Privacy
Privacy
Short version: this is a personal site, not a data business. Here's exactly what it collects and what it never does.
Who's responsible
This site (karolbinkow.ski) is run by Karol Binkowski, Kraków, Poland — the data controller. Questions or requests: karolbinkowski3@proton.me.
What I collect, why, and the legal basis
- Contact form. Your name, email, and message — used only to reply. Delivered to my inbox via formsubmit.co (processor). Legal basis: your request / consent (GDPR Art. 6(1)(a)/(b)).
- Newsletter. Your email, with double opt-in (you confirm via a link before anything is sent), a consent timestamp, and an unsubscribe link in every email. Stored in a Cloudflare D1 database; confirmation email sent via Resend (processor). Legal basis: consent — withdraw any time by unsubscribing.
- Booking a call. "Book a call" opens Cal.eu, where you enter your name and email. Handled by Cal.eu under their privacy policy.
- Analytics — consent only. If (and only if) you accept, Google Analytics 4 loads via Cloudflare Zaraz to count visits and see which work gets read. No analytics cookies are set unless you accept. Legal basis: consent.
- Error monitoring. Sentry captures technical errors so I can keep the site working and secure. It runs without consent under legitimate interest (GDPR Art. 6(1)(f)), with text and inputs masked and no advertising use. Session replay is part of analytics and only runs if you accept analytics.
- Hosting logs. Cloudflare processes standard request data (e.g. IP address) to deliver and protect the site, as any host does.
Cookies & consent
Two categories: essential (the site itself and error monitoring — always on, no tracking) and analytics (GA4 + session replay — off until you accept). Rejecting is one click, same as accepting. Change your mind any time via Cookie settings in the footer.
Sharing & transfers
I never sell, rent, or trade your data. It's shared only with the processors above (formsubmit.co, Resend, Cloudflare, Sentry, Cal.eu, Google) strictly to run these features. Some are in the US and rely on Standard Contractual Clauses / equivalent safeguards for EU transfers.
Retention
Contact messages: kept as long as needed to handle your enquiry. Newsletter: until you unsubscribe. Analytics: per GA4 retention settings. Error data: short-lived, per Sentry's retention.
Your rights (GDPR)
You can request access, correction, deletion, restriction, portability, or object to processing — and withdraw consent any time. Email karolbinkowski3@proton.me. You also have the right to complain to the Polish DPA (UODO).
Last updated: June 2026.