Privacy Policy

bartoszsergot.com · updated: 1 October 2026

1. Controller and contact

The controller of personal data related to using this website and contacting me is Bartosz Sergot, a private individual. Postal address: ul. Karpacka 19/4, Bydgoszcz, Poland.

For questions about your data, you can reach me through the contact page, by phone at +48 666 897 499 or by post at the address above. Use the same channels to make requests about your data.

2. What data I process and why

When you write to me, I process the name, email address and message you provide, as well as any other information you choose to add. When you call me, this may include your phone number and what you tell me during the call. Please do not send data that is not needed to handle your matter.

• Answering general questions and handling correspondence — Art. 6(1)(f) GDPR. My legitimate interest is staying in touch with people interested in my work and handling their messages efficiently.
• Preparing an offer or arranging cooperation at your request, when you are to become a party to a contract — Art. 6(1)(b) GDPR, i.e. steps taken before entering into a contract.
• Keeping the website running and secure, and establishing, pursuing or defending legal claims when necessary — Art. 6(1)(f) GDPR. The legitimate interest is protecting the website and my rights.
• Showing the cookie banner, remembering your choice and being able to demonstrate which choice was made — Art. 6(1)(f) GDPR. The legitimate interest is respecting your settings and accountability.

When you use the website, the server may process technical data such as your IP address, the time of the request, the address of the page visited and information about your browser. This data is used to deliver the page in the right language and to deal with technical problems or misuse.

3. How the form works

The form prepares a message in your email app. Filling it in and using the button does not send the message to me or store it in a website database. Before sending, you can review, change or discard the draft. I receive your data only once you send the message and it is delivered to me.

Providing data is voluntary and not a legal requirement. Fields marked as required are needed to prepare the draft; without information about your matter and a way to reach you, I may not be able to reply. You can also call me.

The checkbox next to the form confirms that you have read this policy. It is not consent to marketing or an additional consent to data processing; I handle correspondence on the legal bases listed above.

4. Cookies, language, media and links

The website uses CookieYes to show the cookie banner and remember your choice. The banner script is loaded from CookieYes servers, and a cookie with your consent settings is stored in your browser. CookieYes may also keep a record of your choice as proof of consent. You can change your choice in the banner settings, if they are available on the page, or by deleting cookies in your browser — the banner will then appear again.

The website is available in Polish and English. When you open the home page, the server uses your IP address to determine the country you are connecting from and shows the Polish version to visitors from Poland; if the country cannot be determined, it uses your browser’s language setting. I do not store this information or combine it with other data. If you choose a language yourself, your browser stores a lang cookie with that choice for 12 months so that your next visit opens in the right version. This cookie is necessary to remember the choice you asked for.

Apart from that, the website does not use analytics or advertising cookies, tracking pixels or analytics tools. Other than the language cookie, my code does not store cookies or form data in localStorage or sessionStorage. Fonts, images, videos and the 3D scene are loaded from this website. Your browser may keep files in its normal cache.

Links to GitHub, social networks and other websites lead to services run by their operators. Their privacy rules apply once you go to those services. This website does not embed their tracking tools. Messages handled in your email app are also subject to the rules of the email provider you have chosen.

5. Recipients of data

I use Gmail to receive and handle messages. The recipient of correspondence data is therefore Google, including Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — the entity Google names for users of its services in the European Economic Area. Google processes data under its own Privacy Policy.

The cookie banner is managed by CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. When the banner script is loaded, CookieYes receives your IP address and technical browser data and, once you make a choice, information about the consent given or refused. CookieYes processes data under its own Privacy Policy.

Hosting and technical support providers I use, as well as authorised public authorities where the law requires disclosure, may have access to data to the extent necessary. In the event of a dispute, a provider of legal assistance may also be a recipient. I do not sell data or share it for anyone else’s marketing.

6. How long I keep data

I keep correspondence for as long as needed to handle your matter and maintain the agreed contact. After that, I keep only the data needed to establish, pursue or defend legal claims, until the relevant limitation period expires, where the nature of the matter justifies it. When further storage is no longer needed, I delete the data.

Technical data is kept for a period justified by keeping the website running and secure, diagnosing problems and investigating incidents. The exact period depends on the hosting configuration and the type of event.

7. Transfers outside the EEA

Because correspondence is handled in Gmail, data may also be processed outside the European Economic Area, including in the USA. Google states that it relies on adequacy decisions, including the EU–US Data Privacy Framework for transfers to Google LLC covered by it, and on standard contractual clauses where they are required and no adequacy decision applies.

Google describes the legal bases, safeguards and how to obtain a copy of its clauses on its data transfer frameworks page. You can also contact me through the channels listed above. This information concerns Gmail; it does not mean that visitors’ data is sent to Google through analytics tools.

Data related to the cookie banner goes to CookieYes Limited in the United Kingdom and may also be processed in other countries by CookieYes subprocessors. Such transfers are based on a European Commission adequacy decision or standard contractual clauses, according to information provided by CookieYes.

Any data transfers related to hosting depend on the chosen provider and its configuration. Before they start, their scope, legal basis and safeguards will be stated in this policy.

8. Your rights

You can request access to your data and a copy of it, rectification, erasure or restriction of processing — in the situations provided for in the GDPR. The right to data portability applies to data you provided that is processed automatically on the basis of a contract.

You can object, on grounds relating to your particular situation, to processing based on legitimate interest. I will then stop that processing unless there are compelling legitimate grounds or grounds for establishing, pursuing or defending legal claims.

To exercise your rights, use the contact details at the beginning of this document. As a rule, I will reply within one month; if the GDPR allows this period to be extended, I will tell you the reason and the new deadline within that time. If you believe the processing breaks the law, you can lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland: uodo.gov.pl.

I do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

9. Updates

This policy may be updated when the way the website works or processes data changes. The current version and its date are available on this page. This policy is also available in Polish; if the two versions differ, the Polish version prevails.