Privacy policy

updated:

I receive your personal data when you send the contact form or email me. This page explains what happens to it.

Controller

The data controller is Marcin Krajewski MK Works, Tax ID (NIP) 1251390499. For anything about your data, write to hej@mkworks.studio.

What data and why

The form sends me your name, email address and message. I use them to reply, prepare a quote and talk about working together.

The legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (my legitimate interest in replying to your message and following up on it). If we sign a contract, I also keep some data because the law requires it, for example tax law (Article 6(1)(c) GDPR).

Giving me your data is voluntary. Without an email address, though, I can't reply.

Who receives the data

  • Formspree, Inc. (USA) runs the form: it receives your message and emails it to me. It stores submissions on Amazon Web Services servers in the United States. Formspree states that it relies on Standard Contractual Clauses for transfers to the US (Article 46(2)(c) GDPR). From formspree.io/security, as of 18 October 2026: “We rely on Standard Contractual Clauses (SCCs) as a data processor.” More in Formspree's privacy policy.
  • Cloudflare, Inc. (USA) hosts this site and forwards email sent to hej@mkworks.studio. Like any server, it processes technical connection data such as your IP address to deliver the site and protect it from attacks (Article 6(1)(f) GDPR). For visitor statistics I use Cloudflare Web Analytics, which, according to Cloudflare, uses no cookies and collects no personal data. Cloudflare takes part in the EU-U.S. Data Privacy Framework, so transfers to the US rely on the European Commission's adequacy decision (Article 45 GDPR).
  • Google Ireland Limited provides the mailbox where I read messages. Data may be transferred to Google LLC in the US, which takes part in the EU-U.S. Data Privacy Framework (Article 45 GDPR).

How long

I keep inquiry data for as long as I need to reply and finish talking about working together, for no more than 2 years after the last message. If we sign a contract, I keep it for the duration of the contract and for as long as the law requires, for example tax law (Article 6(1)(c) GDPR).

Your rights

You have the right to:

  • access your data,
  • have it corrected,
  • have it erased,
  • restrict processing,
  • object to processing,
  • data portability.

Just write to hej@mkworks.studio. I don't make automated decisions about you or profile you.

Complaints

If you believe I process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes UODO, uodo.gov.pl).