Privacy policy.

Controller and contact

Grzegorz Giovanazzi owns grzegorzgiovanazzi.pl and is the controller of personal information processed through this website. Use the contact form or email kontakt@grzegorzgiovanazzi.pl for privacy requests. Email is also available if form protection prevents you from submitting a request.

Information processed

I receive information you provide: your name, email address, message, and, when requesting an LH.pl code, an optional request for hosting help. Do not provide passwords, payment details, or sensitive information. Required fields are identified in the form and are needed to handle your request.

The server also processes connection information, such as IP address, request time, requested resource, and browser information. Form protection uses security tokens and counters based on keyed hashes of IP and email addresses. These hashes are treated as security-related personal information, not as guaranteed anonymous data.

Purposes and legal bases

• Responding to inquiries and administrative correspondence: the legitimate interest in handling communications (GDPR Article 6(1)(f)).
• Taking steps at your request before a contract and performing a contract: GDPR Article 6(1)(b).
• Delivering the LH.pl code you requested and responding to a request for help: the legitimate interest in fulfilling your request (GDPR Article 6(1)(f)).
• Protecting the website, preventing spam, and establishing or defending legal claims: GDPR Article 6(1)(f).
• Applicable legal obligations arising from a business relationship: GDPR Article 6(1)(c).

Providing information is voluntary. Requesting a code does not subscribe you to a newsletter or authorize future marketing emails. Advertisement - paid partnership with LH.pl. The form does not send your email address to LH.pl as a sales lead.

Recipients and service providers

Website hosting and email are provided through LH.pl. This provider and its authorized subprocessors may process information needed to operate the website and deliver and store correspondence. Email is also processed by the recipient’s email provider. Information may be disclosed to authorized authorities when required by law.

I do not sell personal information or disclose it to advertising networks. Links to portfolio projects and LH.pl lead to independent websites with their own privacy practices.

Form protection and transfers

Cloudflare Turnstile loads when you begin using a form. It evaluates technical signals, including IP, browser, and connection information, to detect automated abuse. Cloudflare acts as a processor when protecting this website and as a separate controller when improving bot detection. See the Turnstile privacy notice.

Global services may involve processing outside the EEA, including in the US. Depending on the transfer, appropriate legal mechanisms apply, such as an adequacy decision or standard contractual clauses. You may request information about applicable safeguards and a copy through the contact details above.

Retention

• Ordinary inquiry correspondence: up to 12 months after the matter is closed.
• LH.pl code requests: up to 6 months after fulfillment. If a business relationship follows, its relevant retention period applies.
• Contractual and legally required records: for the period required by law. Information necessary for legal claims may be retained until the relevant limitation period expires.
• Application abuse counters: valid for 15 minutes to 24 hours. Expired entries are removed the next time the limiter runs. Technical backup copies may remain until the next backup cycle.
• Hosting logs and backups: for the period necessary for security, troubleshooting, and service recovery under the provider’s maintenance cycle. Relevant incident records may be preserved while an incident is investigated.
• Privacy notice setting: valid for up to 180 days, as described in the cookie policy.

The website does not create a database of form messages on the web server. Requests are delivered by email. Email providers and their backup systems may still process this correspondence.

Rights in Europe

Subject to applicable law, you may request access, correction, deletion, restriction, and portability of your information. You may object to processing based on legitimate interests. Where specific processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Submit requests using the contact details above. I respond within the applicable legal period, generally one month under the GDPR. Any extension and its reason will be explained within that period. Proportionate identity verification may be required without collecting unnecessary information.

You may complain to the relevant supervisory authority: the President of the Personal Data Protection Office in Poland, the ICO in the UK, or the FDPIC in Switzerland, where their respective laws apply. Applicable rights depend on the relevant law, not just the language you select.

Visitors from the United States

I do not sell personal information, share it for cross-context behavioral advertising, or conduct targeted advertising. Global Privacy Control does not change this setting: those activities are disabled for every visitor. I do not use sensitive personal information to infer individual characteristics.

Where relevant state laws, including the CCPA/CPRA, apply to the business and your information, they may provide rights to confirm processing, access, obtain a copy, correct, delete, opt out of certain purposes, and appeal decisions. Submit a request or appeal through the form or email, using “Privacy” in the subject. An authorized agent may act for you subject to verification of their authority and, where required, your identity.

Requests and appeals are handled within the periods required by applicable law. A denial includes the reason and information about available appeal options. Exercising applicable privacy rights does not result in discriminatory treatment. Visiting from a particular state does not automatically make every state privacy law applicable.

Additional information

This website offers website design and development services and is not directed to children. I do not make solely automated decisions with legal or similarly significant effects on individuals. Automated form protection may reject a request; email remains available as an alternative.

This notice is updated when website practices or applicable legal requirements materially change. Last updated: September 4, 2026.