Draft — these terms are pending review by legal counsel and may change.
1. Who we are
The controller of your personal data is Cognitra Eryk Czekalski, a sole proprietorship entered in the Polish CEIDG register, ul. Górnych Wałów 23B lok. 29, 44-100 Gliwice, Poland, VAT ID (NIP) 7343485526. Cognitra Studio is a brand of that business, and the same business runs getcognitra.pl, so a contact made through either site reaches the same controller. Contact: cognitra.adm@gmail.com. No data protection officer has been appointed.
2. What data we collect
When you use our contact form we collect your name, email address and your message. We do not use tracking cookies, and we do not use analytics tools that collect personal data.
3. Why we collect it
We process your data to respond to your inquiry and to provide the services you request (GDPR Art. 6(1)(b) — pre-contractual measures taken at your request).
4. How we store it
Contact form submissions pass through our self-hosted automation platform (n8n), which runs in Google Cloud in the europe-north2 region (Sweden), and then reach our mailbox, which is a Google account. Google is a US company, so the message itself is not stored exclusively inside the EEA; see the section on transfers. Your browser also keeps two entries of its own: the times you submitted the form, used to rate-limit it, and your language choice. Both stay on your device and never reach us. We keep enquiries for up to 12 months after the last interaction, unless a contract is established.
5. Who we share it with
We do not sell your personal data and we do not share it for anyone else’s marketing. It is processed on our behalf by Google Cloud Platform (hosting of this site and of the automation server) and by Google (the mailbox we reply from). This site loads no analytics, no advertising pixels, and no third-party fonts or embeds.
6. Your rights
Under GDPR you have the right to access your data, rectify inaccurate data, request deletion, restrict processing, data portability, and object to processing. To exercise any of these rights, email cognitra.adm@gmail.com.
7. Transfers outside the EEA
Google is a US company. Hosting and our mailbox may therefore involve processing outside the European Economic Area. Google bases such transfers on mechanisms recognised by EU law, including participation in the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission. Current details are in Google own privacy documentation.
8. Server logs
Every visit leaves an entry in the hosting logs: IP address, browser information, the address requested, the response code and a timestamp. These logs exist regardless of any consent and are kept for 30 days. We process them under GDPR Art. 6(1)(f), our legitimate interest in keeping the site secure and diagnosing faults.
9. Complaint to the supervisory authority
If you believe we process your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.
10. Changes
We may update this policy. Changes will be posted on this page with an updated date.