← Back to the homepage

Privacy information

Contact form data

This information is provided when the data is collected, in accordance with Article 13 of the General Data Protection Regulation.

1. Data controller

The data controller is ITm8 Piotr Nietrzebka, Polish tax identification number (NIP) 8381773216. For matters concerning personal data, please use the contact form.

2. Purpose and legal basis

We process the data to respond to your enquiry, understand the area of work described and prepare for possible cooperation. The legal basis is Article 6(1)(b) GDPR — taking steps at the data subject's request before entering into a contract — and, for the remaining processing, Article 6(1)(f) GDPR: the controller's legitimate interests in conducting business correspondence, protecting the form and establishing, exercising or defending legal claims.

3. Scope and recipients

We process the data provided in the form: full name, work email address, optional organisation name and enquiry. Data may be disclosed to service providers needed to host and protect the site and deliver email — in particular OpenAI Sites, Cloudflare and Resend — only to the extent necessary to provide those services.

4. Transfers outside the EEA

Service providers may process data outside the European Economic Area. In such cases, transfers are made using safeguards provided by Chapter V GDPR, in particular adequacy decisions or standard contractual clauses.

5. Retention

We retain enquiry data for as long as needed to conduct the conversation and then for no more than 12 months from the most recent contact. This period may be extended where necessary to enter into or perform a contract, comply with a legal obligation, or establish, exercise or defend legal claims.

6. Your rights

Within the limits set by GDPR, you have the right to access, rectify or erase your data, restrict its processing, receive data portability and object to processing. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.

7. Voluntary provision and automation

Providing data is voluntary; however, without your name, email address and description of the area of work, we cannot respond. Form data is not used for automated decision-making or profiling.