Informacje prawne
This Privacy Policy explains how jc-webstudio.pl (operated by JC WebStudio / Jakub Czechowski) processes information about you – including personal data and cookies.
1. Data controller
Jakub Czechowski
JC WebStudio
Email: info@jc-webstudio.pl
Phone: +48 602 296 754
For privacy-related requests, contact info@jc-webstudio.pl.
No Data Protection Officer (DPO) has been appointed.
2. What data we collect
- Contact form – name, company (optional), email, phone (optional), project description, deadline (optional), selected project type. You provide this voluntarily; we need it to respond.
- Email / phone correspondence – whatever you choose to share in the message.
- Server logs – IP address, timestamp, browser headers, requested URL. Generated automatically on each request.
- Analytics – aggregated, non-personal traffic statistics (Cloudflare Web Analytics). No ad profiling.
- Cookies and localStorage – see Cookies.
The site has no visitor login – we do not collect user passwords.
3. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Reply to contact form / email | Art. 6(1)(b) GDPR (pre-contract steps) or (f) (legitimate interest – correspondence) |
| Contract delivery | Art. 6(1)(b) GDPR |
| Security, abuse prevention (Turnstile, logs) | Art. 6(1)(f) GDPR |
| Aggregated traffic analytics | Art. 6(1)(f) GDPR |
| Necessary mechanisms and local storage of the cookie/privacy panel closure | Art. 6(1)(f) GDPR (legitimate interest – security, proper operation and UX of the site) |
4. Recipients
Data may be shared with processors strictly as needed:
| Provider | Role |
|---|---|
| Cloudflare, Inc. | Static hosting (Cloudflare Pages), CDN, security, Web Analytics |
| Resend, Inc. | Transactional email from the contact form |
| Cloudflare Turnstile | Anti-spam verification (no ad tracking) |
| cyber_folks S.A. | Mailbox info@jc-webstudio.pl (receive / store email) |
We do not sell personal data.
5. Transfers outside the EEA
Some infrastructure providers are based in the United States or may use infrastructure outside the European Economic Area. This mainly applies to Cloudflare, Inc. and Resend, Inc.
Where personal data is transferred outside the EEA, the transfer is based on safeguards required by the GDPR – in particular an adequacy decision (for example the EU-US Data Privacy Framework, where applicable to the provider) or Standard Contractual Clauses. You can request more information about these safeguards at info@jc-webstudio.pl.
6. Hosting and infrastructure
The site runs on Cloudflare Pages (edge CDN, TLS). The contact form sends mail via Resend; spam protection via Cloudflare Turnstile. Mailbox info@jc-webstudio.pl is hosted at cyber_folks.
All connections use HTTPS.
7. Contact form
Form data is used only to:
- answer your inquiry,
- prepare a quote or proposal,
- continue a business conversation.
No newsletter use without separate consent. Only include data you are comfortable sharing.
Providing data in the form is voluntary, but required fields are necessary to handle your inquiry. Without your name, email address, message and confirmation that you have read the privacy information, the form will not be sent. Optional data (company, phone, timeline) helps us respond more precisely but is not required.
8. No profiling or automated decisions
We do not make decisions about users based solely on automated processing, including profiling, that would produce legal effects or similarly significant effects.
Cloudflare Turnstile may automatically assess technical browser signals to protect the form against spam and abuse. This is used only for form security.
9. Retention
- Business correspondence – up to 3 years from last contact, or longer if required by tax / accounting law.
- Contract data – for the contract term plus statutory archive periods.
- Technical logs – per provider policy (typically days to weeks).
- Cookie/privacy panel choice – until cleared in the browser.
10. Your rights
You may request access, rectification, erasure, restriction, portability, object to processing based on Art. 6(1)(f) GDPR, and withdraw consent at any time (without affecting prior lawful processing).
You may lodge a complaint with your supervisory authority. In Poland: UODO (uodo.gov.pl).
Send requests to info@jc-webstudio.pl.
11. Analytics
We use Cloudflare Web Analytics – a privacy-oriented tool. It sets no cookies and stores nothing in your browser, does not profile users and needs no consent – it only collects aggregated, non-personal traffic statistics. No Google Analytics, no Google Tag Manager, no session replay / heatmap tools.
12. Cookies
Cookies are small browser files. localStorage is used to remember that the cookie/privacy panel was closed.
What we use
| Name / type | Purpose | Duration | Basis |
|---|---|---|---|
cookieConsent (localStorage) | Remember that the cookie/privacy panel was closed | Until cleared | Legitimate interest (UX, avoiding repeated notices) |
| Cloudflare / Turnstile | Form security, bot protection | Session / short | Legitimate interest / necessary |
| Cloudflare Web Analytics | Aggregated visit stats (no cookies) | – | Legitimate interest |
Cloudflare Web Analytics sets no cookies – it is listed above for transparency only. No ad or cross-site tracking cookies.
Cookie/privacy panel
On first visit, we show a panel explaining that we do not use advertising cookies, do not use cross-site tracking and use cookieless Cloudflare Web Analytics. Clicking “Got it” stores a local localStorage entry that the panel was closed. This entry is not used to track you.
Browser controls
13. Changes
We may update this policy when the tech stack or law changes. Last updated: 30 May 2026. Current version: /en/privacy-policy/.