Privacy Policy

Editorial note. This document describes how the current version of the site actually works (no analytics, no tracking cookies, a contact form that sends an e-mail through a server function and an external mail provider). The content needs review and confirmation by the business owner — and, in case of doubt, a lawyer — before the site is published. It does not constitute legal advice.

1. Data controller

The controller of personal data processed in connection with the use of syios.pl is Paweł Skiba, operating a business under the name Syios Consulting Paweł Skiba (Polish tax ID / NIP 6891172555, REGON 122591676).

Contact regarding personal data processing: contact@syios.pl.

2. What data is processed

Personal data is processed only to the extent a user voluntarily provides it through the contact form: full name, company name (optional), e-mail address, subject, and message content.

Legal basis for processing: taking steps at the request of the data subject prior to a possible contract, and the controller's legitimate interest in responding to enquiries (Art. 6(1)(b) and (f) GDPR) — to be confirmed by the owner.

3. How the contact form works

After clicking "Send message", the form's content is sent to a short server-side function (Cloudflare Pages Functions) running on Cloudflare's infrastructure, which forwards the message for delivery by e-mail to the administrator's mailbox. The e-mail itself is sent via an external mailing provider — Resend (Resend, Inc.) — which, in this case, acts as a data processor on the administrator's behalf. The form's content is not stored in a database or in site logs beyond what is technically necessary to deliver the message.

Details of how Resend processes data are set out in that provider's own privacy policy — this, including any data processing agreement, needs to be confirmed by the owner before the site is published.

4. Cookies and analytics

As of the publication date of this policy, the site does not use tracking cookies, analytics tools (e.g. Google Analytics), or marketing pixels. If such functionality is added in the future, this policy will be updated accordingly before it's deployed.

5. Fonts and external resources

The fonts used on the site (Space Grotesk and IBM Plex Sans) are hosted locally, together with the rest of the site's files. The browser does not connect to any external server (such as Google Fonts) for this purpose — loading the site does not involve sending data to a font provider.

6. Hosting and technical data

The site is hosted as a static website on Cloudflare Pages infrastructure. As with most hosting services and CDNs, the provider may process basic technical request data (e.g. IP address, timestamp, browser type) to keep the site running, secure, and available. Details of this processing are set out in Cloudflare's own privacy policy — this note needs to be confirmed by the owner once the final hosting configuration is in place.

7. Data retention period

Messages submitted through the contact form arrive in the administrator's mailbox and are kept for as long as needed to handle the enquiry, and afterwards according to the administrator's own correspondence-retention practices — to be confirmed by the owner.

8. Rights of data subjects

To the extent provided for by the GDPR, a data subject has the right to:

access their data and obtain a copy of it;
rectify (correct) their data;
erase their data;
restrict the processing of their data;
data portability;
object to the processing of their data;
lodge a complaint with the President of the Personal Data Protection Office (UODO) if they believe their data is being processed unlawfully.

9. Changes to this privacy policy

This privacy policy may be updated as the site's functionality changes — in particular if the contact form moves to a different external provider, or if analytics tools or cookies are introduced.