1. Data controller
The controller of personal data provided through the StaryKoduje website is Andrzej Ząbczyk, StaryKoduje. For privacy enquiries, contact kontakt@starykoduje.pl.
2. Contact form and configurator
The form may collect your name, email address, optional phone number, subject and message, and — if you use the configurator — your chosen project scope and indicative configuration.
The data is used solely to handle your enquiry, prepare a response or offer, discuss the project and, if we work together, take the steps necessary to enter into and perform a contract.
3. Legal basis for processing
If your enquiry concerns potential work, data may be processed to take steps at your request before entering into a contract and subsequently to perform it. In other cases, the basis may be the controller’s legitimate interest in correspondence, handling enquiries, keeping the website secure and, where necessary, establishing or defending legal claims.
You do not need to give separate marketing consent to send an ordinary enquiry.
For measuring the effectiveness of our own information and service campaigns, the legal basis is Article 6(1)(f) GDPR: the controller’s legitimate interest in assessing these activities, improving how the services are presented and identifying the contact channels that generate genuine interest.
4. How long we retain data
Correspondence data is kept for as long as needed to handle the enquiry and discuss potential work. If a contractual relationship is established, data may be retained longer where required by law or necessary to establish, pursue or defend legal claims.
Data from our own campaign measurement is retained for a maximum of 180 days, unless earlier deletion is possible and appropriate. Standard hosting logs may have separate retention periods set by the infrastructure provider.
5. Recipients of data
Data may be processed by providers of the technical infrastructure used for the website and email, particularly hosting and email service providers. Data is not sold or shared with other parties for their own marketing purposes.
6. Server logs
The server may automatically record technical information about HTTP requests, such as IP address, connection date and time, requested URL, browser information and response code. This information is used for administration, diagnostics, security and detecting abuse.
Rate limiting stores short-lived counters associated with a hash of the IP address outside the public website directory. They contain neither enquiry content nor the raw IP address; inactive files are periodically removed after a day.
The form uses an essential session cookie, sk_contact, to measure the minimum time before sending and limit automated spam. It contains no message content and expires when the browser session ends.
7. Campaign measurement, cookies and similar technologies
StaryKoduje uses its own mechanism to measure information and service campaigns. A link to the website may contain technical parameters identifying the source, campaign and message, particularly utm_source, utm_medium,
utm_campaign and utm_content.
The mechanism may record the event date and time, campaign identifier, technical message or record identifier, source and medium, visited website path and event type. Events may include a confirmed browser visit, active interaction, opening pricing, initiating contact, attempting to submit a form and successfully sending it.
Our measurement mechanism does not record form content, email addresses, the full User-Agent string or IP addresses. However, the technical identifier passed in utm_content may be associated by the controller with a campaign record or correspondence. Separately, the standard server logs described in section 6 may contain IP addresses and other technical information about the HTTP request.
Our campaign measurement does not use cookies or localStorage to identify users. When moving between pages, the website may carry campaign identifiers in URL parameters beginning with
sk_, solely to preserve attribution for the current visit.
The configurator and form use sessionStorage to transfer the configuration and keep an enquiry draft in the current tab. This feature is used at the user’s request and is not for profiling or tracking across websites.
Google Analytics, Meta Pixel and other external analytics or marketing tools are not currently active. If tools requiring consent are introduced, they will be activated only after consent is obtained, and the consent mechanism and this policy will be updated accordingly.
8. Links to external websites
This website includes links to Facebook, itch.io, YouTube and the websites of featured projects, among others. When you visit an external website, its own privacy rules apply.
9. Your rights
Under the conditions set out in the GDPR, you may have the right to:
- access your data and obtain a copy;
- rectify your data;
- erase your data;
- restrict processing;
- data portability, where applicable;
- object to processing based on legitimate interests.
To exercise your rights, email kontakt@starykoduje.pl. You also have the right to lodge a complaint with the President of Poland’s Personal Data Protection Office (UODO).
10. Automated decisions
StaryKoduje does not use data submitted through the form to make decisions about you based solely on automated processing that produce legal or similarly significant effects.
11. Changes to this policy
This policy may be updated when the website’s operation, tools or legal requirements change. The current version is published at this address.