Privacy policy

1. Controller

The controller of your personal data is Kajetan Majda, conducting business under the name CodiStork, entered into the Central Registration and Information on Business (CEIDG) of the Republic of Poland, maintained by the minister competent for economic affairs, Tax ID (NIP): 5783179695, REGON: 542399838 (“CodiStork”, “we”).

For anything to do with personal data, write to contact@codistork.com.

2. What we collect and why

Contact form: name, e-mail address, company name and website, the services you need, budget range and the message you write. We use it to answer your enquiry and, if it leads to a project, to prepare and perform a contract (art. 6(1)(b) GDPR) or to pursue our legitimate interest in replying to you (art. 6(1)(f) GDPR). Giving us this data is voluntary, but without your name, e-mail address and message we cannot reply.

E-mail: if you write to us directly, we process the data you include in the message on the same basis.

Server logs: our hosting provider records technical data (IP address, browser, time of request) needed to run and secure the site (art. 6(1)(f) GDPR).

Visitor statistics: only with your consent, we use Google Analytics (see section 4). We do not use advertising tools. We do not make automated decisions about you.

3. The form and spam protection

The form is handled by Web3Forms, which forwards what you write to our mailbox. When you open the Contact page, your browser loads the Web3Forms script and the hCaptcha check, so these services receive your IP address and basic browser data even if you send nothing.

hCaptcha (Intuition Machines, Inc., USA) checks that the form is filled in by a person, not a bot. To do so it looks at, among other things, your IP address, browser and device data and how you use the page, and it may store data in your browser for that check. The legal basis is our legitimate interest in protecting the form from spam and abuse (art. 6(1)(f) GDPR). hCaptcha also processes some of this data on its own account, under its privacy policy: hcaptcha.com/privacy.

4. Visitor statistics (Google Analytics)

If you click “Accept” in the cookie banner, we start Google Tag Manager and Google Analytics, tools provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). They show us how visitors use the site: which pages they view and for how long, what kind of device and browser they use, which country or city they are in (approximately) and where they came to the site from. We use this information only as aggregated statistics, to improve the site.

The legal basis is your consent (art. 6(1)(a) GDPR and art. 399 of the Polish Electronic Communications Law). Without consent, neither Google Analytics nor Google Tag Manager runs at all, and the site works just the same. You can withdraw your consent at any time with the “Cookie settings” button in the site footer. Withdrawing it does not affect the lawfulness of what happened before.

Google Analytics stores the _ga and _ga_* cookies in your browser (valid for up to 2 years), which let it tell visits apart. We keep the statistics in Google Analytics for no longer than 14 months. More on how Google processes data: policies.google.com/privacy.

5. Cookies and browser storage

Without your consent, the site sets no cookies at all. Google Analytics cookies appear only after you click “Accept” (see section 4).

We remember your choice in the cookie banner in your browser for a year, so we don't ask on every visit. When you switch language, your browser briefly remembers where you were on the page so it can take you back to the same place. Both stay on your device and are needed for these features to work.

On the Contact page, the hCaptcha check may store data in your browser to tell people from bots (see section 3).

Fonts and icons are served from our own server, so without your consent browsing the site sends no data to other companies. The links to our social media profiles are plain links: those services receive data only once you click, and their own privacy policies apply from then on.

6. Who sees the data

Only people working on your enquiry at CodiStork, and the providers whose services we use: SEOHOST.pl (website hosting and e-mail, Poland), Web3Forms (form handling), hCaptcha (spam protection for the form) and, if you consent, Google (visitor statistics). We do not sell personal data.

Web3Forms, hCaptcha and Google may process data outside the European Economic Area, including in the USA. Such transfers rely on the European Commission's standard contractual clauses or, where the provider takes part in the EU-US Data Privacy Framework (as Google does), on the Commission's adequacy decision.

7. How long we keep it

Enquiries that do not become a project: up to 12 months from the last message, then deleted.

Project correspondence and documents: for the duration of the contract and then for up to 6 years, as required by tax and accounting law (art. 6(1)(c) GDPR) and to establish or defend legal claims (art. 6(1)(f) GDPR).

Server logs: for the period set by our hosting provider, usually a few weeks.

Google Analytics statistics: up to 14 months (see section 4).

8. Your rights

You can ask us to access, correct, delete or restrict the processing of your data, object to processing based on our legitimate interest, and receive the data you gave us in a portable format. You can withdraw your consent to statistics at any time with the “Cookie settings” button in the footer. Write to contact@codistork.com. We will reply within one month at the latest.

You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

9. Changes

We will update this page when the way we handle data changes. The date at the top tells you when it was last revised.