Privacy Policy

Last updated: 3 July 2026

This policy explains what personal data is collected through szczepankrol.com, why, and what your rights are. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is:

Szczepan Król, a private individual operating in Poland as unregistered business activity (działalność nierejestrowana)
Email: hello [at] szczepankrol.com

2. What data I collect

When you submit the contact form on this site, I collect only what you enter:

Your email address
The link to your website or product
The audit package you selected (and whether you added the AI Readiness Check)
The message describing your product and concerns

I do not use analytics, advertising, or tracking cookies, and no non-essential cookies are set when you visit this site.

3. Why I use it, and the legal basis

Your data is used solely to respond to your enquiry, assess fit, and, if you proceed, to prepare and deliver the audit. The legal basis is Article 6(1)(b) GDPR (steps taken at your request prior to entering a contract) and, where relevant, Article 6(1)(f) (my legitimate interest in responding to business enquiries). I will not send you marketing or add you to any mailing list.

4. Who processes it (third parties)

The contact form is handled by Formspree, Inc., a service based in the United States, which receives your submission and forwards it to me by email. This means your form data is transferred to and processed in the USA.

Formspree acts as a data processor on my behalf. International transfers are covered by the safeguards described in Formspree's own privacy and data-processing terms (formspree.io/legal/privacy-policy).

This site is hosted by OVHcloud (OVH SAS, France), whose servers process technical connection data (such as your IP address) in server logs as a necessary part of delivering the page. As an EU-based provider, this processing takes place within the EU.

5. How long I keep it

Enquiry correspondence is kept for as long as needed to handle your request and, if you become a client, for the period required by applicable tax and accounting law. If no engagement follows, I delete enquiry data within 12 months. You can ask me to delete it sooner at any time.

6. Your rights

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to its processing, and to data portability. To exercise any of these, email me at the address in section 1.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO), uodo.gov.pl.

7. Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "last updated" date.