Privacy policy
Last updated: November 3, 2026
1. Data controller
The controller of your personal data is Adrian Prykiel, a sole trader based in Poland, operating the website adrianprykiel.com (the "Website"). Contact: [email protected], tel. +48 795 567 048. This policy describes how we process personal data in accordance with Regulation (EU) 2016/679 (GDPR).
2. Data we process
We process the following data: • Contact form data: name, email address, phone number and the content of your message. • Correspondence: data you provide when you email or call us. • Technical data: IP address is processed by our hosting and security provider (Cloudflare) for delivering the Website, protecting it against abuse and rate limiting the contact form. • Browser storage: your language, theme and cookie consent choice (see the Cookie policy).
3. Purposes and legal bases
We process your data for the following purposes and on the following legal bases: • Answering your enquiry and preparing an offer – Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) (our legitimate interest in communicating with business contacts). • Performing a contract, if one is concluded – Article 6(1)(b) GDPR. • Accounting and tax obligations – Article 6(1)(c) GDPR. • Securing the Website and preventing abuse – Article 6(1)(f) GDPR. • Establishing, exercising or defending legal claims – Article 6(1)(f) GDPR. Providing data in the contact form is voluntary, but without it we cannot respond to you.
4. Recipients of data
Your data may be shared with providers that help us run the Website, acting as processors: Cloudflare, Inc. (hosting, database and network security), Resend (delivery of contact form notification emails) and our email provider. Data may also be disclosed to accounting service providers and to public authorities where required by law.
5. Transfers outside the EEA
Some providers are based outside the European Economic Area, in particular in the United States. Transfers are protected by safeguards required by GDPR, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
6. Retention
Contact form messages are kept for as long as needed to handle your enquiry and, if no cooperation follows, for up to 24 months afterwards to document the correspondence. Data related to a contract is kept for the duration of the contract and until claims expire; accounting documents for 5 years from the end of the tax year. We delete or anonymise data after those periods.
7. Your rights
You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. To exercise your rights, write to [email protected]. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that would have legal effects on you.
10. Changes to this policy
We may update this policy when our processing changes. The current version is always published on this page together with the date of the last update.