// privacy policy
Privacy Policy
Effective: 20 April 2026
This Privacy Policy explains how Dominik Księżyk Design processes personal data collected through design.ksiezyk.com.
1. Data Controller
The data controller is Dominik Księżyk Design, a sole proprietorship (jednoosobowa działalność gospodarcza) registered with the Polish Central Register of Business Activity (CEIDG).
Address: ul. Władysława Orkana 6a/13, 40-553 Katowice, Poland
NIP: 6343057250 · REGON: 542024104
For privacy-related questions, contact: privacy@ksiezyk.com
2. What Data We Collect
Through the contact form, we collect: name, company name, email address, area of interest (Discovery, Workshops, or Support), budget range, and the content of your message.
Technical data is collected automatically via Vercel Analytics (cookieless): approximate location, browser type, and pages visited. No personal identifiers are stored.
Providing your data through the contact form is voluntary. If you do not provide the required fields (name, email, message), we will not be able to respond to your inquiry.
3. Purpose and Legal Basis
We process your contact form data to respond to your inquiry and to take pre-contractual steps at your request.
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) and Article 6(1)(f) GDPR (legitimate interest in analyzing site performance for technical data).
4. Retention Period
Contact form data is retained for 3 years from the last contact, corresponding to the statute of limitations for civil claims under Polish law (art. 118 Civil Code).
After this period the data is deleted, unless a longer retention is required by law (e.g. tax records for completed engagements, 5 years).
5. Recipients (Subprocessors)
We use the following processors to deliver our services:
Resend (USA) — email delivery.
Vercel (USA / EU) — website hosting and analytics.
Cal.com (USA) — optional booking of introductory calls.
Anthropic (USA) — AI tools used in service delivery.
6. International Transfers
Some processors are based outside the European Economic Area, primarily in the United States.
Such transfers are covered by Standard Contractual Clauses (SCC) approved by the European Commission or equivalent safeguards in line with Chapter V of GDPR.
7. Cookies and Analytics
This site uses Vercel Analytics, which is cookieless. No identifying cookies are set by the site itself.
We use Cookiebot to manage consent for embedded third-party services (e.g. Cal.com booking widget) that may set their own cookies. You can review or change your consent at any time via the 'Cookie settings' link in the footer.
Each embedded service has its own privacy policy that governs the data it collects.
8. Your Rights
Under GDPR you have the right to: access your personal data, request rectification or deletion, restrict processing, object to processing, and request data portability.
You also have the right to lodge a complaint with the Polish Data Protection Authority (PUODO) at uodo.gov.pl.
To exercise any of these rights, email privacy@ksiezyk.com — we respond within 30 days.
9. Automated Decision-Making
We do not use automated decision-making or profiling under Article 22 GDPR. All responses to inquiries and decisions about engagements are made by a human.
10. Security
We use HTTPS across the site, access controls on all systems, and encrypted storage through our subprocessors.
Personal data is never pasted into AI tools that train on inputs. All AI usage for client work is routed through zero-retention providers.
11. Changes and Contact
We may update this policy as our services evolve. The effective date at the top reflects the latest version.
For any questions about this policy or your data, contact: privacy@ksiezyk.com.