GDPR, in plain language
Privacy policy
In short: I only collect what you type into a form, I use it solely to reply to you, and I don't sell it to anyone.
Who the data controller is
Tomasz Stachowiak, trading as TSoftware, ul. Sportowa 10E, 58-130 Mrowiny, Poland, NIP (VAT ID) 8842684500. Contact: kontakt@tsoftware.online, phone +48 503 844 406.
What data and why
- Contact form, calculator and configurator. Your name, email address, company name (if you give it), the content of your message and the values you set in the calculator or configurator. Purpose: replying to your enquiry and preparing a quote (Art. 6(1)(b) and (f) GDPR).
- Free PDF. Your email address. Purpose: sending you the link to the file (Art. 6(1)(b) GDPR). If you also tick the consent box, I'll occasionally send a note about new material (Art. 6(1)(a) GDPR); you can withdraw that consent at any time with a single email.
- WhatsApp. If you message me on WhatsApp, the conversation runs in Meta's app under Meta's own terms; I see your number and the content of your messages.
- Technical data. When a form is submitted, the server stores a truncated IP address (without the last octet) and basic browser details, solely to protect against abuse.
Newsletter
If you sign up for the newsletter, I store your email address, language, where you signed up (home page or blog), the date and a truncated IP address. Signing up takes two steps: after you enter your address you get an email with a confirmation link, and only once you click it are you added to the list. I send at most one email a week with new blog posts, no advertising offers. Every message has an unsubscribe link; unsubscribing works immediately and needs no login. Links in the email pass through a click counter on my server (I only count the number of clicks in a campaign, not who clicked). Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the link in the email or by writing to kontakt@tsoftware.online.
How long
I keep enquiries until our conversation is over and for no longer than 3 years after the last contact (the limitation period for claims). PDF and newsletter sign-ups are kept until you withdraw consent; unconfirmed addresses are deleted after 30 days.
Who I share it with
Nobody, for marketing purposes. Data may reach the providers I rely on technically: hosting (a server in the European Union), email and the newsletter delivery provider (an SMTP server or Brevo, with servers in the EU), and WhatsApp (Meta) if you choose that channel yourself. Each provider is bound by a data processing agreement or standard contractual clauses.
Cookies, consent and ads
On your first visit you'll see a bar with a choice. Three categories:
- Necessary (always on): keeping the site and forms working, remembering your theme, the intro and your consent choices. These are technical settings in your browser's storage and they don't identify a person.
- Analytics (with consent): tools for measuring how the site is used, such as Google Analytics via Google Tag Manager. If I use Plausible, it works without cookies and without consent, because it doesn't identify people.
- Marketing (with consent): measuring how well ads perform and tailoring them: Google Ads (Google Ireland Ltd.) and Meta Pixel (Meta Platforms Ireland Ltd.). Without consent these scripts don't load at all, and Google only receives a "no consent" signal (Consent Mode v2), with no cookies or identifiers.
You can change your choice at any time via the "Privacy settings" link in the footer. Consent is remembered for 12 months; if this policy changes, I'll ask again. If your browser sends a Global Privacy Control or "Do Not Track" signal, the optional tools are switched off without asking.
The page address may contain campaign parameters (utm, gclid, fbclid). I store them in your browser for 30 days and attach them to your enquiry, so I know which ad brought you here. This doesn't identify a person.
Technical data in your browser
Fonts and all of the site's scripts are hosted on my own server, with no connections to third parties until you consent to the tools in the categories above. In your browser's storage (localStorage) I save: your colour theme, a note that the intro has already played, your consent choices, campaign parameters from the address, and a copy of the site's public settings (prices, contact details).
The admin panel (available only to me) uses a single session cookie for login.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, to object, and to withdraw consent. An email is enough. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), the Polish supervisory authority.
Do you have to provide data
No, but without an email address I'll have no way to reply.