Privacy policy

Who is responsible for your data

The data controller is Jeremi Karp, a sole trader operating as Jeremi Karp, ul. Kaczeńcowa 6a lok. 93, 91-214 Łódź, Poland, tax number (NIP) 9472020457, statistical number (REGON) 545002072.

For anything concerning personal data, write to jeremikarp@gmail.com or call +48 532 871 702. I answer personally — there is no support department here.

What this site does not do

Starting with what is absent, because that is usually what matters most:

• no analytics or tracking tools — no Google Analytics, ad pixels or heatmaps,
• no profiling and no automated decision-making,
• your data is never sold or shared for marketing purposes,
• fonts are served from this server, so your visit never reaches Google Fonts,
• YouTube and Vimeo videos load only after you press play — until then those services receive nothing about you.

Contact form

If you write through the form, I process your name, email address, optionally your phone number and project type, and the message itself. It is sent to my mailbox, and a copy is saved in this site's admin panel (a Supabase database) so that an enquiry is not lost if email fails. I am the only person with access to the panel. I do not use a CRM and I do not move this data into marketing tools.

There is one purpose: to reply to you and possibly agree on working together. The legal basis is Article 6(1)(b) GDPR (steps prior to entering a contract) or Article 6(1)(f) GDPR, my legitimate interest in answering an enquiry.

Providing the data is voluntary, but without an email address I have no way to reply.

Technical data and spam protection

The form is protected against bots: it checks a signed ticket issued when you open the page, hidden trap fields, and the number of submissions from a single IP address.

Your IP address is kept for that purpose in the server's memory only, for a matter of minutes, and is not linked to anything or stored anywhere. In addition, the hosting provider keeps standard server logs. The basis is Article 6(1)(f) GDPR — keeping the site secure.

Cookies

The site uses no advertising or analytics cookies. It stores only:

• NEXT_LOCALE — remembers the language you chose (Polish or English), valid for a year,
• admin panel session cookies — created only after logging into the panel, which in practice means only for me.

Who processes the data on my behalf

To keep the site running I use services that process data on my behalf: Vercel (site hosting), Supabase (portfolio database and files), Resend (delivering form messages) and Google (the mailbox your message lands in).

Some of these companies operate servers outside the European Economic Area. In that case the transfer is based on standard contractual clauses approved by the European Commission.

How long I keep the data

Correspondence from the form stays in my mailbox as long as it may be needed: until the conversation is finished, and in case of a commission, for the period required by tax and accounting law. I delete the copy in the admin panel once the matter is closed — at the latest 24 months after the last contact.

Technical data used for spam protection disappears within minutes. Hosting logs are deleted according to the provider's policy.

Your rights

At any time you may:

• request access to your data and a copy of it,
• have inaccurate data corrected,
• request erasure or restriction of processing,
• object to processing based on legitimate interest,
• request that your data be transferred to another controller.

An email to jeremikarp@gmail.com is enough. If you believe I process data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw).

Changes to this policy

If the way the site works changes, I will update this document and the date at the top. Older versions are not archived — the one you are reading is the one that applies.