Privacy notice · Blazalek.com

Who controls your data?

The data controller is Wojtek Blazalek, who runs blazalek.com.

For privacy questions or to exercise your rights, contact me by email.

What data is processed?

I process only the information needed to run the site, answer you, and arrange work.

Contact form: your name if you provide it, email address, and message.
Urgent-help form: your name, contact details, domain, selected problem and urgency, and the description you send.
Booking: the embedded Cal.com calendar loads when you visit the Contact or Help page. Cal.com may receive technical data from your browser and the details you enter to schedule a call.
Hosting and security: Vercel and the services used by the site may process technical request data such as an IP address, browser or device information, requested URL, and timestamps in technical logs.
Analytics: Google Analytics receives information about page views and interactions, session statistics, approximate location, browser and device information, the page URL, and an IP address sent by your browser. A randomly generated client ID stored in the first-party _ga cookie is used to distinguish browsers and sessions.
Language preference: the NEXT_LOCALE cookie stores “en” or “pl” for one year so the site can remember your language.

Analytics and advertising

Blazalek.com uses Google Analytics 4 (measurement ID G-YWTYGFLPSG) to understand how many people visit the site, which pages they use, and how they interact with the content. Analytics loads automatically when a page is opened and uses the first-party _ga cookie to distinguish a browser and its sessions. The client ID stored in this cookie has a default expiration of two years, which may be refreshed when you revisit the site.

Google signals and advertising-personalization signals are disabled in the site configuration. Google Analytics is used for audience and usage measurement, not to display advertising on blazalek.com. You can prevent Google Analytics from using your browser by blocking or deleting cookies, blocking the Google tag, or installing Google's Analytics opt-out browser add-on linked below.

Why is the data used, and on what legal basis?

To reply to your message, understand your needs, and take steps you request before a possible contract: Article 6(1)(b) GDPR. For general business correspondence that is not pre-contractual, the basis is my legitimate interest in answering inquiries and managing professional relationships: Article 6(1)(f) GDPR.
To provide the embedded Cal.com calendar and arrange a call: taking steps at your request before a possible contract, Article 6(1)(b) GDPR, and my legitimate interest in organizing meetings, Article 6(1)(f) GDPR.
To deliver and protect the site, diagnose failures, and prevent abuse: my legitimate interest in keeping the service secure and reliable, Article 6(1)(f) GDPR.
To measure visits and understand how the site is used through Google Analytics: my legitimate interest in evaluating and improving the site and its content, Article 6(1)(f) GDPR.
To remember your language: my legitimate interest in providing the version of the site you selected, Article 6(1)(f) GDPR.
Where necessary, to meet legal obligations or establish, exercise, or defend legal claims: Article 6(1)(c) or Article 6(1)(f) GDPR.

Who receives the data?

I do not sell personal data or share it for advertising. The following service providers receive data only when needed to provide their part of the site:

Formspree processes submissions from the contact and urgent-help forms and delivers them to me.
Cal.com loads on the Contact and Help pages, processes technical browser data needed to provide the calendar, and processes the details you submit when booking.
Vercel hosts the site and processes the technical data needed to serve and protect it.
Google processes usage and device data as the provider of Google Analytics.
Data may also be disclosed where the law requires it.

International transfers

Formspree, Cal.com, Vercel, and Google operate internationally and may process data outside the European Economic Area, including in the United States. Where the GDPR requires it, such transfers must use a lawful safeguard, such as an adequacy decision or standard contractual clauses. The providers describe their current transfer arrangements in the policies linked above.

How long is the data kept?

Form and booking data is kept for as long as needed to answer you, arrange the meeting, and handle the resulting conversation. If we work together, relevant correspondence may be kept for the duration of the relationship and for as long as required by law or reasonably needed for legal claims.
If no work starts, the data is removed when it is no longer needed to handle the inquiry, unless it must be retained for a legal obligation or a possible claim.
Technical logs are retained according to the applicable service settings and provider retention periods, only for as long as needed for operation, security, and troubleshooting.
Google Analytics user-level and event-level data is retained according to the Analytics property settings. Google currently allows standard GA4 properties to use a retention period of 2 or 14 months for this data; this setting does not control standard aggregated reports. The _ga cookie has a default expiration of two years and may be deleted earlier in your browser.
The NEXT_LOCALE cookie expires after one year. You can remove it earlier in your browser settings.

Your rights

Depending on the circumstances, you can ask for access to your data, a copy, correction, deletion, restriction of processing, or data portability. You can also object to processing based on legitimate interests. Contact hi@blazalek.com to make a request.

You also have the right to complain to the President of the Polish Personal Data Protection Office (UODO).

UODO: rights under the GDPR (opens in a new tab)

Changes to this notice

This notice describes the site as of the date shown above. I will update it when the tools used by the site or the way personal data is processed changes materially.