Privacy.

This website is operated by Dominik Pałka, based in Kraków, Poland. I am the controller responsible for the personal data described on this page, including data you send through the contact form or by email and relevant technical data processed when you use the website.

For a privacy question or request, email dominik.palka.data@gmail.com.

The contact form asks for your name, email address and message. If you contact me directly by email, I receive the information in your message, your email address and ordinary technical information included in email headers.

I use this information to read and reply to your enquiry, discuss possible roles, projects, freelance work or collaboration, and manage any necessary follow-up. I do not use contact details for newsletters or advertising, and I do not sell them.

To protect the contact form from spam and abuse, submissions are checked automatically using spam-filtering services. Spam filtering may prevent a suspected spam message from reaching me. You can also contact me directly by email.

The legal basis is my legitimate interest in responding to professional enquiries, managing this portfolio website and protecting the contact form from spam and abuse. Where you ask me to take steps before entering into a contract to which you are a party, processing may also be necessary for those steps.

Providing the form data is voluntary. Your name is optional, but I need your email address and message to reply through the contact form. If you do not provide them, I may be unable to respond.

Please do not include sensitive personal information or unnecessary attachments in your enquiry.

When you visit this website, hosting and security services may process technical information such as an IP address, browser or device information, requested URL, request time and error details. This information is used to deliver, secure and troubleshoot the website.

The site uses Cloudflare Web Analytics to view aggregate usage and performance information, such as page views, page paths, referral sources, browser or device type and page-load metrics. It does not use analytics cookies, local storage or browser fingerprinting to create visitor profiles. For Web Analytics, Cloudflare states that it receives a source IP address as part of normal request handling but discards it at the nearest Cloudflare data centre rather than storing it in its core databases or logs.

I use technical information to operate the website, investigate errors, protect it from abuse and understand how pages perform and are visited. The legal basis is my legitimate interest in running and maintaining the site.

The website does not use Google Analytics, advertising pixels or personalised advertising.

The production website relies on the following services:

• Netlify hosts the static website and processes contact form submissions, including automatic spam filtering using Akismet.
• Cloudflare manages the domain and DNS and provides cookieless web analytics.
• Google provides the email account used to receive and reply to messages.

These providers and their subprocessors may process personal data outside the European Economic Area, including in the United States. Transfers to participating US organisations may rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework. Other transfers may be protected by the European Commission's Standard Contractual Clauses and other safeguards required by law.

You can contact me at dominik.palka.data@gmail.com if you would like information about the safeguards relevant to your data or a copy or reference to them.

I normally delete ordinary contact messages, related email correspondence and the corresponding Netlify form submission within 90 days after my final reply.

If an enquiry leads to an active role, project, collaboration or contract discussion, I may keep the relevant correspondence until that discussion ends and for up to six months afterwards. If we enter into a contract, I may keep relevant information for the duration of that relationship and longer where necessary to comply with a legal obligation or establish, exercise or defend legal claims.

Spam and irrelevant messages may be deleted sooner. Technical logs follow the short-term retention settings of the relevant provider. Cloudflare states that unsampled Web Analytics data is retained for seven days before aggregation, and that Web Analytics reports are available for the previous six months.

Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction of processing or objection to processing based on legitimate interests. You may also have the right to data portability where the legal conditions for that right are met.

Send a request to dominik.palka.data@gmail.com. I may need enough information to confirm that the request concerns you. I will normally respond within one month, unless the GDPR allows more time.

You may also make a complaint to the Polish data protection authority, the President of the Personal Data Protection Office (UODO).

The website does not use automated decision-making or profiling that produces legal effects or similarly significantly affects visitors. Contact-form submissions may be automatically checked for spam as described above.

The website links to services such as GitHub and LinkedIn. Those services receive information under their own policies when you choose to open them. This site does not load social-media embeds in the background.

Project files are served as direct downloads. Opening a downloaded PDF, Power BI file or Excel workbook is handled by your device and installed software.

I will update this page if the website starts using different services or collects information in a different way. The date at the top will show when the text was last revised.