Privacy Policy

Data controller

The data controller is Mateusz Krysztopowicz, operating devlife.pl. For anything concerning your data, write to mateusz@devlife.pl.

Analytics — legal basis and scope

The legal basis is your consent (Art. 6(1)(a) GDPR); storing information on your device is governed by the Polish Electronic Communications Law. I collect navigation events, page paths, clicks on contact calls-to-action, and session recordings with form field content masked. Event parameters never carry personal data.

Processors and retention

Google (Google Analytics 4) — 14-month event retention. Microsoft (Clarity) — 30-day session recordings, 9-month heatmaps. Cloudflare (Web Analytics) — measurement without cookies. Transfers outside the European Economic Area rely on an adequacy decision or standard contractual clauses.

Your rights

You have the right to access your data, to rectification, erasure, restriction of processing, objection, and to lodge a complaint with the President of the Personal Data Protection Office (PUODO). You can withdraw analytics consent at any time on the /en/cookies/ page — withdrawal does not affect the lawfulness of processing carried out beforehand.

Contact form

The form posts your message to the devlife.pl server, which delivers it to the mateusz@devlife.pl mailbox. The controller is Mateusz Krysztopowicz. I process the data solely to reply to your message and to discuss possible cooperation — on the basis of your consent (Art. 6(1)(a) GDPR) and of steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Providing the data is voluntary, but without an e-mail address I have no way to reply. You can withdraw consent at any time by writing to mateusz@devlife.pl — this does not affect the lawfulness of processing carried out before the withdrawal.

• Data collected: name, e-mail address, message body and an optional preferred call time.
• Retention: I keep correspondence for no longer than 24 months after the last contact, unless accounting or legal obligations require longer.
• Recipients: the hosting and mail provider (mydevil.net) acting as a processor. Contact-form data goes to no one else.
• Spam protection: the server stores only a salted hash of your IP address, rotated daily — never the address itself, and no cookies are set for this.
• No marketing: this data is never used for marketing mailings or to build a mailing list.
• Your rights: access, rectification, erasure, restriction, objection, portability, and a complaint to the Polish supervisory authority (PUODO).