Privacy Policy

1. Data Controller

The data controller for this website is Max Mendes, a freelance web developer based in Częstochowa, Poland. For any privacy-related inquiries, you may contact the controller via email or phone as listed on the contact page.

2. Data We Collect

We collect the following categories of personal data:

• Contact information (name, email address) submitted through the contact form
• Technical data (IP address, browser type, device information) collected automatically
• Usage data (pages visited, time spent, interactions) via analytics cookies after consent
• Communication records from email correspondence

3. Purpose of Processing

Your personal data is processed for the following purposes:

• To respond to inquiries and communicate about potential projects
• To improve website functionality and user experience
• To analyze website traffic and usage patterns (with consent)
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent: For analytics cookies and marketing communications
• Legitimate interest: For website security, fraud prevention, and service improvement
• Contract: For communication regarding potential or ongoing projects
• Legal obligation: For compliance with applicable laws and regulations

5. Third-Party Recipients

Your data may be shared with the following third-party service providers who assist in operating this website:

• Vercel Inc. (hosting and analytics) — processes technical data for website delivery
• Google LLC (Google Analytics 4) — processes usage data for analytics after consent

These providers act as data processors and are bound by contractual obligations to protect your data in accordance with GDPR requirements.

6. International Data Transfers

Some of our service providers (Vercel, Google) are based in the United States. Data transfers to the US are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable. These mechanisms ensure that your data receives an adequate level of protection as required by GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: 2 years from last communication
• Analytics data: 14 months (Google Analytics default)
• Email correspondence: Duration of business relationship plus 3 years
• Technical logs: 90 days for security purposes

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ('right to be forgotten')
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent for analytics at any time
• Right to restriction: Request limited processing of your data

To exercise any of these rights, please contact us using the information provided on the contact page. We will respond to your request within 30 days.

9. Cookies

This website uses cookies to enhance your browsing experience. Cookies are categorized as follows:

• Essential cookies: Required for basic website functionality (no consent needed)
• Analytics cookies: Used to understand how visitors interact with the website (requires consent)

Analytics cookies are only activated after you provide explicit consent through the cookie banner. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site.

10. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority:

We encourage you to contact us first to resolve any concerns before filing a complaint with the supervisory authority.

11. Automated Decision-Making

This website does not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Analytics data is used solely for aggregate insights about website performance.

12. Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected data from a child, please contact us immediately so we can delete the information.

13. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.

14. Contact Information

For any questions or concerns regarding this Privacy Policy or your personal data, please contact us through the contact page on this website or via email. We aim to respond to all inquiries within 30 days.