Privacy policy

Your personal data is controlled by Szymon Jankowski, running the sole proprietorship Szympanstudio Szymon Jankowski, Pleszew, Wielkopolska, Poland, VAT ID (NIP) 7822394773.

For anything related to your data, email szymon@szympanstudio.pl or call +48 791 509 560.

• Contact form: name, email address, project scope and message (required), and, if you provide them, phone, company, budget and timeline.
• Email and phone contact: whatever you share in your message or call.
• Google Analytics visit statistics — only with your consent: cookie identifiers, device and browser information, pages visited and approximate location.
• Aggregate Vercel Web Analytics and Speed Insights statistics: these work without cookies and cannot identify you.
• Technical data your browser sends with every request (IP address, browser type, time of request). The hosting provider processes it to deliver the site and protect it from attacks.

• Replying to your enquiry and preparing a proposal — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).
• Performing a contract if we decide to work together (Art. 6(1)(b) GDPR) and meeting tax and accounting obligations (Art. 6(1)(c) GDPR).
• Google Analytics statistics — your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time.
• Site security and operation, and establishing or defending legal claims — my legitimate interest (Art. 6(1)(f) GDPR).

I do not sell data. I use service providers that process it on my behalf and only as far as needed:

• Vercel Inc. — website hosting, bot protection and cookieless aggregate statistics.
• Resend (Plus Five Five, Inc.) — delivering contact form messages to my inbox.
• Zenbox sp. z o.o. — email hosting.
• Google Ireland Limited — Google Analytics, only if you consent.
• If we sign a contract: accounting and payment providers, as required by law.

Vercel, Resend and Google may process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on Standard Contractual Clauses approved by the Commission. You can request a copy of the safeguards at the address above.

• Enquiries that did not lead to a project — up to 12 months after the last contact.
• Correspondence and documents related to a contract — for the duration of the work, then until claims become time-barred and for the period accounting law requires.
• Google Analytics data — up to 14 months; cookies expire as listed below or when you withdraw consent.
• Server logs — for a short period set by the hosting provider for security purposes.

Analytics cookies are set only after you click “Accept”. You can change your choice at any time with the “Cookie settings” link in the footer; declining removes the Google Analytics cookies.

• _ga, _ga_<ID> (Google Analytics, consent only) — distinguishing visits and sessions, up to 2 years.
• Vercel security cookie (strictly necessary) — may be set when the hosting provider's security check verifies that traffic is not from a bot.
• Browser local storage (not a cookie, never sent to the server): your cookie choice and your progress on the checklist page.

To exercise your rights, email szymon@szympanstudio.pl. I will reply within one month.

• Access your data and receive a copy.
• Have it corrected, erased or its processing restricted.
• Data portability for data processed on the basis of consent or a contract.
• Object to processing based on legitimate interest.
• Withdraw consent at any time, without affecting the lawfulness of earlier processing.
• Lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warsaw), or the authority in your country.

Providing data is voluntary. Without your name, email address, project scope and message I cannot reply to a form enquiry. I do not make automated decisions or profile you in a way that has legal effects on you.

If the way I process data changes, I will update this page and the date at the top.