Privacy policy

For the purposes of this Policy:

• Controller — the sole trader identified below who determines how and why personal data is processed when you use the site.
• Personal data — any information relating to an identified or identifiable natural person, including e.g. name, e-mail, IP address, device identifiers and data collected via cookies and similar technologies, where they identify or can identify you.
• GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council.
• Site — the codeflo.pl website and its functionality.
• User — any natural person using the site.

The controller of your personal data under the GDPR is Jakub Tębłowski, a sole trader registered in the Polish business register (CEIDG), tax ID (NIP) 8561935235, REGON 528211969, offering services under the Codeflo brand. Registered address:

Sieciechowo 26 72-200 Sieciechowo Poland

Correspondence on privacy matters: kontakt@codeflo.pl.

When you use the site, we process personal data only to the extent necessary to provide the features you use: contacting us (contact form), booking a meeting (embedded calendar), basic technical operation and security, and — depending on your choices — cookies and similar technologies described on our cookie page.

We do not sell your personal data. We send marketing communication only to people who tick the separate, optional marketing consent in the contact form.

Contact form. We process the e-mail address and phone number you enter to answer your enquiry and contact you directly (GDPR Art. 6(1)(a), the consent given in the form; if the conversation leads to a contract, also Art. 6(1)(b)). Together with your data we keep the wording and date of the consents you gave, so that we can show they were given (Art. 6(1)(f), our legitimate interest in demonstrating consent).

Marketing communication. If you tick the separate marketing consent, we process your e-mail address and phone number to send you information about Codeflo services and news by e-mail and phone (GDPR Art. 6(1)(a), together with the consent required by the Polish Electronic Communications Law). This consent is optional and does not affect how we handle your enquiry. You can withdraw it at any time by writing to kontakt@codeflo.pl; withdrawal does not affect the lawfulness of processing before it.

Meeting scheduling (Cal.com). You enter data in the embedded Cal.com calendar (e.g. name, e-mail, time slot). Cal.com processes it under its own terms and privacy policy (Art. 6(1)(b) where it is necessary to arrange a meeting at your request).

Cookies and similar technologies. As described in the Cookie policy, consent is collected by our own cookie banner; necessary technologies work without consent, statistics tools only with it.

Security, analytics within cookie choices, IT operations. Limited technical data (e.g. IP address, HTTP logs, timestamps) may be processed to operate and secure the infrastructure (GDPR Art. 6(1)(f) — legitimate interests in security and reliable provision of the site), and for analytics only as allowed by your cookie settings.

Claims. We may process data to establish, exercise or defend legal claims (GDPR Art. 6(1)(f)).

Automated decisions. We do not carry out automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Art. 22.

Data from the contact form (e-mail address, phone number and the consents given) is sent to Formspree, which forwards it to our kontakt@codeflo.pl mailbox and keeps an archive of submissions. Formspree may process data outside the EEA using GDPR transfer tools (e.g. Standard Contractual Clauses) as described in its documentation.

Booking a meeting involves Cal.com (the European instance at app.cal.eu; see the Cal.com documentation).

Cookie consent is collected by our own banner. Your choice is stored in your browser together with its date and the version of the banner text, and no third party receives it.

If you allow statistics cookies, the site may load Google Analytics 4 (Google Ireland Limited / Google LLC) and Microsoft Clarity (Microsoft Corporation) to measure aggregate use of the site (for example traffic, interactions, and basic product diagnostics). These providers may process technical or online identifiers and related usage data, potentially including outside the EEA under GDPR transfer tools described in their privacy documentation.

The site is hosted and distributed using IT infrastructure providers (e.g. cloud / edge hosting), who may process data on our instructions as processors.

We may disclose information to public authorities where required by applicable law and a valid legal basis.

Contact/brief data is kept for as long as needed to handle the thread and any proportionate follow-up, then deleted or minimised except where a longer period is required by law or to establish, exercise or defend claims.

Data processed on the basis of marketing consent is kept until you withdraw that consent. The record of consents given is kept for as long as we may need to show that they were given.

Technical logs are kept for shorter periods according to hosting and security configuration.

As a rule we collect data directly from you. Providing your e-mail address and phone number in the contact form is voluntary, but without them and the contact consent we cannot reply through that channel. The marketing consent is optional and does not affect how we handle your enquiry. You can adjust cookie and similar settings via your browser or device and through the cookie banner/preferences where available.

Subject to conditions in the GDPR and local law, you may have the right to:

• access your data and receive a copy;
• rectify inaccurate data;
• erase data where grounds in GDPR Art. 17 apply;
• restrict processing where grounds in GDPR Art. 18 apply;
• data portability where processing is automated and based on contract or consent;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting lawfulness of processing before withdrawal where consent was the basis.

You may lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (uodo.gov.pl).

To exercise rights, contact: kontakt@codeflo.pl.

Details of cookies and similar technologies, vendor list after consent, and preference management are on the Cookie policy page. You can also adjust identifiers in your device or browser settings; see your vendor's help pages for your platform.

Subject to your cookie choices, we use Google Analytics 4 (measurement ID G-PDJQ1YL9JC) and Microsoft Clarity (project ID wsnu9heq5k). Those tools load only after you click “Accept statistics” in the cookie banner; before that nothing is sent to Google or Microsoft. You can change or withdraw consent at any time via “Cookie settings” in the footer.

We may update the Policy to reflect changes in processing or the law. The latest version will be published on the site with an updated “Last updated” date.