Privacy Policy | Bart Barcik

This policy explains how personal data is handled on bbarcik.com and when you contact me about my services. I keep it short: the site collects very little, and nothing is sold or used for advertising.

1. Who is responsible for your data

The controller of your personal data is Bartłomiej Barcik, trading as Bartłomiej Barcik Consulting, Piaseczno, Poland, NIP 1231485268 ("I", "me"). You can reach me about anything in this policy at bart@bbarcik.com. I have not appointed a Data Protection Officer, as the law does not require one for a business of this size.

2. What data I process, why, and on what legal basis

What happens	Data	Purpose	Legal basis (GDPR)	How long I keep it
You send the contact form or email me	Name, email, company, anything you write	To reply and discuss a possible project	Art. 6(1)(b), steps taken at your request before a contract; Art. 6(1)(f), my legitimate interest in answering business enquiries	Up to 3 years after our last contact, unless we start working together
You sign up for new articles by email	Email address	To email you when a new article is published	Art. 6(1)(a), your consent	Until you unsubscribe or withdraw consent
We work together	Contact details of you and your team, project correspondence	To deliver the engagement and manage the contract	Art. 6(1)(b), performance of a contract	For the contract, then up to 3 years for possible claims
Invoicing and accounting	Billing details	To meet tax and accounting duties	Art. 6(1)(c), legal obligation	5 years from the end of the tax year, as Polish tax law requires
You visit the site	Technical data such as IP address and browser type, handled by the hosting provider	To deliver the site securely and count visits	Art. 6(1)(f), my legitimate interest in a working, secure site	Visit statistics are anonymised; security and request logs are kept by Cloudflare as described in its policies
A dispute arises	Data needed for the claim	To establish, exercise or defend legal claims	Art. 6(1)(f), legitimate interest	Until the claim is resolved or time-barred

Giving me your data is voluntary. Without an email address I can't reply to you or send you new articles.

3. Website analytics

The site uses Cloudflare Web Analytics. According to Cloudflare, it does not use cookies or fingerprinting and does not track individual visitors across sites. I can see how many people visited and which pages they viewed, but not who you are.

The contact and sign-up forms are protected against spam by Cloudflare Turnstile, which checks that a form is sent by a person rather than a bot.

4. Cookies

The site does not set advertising or tracking cookies. If that changes, I'll ask for your consent first through a cookie banner and update this policy.

5. Email marketing

I only email you about new articles if you signed up for them. Every email has a way to unsubscribe, or you can write to bart@bbarcik.com. I don't send unsolicited marketing.

6. Who receives your data

I don't sell or rent personal data. I use a small number of service providers who process data on my behalf, under data processing agreements:

Cloudflare, Inc. (United States): website hosting, security, spam protection for forms and analytics
Resend (United States): delivery of contact form and sign-up messages to my inbox
Google Workspace (Google Ireland Limited, Dublin, Ireland): email
inFakt (Poland): accounting and invoicing

I may also share data with public authorities when the law requires it.

7. Transfers outside the EEA

Cloudflare and Resend are based in the United States, and Google may also process email data outside the EEA. Such transfers rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission's standard contractual clauses. You can ask me for more information about these safeguards.

8. Your rights

Under the GDPR you have the right to:

access your data and get a copy
have it corrected
have it deleted
restrict its processing
data portability
object to processing based on my legitimate interest
withdraw consent at any time, without affecting processing done before you withdrew it

To use any of these rights, email bart@bbarcik.com. I'll reply within one month.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or with the authority in the EU country where you live or work.

9. Automated decisions

I don't make decisions about you based solely on automated processing, and I don't profile visitors.

10. Links to other sites

The site links to other websites, such as LinkedIn. Their own privacy policies apply when you visit them.

11. Changes to this policy

I'll update this policy when the way I handle data changes. The date at the top shows the latest version.