Privacy statement

Who is responsible

The controller of your personal data is:

What data I collect and why

The contact form is the only place where this website collects personal data. When you send an inquiry, the following is processed:

• Name or company name: To address you properly in my reply (You type it in the form)
• Email address: To send you a reply and a confirmation of receipt (You type it in the form)
• Your message: To understand and answer your request (You type it in the form)
• Language (en/nl/pl): To reply in the language you used (Detected from your browser or your choice)
• IP address: Spam and abuse protection only (Sent automatically by your browser)

The IP address and language are added to the notification email I receive. They are not used to identify or track you, and never for marketing.

Your data is never used for newsletters, marketing, advertising or profiling. There is no automated decision-making.

How long I keep it

• Inquiries that do not lead to work: Deleted no later than 24 months after our last contact
• Correspondence with clients: Kept for the duration of the project and 24 months afterwards
• Invoices and accounting records: 7 years — required by Dutch tax law

Who else sees it

I do not sell your data and do not share it with third parties for their own purposes. The only party that technically processes it on my behalf is:

• TransIP B.V. (Netherlands): Hosting and email server. Your data stays inside the EU.

No data is transferred outside the European Economic Area.

Cookies

This website uses exactly one cookie:

• sw_lang: Remembers the language you selected (EN / NL / PL) (12 months, Functional)

It is only stored if you click a language yourself. It holds nothing but a two-letter code, cannot identify you, and is not shared with anyone.

If you do not want the cookie, you do not have to do anything: as long as you do not pick a language manually, none is stored. You can also delete or block cookies in your browser settings.

External resources

Security

The connection to this website is encrypted with SSL/TLS. Email is sent over an encrypted SMTP connection. Only I have access to the inbox that receives your inquiries.

Your rights

Under the GDPR you may ask me to:

• give you a copy of the data I hold about you (right of access)
• correct data that is wrong (rectification)
• delete your data (erasure)
• restrict what I do with it (restriction)
• object to processing based on legitimate interest
• hand your data to you or another party in a common format (portability)

Email me at info@starostkaweb.com and I will respond within 30 days. I may ask a question to confirm it is really you, so I do not send your data to someone else.

Complaints

If you think I handle your data incorrectly, please tell me first — I would like the chance to fix it. You also have the right to lodge a complaint with the Dutch data protection authority, Autoriteit Persoonsgegevens.

Changes

If this statement changes, the date at the top of this page changes with it. Significant changes will be announced on the website.