Privacy Policy

Last updated: 12 October 2026

1. Data Controller

2. Personal Data and Legal Bases

Enquiries and freelance projects

I process names, contact details, correspondence, project information and billing details to respond to enquiries, prepare quotations, perform freelance services and manage client relationships.

The legal bases are Article 6(1)(b) GDPR for contracts or steps requested before entering into a contract, Article 6(1)(f) for my legitimate interest in communicating with business representatives, and Article 6(1)(c) for legal and accounting obligations.

Information necessary to prepare or perform a contract must be provided for that purpose. Without it, I may be unable to prepare a quotation or provide the requested services.

Business proposals

I process publicly available business contact details, names, professional roles, website information and correspondence to identify and contact businesses about relevant freelance design and website services.

This information is obtained from company and organisation websites, public business directories, professional directories and business listings.

The legal basis is Article 6(1)(f) GDPR. My legitimate interest is promoting my freelance services to relevant businesses and developing professional relationships.

Electronic marketing communications are sent only where permitted by applicable Irish electronic-marketing rules.

Website operation

My hosting provider, webd.pl, may process IP addresses, browser information, requested pages and server logs to deliver and secure the website. The legal basis is Article 6(1)(f) GDPR: my legitimate interest in operating a secure website.

Website analytics

Google Analytics 4 processes website usage information, including online identifiers, device information, approximate location and page activity, where the visitor consents.

The legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time through the website's cookie preferences controls. Withdrawal does not affect processing carried out before consent was withdrawn.

3. Recipients and International Processing

Personal data may be disclosed to providers of website hosting (webd.pl), business email (WP Poczta), cloud storage (Google Drive), website analytics (Google), font delivery (Google Fonts) and cookie consent management (TermsFeed).

I access business and client information while working from Thailand. Certain service providers may also process personal data outside the European Economic Area (EEA).

[Insert verified details of applicable third-country transfers, adequacy decisions or other safeguards, and how to obtain a copy of those safeguards, where required.]

4. Data Retention

Unanswered business proposals: up to 6 months after the last contact.
Business discussions without an agreed project: up to 12 months after the last meaningful communication.
Completed client projects and related records: generally 3 years after project completion, unless a longer period is necessary.
Accounting and tax records: generally 6 years, or longer where required by law.
Marketing opt-out records: for as long as necessary to prevent further unwanted marketing.
Server logs: according to the period necessary for website operation and security and the hosting provider's applicable retention settings.
Google Analytics data: according to the configured retention period and applicable Google Analytics settings.

5. Data Protection Rights

Under GDPR, subject to applicable conditions, individuals have rights of access, rectification, erasure, restriction of processing, data portability and objection to processing.

You have the right to object to the processing of your personal data for direct marketing at any time.

To object to marketing, reply to the email you received or contact contact@ratajpiotr.pl .

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You have the right to lodge a complaint with a data protection supervisory authority.

To exercise your data protection rights, contact contact@ratajpiotr.pl .

6. Cookies

This website uses Google Analytics cookies for website traffic measurement and TermsFeed technology to manage cookie consent.

Analytics cookies require consent before they are stored. Visitors can accept, reject or withdraw consent through the cookie consent controls.

Information about cookie names, purposes and lifetimes is provided through the website's cookie information.

Cookie preferences can be changed using the Cookie preferences control available on the website.

Piotr Rataj