Privacy Policy
This policy explains what personal data I collect through thedirectory.dev, why I collect it, who it is shared with, and the rights you have under the General Data Protection Regulation (GDPR / RODO).
1. Who is responsible for your data
The data controller is:
Tomasz Kurzątkowski (trading as DIRECTORY), sole proprietorship (jednoosobowa działalność gospodarcza)
NIP: 5211412067
Address: ul. Karola Jana Chodkiewicza 6/18, 02-593 Warszawa, Poland
Email: hello@thedirectory.dev
For any question about this policy or your personal data, contact me at the email above.
2. What data I collect, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Contact form: your name, email address and message | To read and respond to your enquiry and, where relevant, take steps toward a possible engagement | Art. 6(1)(b) — steps at your request prior to a contract; and/or Art. 6(1)(f) — my legitimate interest in responding to enquiries |
| Analytics data via Google Analytics 4 (device/browser info, approximate location, pages viewed, interactions; identifiers stored in cookies) | To understand how the site is used and improve it | Art. 6(1)(a) — your consent (analytics run only after you accept in the cookie banner) |
| Server/access logs (IP address, timestamp, requested page, user-agent), processed by my hosting provider | To deliver the website, ensure security and stability | Art. 6(1)(f) — legitimate interest in a secure, functioning site |
Providing your data through the contact form is voluntary, but without it I cannot respond to your enquiry.
3. Cookies and consent
On first visit you see a banner asking whether to allow analytics cookies. No analytics cookies are set until you click “Accept.” This is implemented with Google Consent Mode, which keeps analytics storage denied by default.
- Analytics cookies (set only after consent): Google Analytics uses cookies such as
_gaand_ga_<id>to distinguish visitors. Typical lifetime up to 2 years. - Your consent choice is stored locally in your browser (local storage key
dir_consent) so you are not asked again on every visit. It contains no personal identifier.
You can withdraw consent at any time by clearing this site’s data in your browser (which removes the stored choice and shows the banner again), or by declining analytics. You can also block or delete cookies in your browser settings.
4. Who your data is shared with (processors)
I do not sell your data. I use the following service providers, who process data on my behalf under data-processing terms:
- Web3Forms — receives contact-form submissions and delivers them to my inbox by email.
- Google (Google Analytics 4, Google Fonts) — provides website analytics (after consent) and serves the site’s web fonts. Loading Google Fonts transmits your IP address to Google so the fonts can be delivered.
- Netlify — hosts the website and processes technical server logs needed to serve it.
Emails you send me, and the replies, are handled through my email provider.
5. International transfers
Some of these providers are based in, or process data in, the United States. Where personal data is transferred outside the European Economic Area, it is protected by appropriate safeguards under the GDPR — such as the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. You can request more information using the contact details above.
6. How long I keep your data
- Contact enquiries: kept for as long as needed to handle your request and any resulting conversation or engagement, and afterwards only as required to establish, exercise or defend legal claims, then deleted.
- Analytics data: retained according to Google Analytics’ configured retention period; aggregated reports may be kept longer.
- Server logs: kept for a short period for security and diagnostics.
7. Your rights
Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to its processing; data portability; and — where processing is based on consent — to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact me at hello@thedirectory.dev.
You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw — uodo.gov.pl.
8. Automated decision-making
I do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
9. Changes to this policy
I may update this policy as the site or applicable law changes. The “last updated” date at the top reflects the current version.