Last updated
Privacy notice
This notice explains what we collect when you visit this site or write to us, why, who handles it, how long we keep it and what you can ask us to do with it. The short version: we collect only what we need to reply to you, we set no cookies and we never sell your data.
Who we are
Pokaz is run by Przemysław Rakowski, Wrocław, Poland. He is the controller of your personal data. You can reach him at przemek.rakowski@gmail.com.
What we collect when you write to us
When you send the contact form, we receive your name, company, email address, the kind of product you make, your website if you give it, and your message, with the date and time it arrived. We use them to reply to you and, if you ask, to prepare a proposal.
The legal basis is your request: we process the data to take steps you asked for before a possible contract (GDPR Article 6(1)(b)). If you write on behalf of a company, the basis is our legitimate interest in answering enquiries about our work (Article 6(1)(f)).
Giving us your details is up to you. Only the website is optional; without the other fields we can’t answer your enquiry. If you email us directly, all of this applies to your email too.
When you visit the site
To deliver each page and protect the site from attacks, Cloudflare, our host, handles the technical data every browser sends, such as your IP address, browser details and the page you asked for. The legal basis is our legitimate interest in a site that works and is safe (Article 6(1)(f)). We keep no access logs of our own.
Spam protection
The form uses Cloudflare Turnstile to tell people from bots. It loads only when you first click or tab into the form. It checks technical signals such as your IP address, browser details and the site you are on, and when you send the form we pass your IP address to Turnstile with the check. Cloudflare does not use these signals to identify, profile or target you.
To stop repeated sending, we count the messages sent from each connection for one minute. The count is kept against a scrambled, one-way code made from your IP address, never the address itself, and nothing about your connection is stored with your enquiry.
The legal basis for both is our legitimate interest in keeping the form free of spam and abuse (Article 6(1)(f)).
Who handles your data
Cloudflare hosts this site and runs the contact form for us: the code that receives your message, the database that stores it, the count against repeated sending and Turnstile. For all of this, Cloudflare is our processor. It handles the data only on our behalf and on our instructions.
Turnstile has one exception. Cloudflare also uses its signals to improve its bot detection, and for that use it is an independent controller. Its privacy policy and Turnstile privacy addendum, linked below, explain how.
Enquiries sent with the form stay in that database, and we read them there. When we reply, and when you email us directly, the emails pass through our Gmail inbox. Google provides that mailbox under its own terms and privacy policy, and receives the data as a recipient.
We share your data with no one else, and we never sell it.
Transfers outside Europe
Cloudflare and Google may process data outside the European Economic Area, including in the United States. Both take part in the EU–US Data Privacy Framework, which the European Commission has found to give adequate protection. Cloudflare’s data processing terms also include the EU standard contractual clauses, and Google explains its safeguards in its privacy policy.
How long we keep it
Our database deletes each enquiry automatically 24 months after it arrived. We delete our emails with you no later than 24 months after our last contact. If we sign a contract, we keep what the law requires for as long as it requires.
The count against repeated sending lasts about a minute. Nothing made from your IP address is kept for longer than 24 hours.
Automated decisions
We make no decisions about you by automated means alone, and we don’t profile you. Turnstile and the count against repeated sending only decide whether the form can be sent right now. If either stops you by mistake, email us instead.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it or to send it to you in a portable form. Write to przemek.rakowski@gmail.com and we will answer within one month.
You can also object, at any time, to processing based on our legitimate interest, on grounds relating to your situation (Article 21).
You have the right to complain to a data protection authority. In Poland that is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw. You can also complain where you live or work in the EU.
Changes
If we change how we handle data, we will update this page and the date at the top.