Privacy Policy

Last updated: 15.09.2026

Draft – to be reviewed by a legal adviser. The text describes the current state of the site.

This is a translation of the Polish-language privacy policy. In the event of any discrepancy between the two language versions, the Polish version prevails.

In brief

The remainder of this document contains the full information required by art. 13 GDPR.

01Who is responsible for your data

The controller of your personal data is Piotr Duda, a sole trader operating under the business name DudaDev Piotr Duda, with a registered business address at Zagonowa 9, 20-828 Lublin, Poland.

Contact in all matters concerning personal data:

We have not appointed a data protection officer – at this scale of activity there is no such obligation. Data matters are handled by the controller personally.

Further on in this document we write “we”. That always means the controller named above.

02What this policy covers

The rapiddev.pl site is a static site. There is no account, no login, no basket, no client area and no form. You can read it and click on the e-mail address, the telephone number, or a link to our external booking calendar. There is no other way of giving us data through this site.

This document provides the information required by art. 13 GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data. The details identifying the business are given on the basis of art. 5 of the Polish Act on Providing Services by Electronic Means (ustawa o świadczeniu usług drogą elektroniczną).

03What this site does not do

We put this first, because these are the things that collect the most data on a typical company site. None of them is present here.

The only outward references are plain text links – for example to profiles on LinkedIn. Until you click such a link, no request goes out to that service.

Visit counter: prepared, but not switched on. The site's code contains data-goatcounter-click attributes on the e-mail and telephone buttons – groundwork for GoatCounter, a simple, cookie-free counter. The counter script is not loaded, so the attributes on their own count nothing and send nothing. If we ever switch it on, we will describe it here before it starts working.

04Contact by e-mail and telephone

The contact buttons on the site are ordinary mailto: and tel: links – they open your own mail program or phone app. Clicking them sends us nothing in itself and records nothing.

If you write or call, we process the data you give us in doing so: your name, e-mail address, telephone number, company name and the content of your enquiry.

We do not ask for consent to process this data and there is no checkbox here. Consent would not be the right basis: without an address or a number, replying is not possible. The provisions cited above are sufficient.

We do not record telephone calls.

05Server logs

Every server on the internet records technical access logs: the IP address, the date and time of the request, the address of the page visited, the type of browser and operating system. This site is no exception. The logs are kept by the hosting provider.

The site is served by Cloudflare, Inc. (the Workers service). Content is delivered from an edge server in Warsaw. On the free plan that we use, Cloudflare does not make request logs available to us – we cannot view them, download them or delete them. They are recorded and stored solely by Cloudflare, for its own technical and security purposes.

We do not use the logs to analyse the behaviour of particular individuals and we do not combine them with correspondence.

06Cookies

This site stores no cookies of its own. It uses no analytical, marketing or profiling cookies and stores nothing in the browser's storage. For that reason no consent banner is required.

The rules on the use of device storage are set out in art. 399 of the Polish Electronic Communications Law of 12 July 2024 (ustawa – Prawo komunikacji elektronicznej, PKE), in force since 10 November 2024. Consent is not required where the storage of information is necessary for the provision of a service expressly requested by the user, or serves solely to transmit data. We store nothing.

The hosting provider could, independently of us, store a technically necessary cookie – for example one connected with protection against attacks. We checked this on the live site on 15.09.2026: Cloudflare stores no cookie here. No server response contains a Set-Cookie header. The features that set such cookies (Bot Fight Mode, anti-bot challenges, Cloudflare analytics) are switched off. Should we enable any of them, we will update this section.

Cloudflare sends Report-To and NEL (Network Error Logging) headers. These are not cookies and are not used for tracking, but they instruct the browser to report network errors to Cloudflare – such a report contains the IP address. We have no access to this data and it cannot be switched off on the free plan.

You always manage your browser's storage yourself – in its settings you can delete stored data or block it from being stored.

07Who we pass your data to

We do not sell data and we do not share it with anyone for their own purposes. E-mail correspondence by its nature passes through a mail provider – ours and yours. Our provider processes data on our behalf and on our instructions (a processor, art. 28 GDPR):

WhoWhat they doWhere
Google (Google Workspace) operating our e-mail inbox Ireland / USA
Cloudflare, Inc. serving the site and access logs USA; edge server in Warsaw
Calendly, LLC scheduling calls, if you use the calendar USA

In addition, if contact leads to cooperation:

08Transfers of data outside the EEA

Using the services of the providers named in section 07 involves processing data outside the European Economic Area – either directly or through sub-processors established in the United States. The legal bases for such transfers are set out below.

The providers maintain public lists of their sub-processors and undertake to give advance notice of changes.

09How long we keep data

Type of dataHow long
Correspondence that did not lead to cooperation up to 12 months from the last contact, then deleted
Correspondence and documents that led to a contract for the duration of the cooperation, and thereafter until the limitation period for mutual claims expires
Accounting and tax documents 5 years, counted from the end of the calendar year in which the tax payment deadline fell
Server logs decided by Cloudflare – we have no access to them and cannot delete them. Cloudflare does not publish a specific period; it states that it keeps such data “for a limited period”.

10Your rights

In relation to your data you have the right to:

To exercise any of these rights, just write to kontakt@rapiddev.pl or to call +48 530 056 284. No letter, form or justification is needed. We reply without undue delay, and at the latest within one month.

Right to lodge a complaint. If you consider that we process your data unlawfully, you can lodge a complaint with the supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych
(President of the Personal Data Protection Office – the Polish supervisory authority)
ul. Stawki 2, 00-193 Warszawa, Poland
uodo.gov.pl

11Whether you have to provide data

Providing data is voluntary – there is no provision of law obliging you to do so. Without an e-mail address or a telephone number, replying is not possible. We do not require any particular data; contacting us by telephone does not require leaving any data in writing.

12Automated decisions and profiling

We do not take decisions about you by automated means and we do not profile you within the meaning of art. 22 GDPR. No script runs on this site that could do so. Every message is read by a person.

13Marketing

We do not carry out electronic marketing through this site. There is no newsletter, we do not send offers to people who have written with a question, and we do not use their addresses for anything other than a reply.

If that were ever to change, sending commercial information would require your separate, prior consent – in accordance with art. 398 PKE (the Polish Electronic Communications Law) – which we would request separately and which can be withdrawn at any time.

14Changes to this policy

If the way the site works changes – a form, a visit counter, anything else – we will update this document first and deploy the change afterwards. The date at the top always says when the current version was published.