Privacy policy and cookies

Who is the administrator

The administrator of your personal data is Andrii Shvets, ul. M. Konopnickiej 19A/24, 62-800 Kalisz, Poland, NIP 6182210254, operating under the brand Amblok.

In any matter concerning your data, write to [email protected].

What data we collect

We collect only what you give us and what the server records automatically:

• Contact form: name, and the contact details you provide — e-mail, phone or messenger handle.
• Optional description of your project and any file you attach.
• Messages you send us by e-mail, phone, WhatsApp or Telegram.
• Technical data recorded when you open a page: the address of the page, browser type, date and time. Your IP address is used only briefly — see “How long we keep it”.
• Cookies — see the section below.

Files you attach may contain other people's data. Please send only what we need to understand the task.

Providing your data is voluntary, but without contact details we cannot answer your enquiry.

Data from other sources

Sometimes we receive your data not from you but from someone else (art. 14 GDPR):

• E-mail: enquiries forwarded to us or sent on your behalf — name, contact details and the content of the message.
• Platforms where we offer our services, such as Upwork or Clutch — name, company, the profile details and messages you share with us there.
• Referrals — name, company and contact details passed on by the person who recommended us.
• Our clients — the work contact details (name, position, e-mail, phone) of their employees and contractors we are to work with.

We use this data for the purposes, on the legal bases and for the periods described below, and you have the same rights, including the right to object. We tell you where your data came from at the latest when we first contact you.

Why we process it

We process your data for these purposes only:

• To answer your enquiry and prepare a proposal — art. 6(1)(b) GDPR (steps before a contract).
• To perform a contract, if we start working together — art. 6(1)(b) GDPR.
• To keep accounting and tax records, if we issue an invoice — art. 6(1)(c) GDPR (legal obligation).
• To contact the people our clients and partners have named as their representatives — art. 6(1)(f) GDPR (our legitimate interest).
• To keep the website secure, limit spam and defend against claims — art. 6(1)(f) GDPR (our legitimate interest).
• To see which pages are read, only if you accept analytics cookies — art. 6(1)(a) GDPR (consent).

Where we rely on our legitimate interest, you may object at any time on grounds relating to your particular situation (art. 21 GDPR). We then stop processing your data unless we show compelling legitimate grounds that override your interests, or need it to establish, exercise or defend legal claims.

We do not make decisions about you by automated means and do not profile you (art. 22 GDPR).

How long we keep it

Enquiries that do not lead to a contract, with any attached files: up to 12 months from the last contact.

Contract-related data: for the term of the contract and for the period required by Polish tax law (currently 5 years from the end of the tax year).

Server logs: the server that receives requests for the site does not record IP addresses, and its logs are deleted within a few days; the application logs do not contain visitors' IP addresses either. IP addresses used to limit form submissions are held in memory for a few minutes and never written to disk.

Data processed on the basis of consent: until you withdraw it, and in any case no longer than the cookie lifetime stated below. Google Analytics keeps the data it collects for 2 months.

Who we share it with

We do not sell data. It may be processed on our behalf, under a data processing agreement (art. 28 GDPR), by:

• Cloudflare, Inc. — the network through which the site is delivered and protected; every visit to the site passes through it.
• Hetzner Online GmbH (Germany) — hosting of this website and of our own CRM, in which enquiries and attached files are stored.
• Google Ireland Limited — our e-mail, which runs on Google Workspace, and, only if you accept analytics cookies, Google Analytics.
• Fakturownia sp. z o.o. — the invoicing service, where an invoice is issued.
• Our accounting office, where an invoice is issued.

If you write to us on WhatsApp or Telegram, those services process your messages as separate administrators under their own privacy policies.

Cloudflare, Inc. is based in the United States, and Google Ireland Limited may pass data to Google LLC in the United States. Data is transferred there on the basis of the European Commission's adequacy decision for the EU-US Data Privacy Framework, in which Cloudflare and Google LLC participate (art. 45 GDPR), and of standard contractual clauses (art. 46 GDPR). We do not transfer data outside the EEA in any other case without informing you here.

Your rights

You have the right to:

• Access your data and receive a copy of it.
• Correct it, delete it or restrict its processing.
• Object to processing based on our legitimate interest (art. 21 GDPR).
• Transfer your data to another administrator.
• Withdraw consent at any time; this does not affect processing carried out before the withdrawal.
• Lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa).

To exercise a right, write to [email protected]. We reply within one month.

Cookies

The site uses cookies of two kinds:

• Necessary — required for the site to work; they cannot be switched off.
• Analytics — used only with your consent, to see which pages are read. You can withdraw consent at any time in the cookie settings or in your browser.

Necessary cookies:

• amblok_consent — remembers your cookie choice; 12 months.
• NEXT_LOCALE — remembers the language, set only when you switch it; 12 months.
• __cf_bm — set by Cloudflare to tell people from bots; 30 minutes.
• cf_clearance — set by Cloudflare only after you pass its security check, so you are not checked again; 30 minutes.

Analytics cookies, set by Google Analytics only after you accept them: _ga — distinguishes visitors; 12 months. _ga_<ID> — keeps the session state; 12 months. Google signals and advertising features are switched off.

Changes to this policy

We update this page whenever the way we handle data changes. The date of the last update is shown at the top, and after an update the cookie banner asks for your choice again.