· Privacy policy

Privacy policy

In force since: 29 April 2026

Data controller

The controller of personal data is Sebastian Kubiak, sole trader operating under the name Sebastian Kubiak, contact: contact@sebastiankubiak.tech.

What data I collect

Only data you submit voluntarily through the forms on sebastiankubiak.tech:

  • company name,
  • phone number,
  • email address,
  • message body.

For the whitepaper lead form (/oss-compliance/) only an email address is collected.

For security and abuse-mitigation purposes (rate-limiting, spam protection), the request originator's IP address is held in server memory temporarily. The IP is not written to durable logs and is not shared further.

Purpose and legal basis

Data is processed solely to handle your enquiry: to prepare a reply and potential follow-up regarding an IT project audit or the whitepaper deliverables.

Legal basis: GDPR Art. 6(1)(f), legitimate interest of the controller (contacting a person interested in the service); and GDPR Art. 6(1)(b) for preparation of a potential agreement.

Recipients

Form contents are forwarded to Telegram Bot API (Telegram Messenger Inc., headquartered outside the EEA) solely to notify me of a new message. Telegram acts as a notification channel, not a permanent storage location for your data.

The site is hosted on DigitalOcean (servers in the EU, Frankfurt). I do not use Google Analytics, Facebook Pixel or any other tracking tool.

How long I keep the data

Messages in Telegram remain in my archived chat history for no longer than 24 months from the last contact. After that I delete them manually. You can request earlier deletion at any time, see "Your rights" below.

Your rights

  • right to access your data,
  • right to rectification,
  • right to erasure ("right to be forgotten"),
  • right to restrict processing,
  • right to object to processing,
  • right to lodge a complaint with the President of the Polish DPA (UODO).

For anything, write to contact@sebastiankubiak.tech. I reply within a few business days.

Cookies and tracking

The site uses no analytics or marketing cookies. No Google Analytics, no Facebook Pixel, no Hotjar, no user-tracking tools of any kind. I don't ask for cookie consent because there's nothing to consent to.

Policy changes

I update this policy if I change the scope of data processing. The "in force since" date at the top reflects the most recent update.

← Back to homepage