data centres, in Amsterdam and Dublin. The site itself is hosted by Cloudflare.

Web3Forms runs on infrastructure from Amazon Web Services, Cloudflare and Hetzner, and it covers transfers outside the European Economic Area with Standard Contractual Clauses. The mailbox itself stays in Europe, so for the correspondence no such transfer happens.

Web3Forms filters spam through CleanTalk and Akismet. The IP address and email address of whoever sends the form may reach those two services. Beyond that I pass your data to nobody and I do not sell it.

How long I keep it

Inquiries that never turn into work are deleted no later than a year after the last message. Correspondence tied to a signed contract is kept as long as tax law and claim limitation periods require. In the Web3Forms panel I set submissions to be deleted after a year.

Your rights

You can access your data, correct it, have it deleted, restrict its processing, take it with you or object to it. An email to [email protected] is enough, no forms needed.

If you believe I process your data unlawfully, you can lodge a complaint with the President of the Polish Data Protection Office at uodo.gov.pl.

Cookies, localStorage and the demos

This site sets no cookies and loads no analytics or ad scripts. The only thing it stores in your browser is your language choice (the helbanLang key in localStorage). It is a technical setting: it does not identify you and never leaves your browser.

The demo sites on the subdomains (salon.helban.dev, kalkulator.helban.dev and the rest) carry no trackers either. If you submit a sample form in one of the demos, the message lands in the same inbox under the same rules.

One exception: the payment demo at pay.helban.dev runs on Stripe in test mode, and Stripe sets its own cookies used for payment fraud prevention. All payments there are fictional and no real money moves.

What you won't find here

I do not profile visitors, I make no automated decisions about anyone and I send no newsletter. Any change to this policy will be published on this page with a new date at the top.