Privacy Policy
Contents
Published: 01.03.2026
Last updated: 13.04.2026
This website follows a practical and minimalist approach to data protection. Only data necessary for communication, security, and basic analytics is processed. The aim is transparency, simplicity, and alignment with real operational needs. This document fulfills the information obligations under Article 13 of the GDPR.
1. Data Controller
The data controller is Andrzej Dudek, a natural person residing in Poland, who operates this website.
For all data protection matters, please contact: andrzej.dudek@securehavenet.ovh
2. Scope and Purpose of Data Processing
Data is processed only when necessary and for clearly defined purposes:
- Contact form: processing of email address and message content to respond to inquiries and maintain communication.
- Security and administration: processing of technical data (e.g., IP address, browser type, timestamps). IP addresses are treated as personal data and are processed only for security purposes.
- Analytics: analysis of website usage patterns to improve content and usability - only after the user gives voluntary consent.
3. Legal Basis
- Art. 6(1)(a) GDPR - voluntary consent (analytics, contact form submission).
- Art. 6(1)(f) GDPR - legitimate interest (security of the hosting cluster and communication handling).
4. Analytics (Google Analytics 4)
This website uses Google Analytics 4. This service is activated only after you give consent in the cookie banner. Data is used to improve the website. According to Google documentation, GA4 uses the IP address during data collection to determine approximate location, but does not log or store IP addresses. Data may be transferred to the USA based on Standard Contractual Clauses (SCC).
5. Contact Form
The technical operation of the contact form is provided by Formspree Inc. based in the USA. Form data is sent over HTTPS to Formspree, which processes the submission and forwards the message to my email inbox. Transfer to the USA is based on Standard Contractual Clauses (SCC).
Reader feedback
The separate reader feedback form uses Google Apps Script and Google Sheets. It records the feedback type, optional article or project reference, message, optional email address, submission time and a technical submission identifier. These data are used to review suggestions, clarify or correct content and reply where appropriate. Providing an email address is optional and does not subscribe you to marketing communications. Responses are stored in a private spreadsheet and are not automatically published.
Feedback is handled as correspondence under the legitimate interest described in section 3. Submissions are retained for 12 months from receipt and then removed through a manual review. This is not an automatic deletion feature. Technical data processed by Google, international processing and provider retention are described in the Google Privacy Policy.
6. Data Sharing
Data may be shared only with trusted technology partners:
- OVHcloud (OVH SAS): server infrastructure provider based in France.
- Google: for analytics (only with consent), and for hosting the separate reader feedback form and storing its responses in Google Sheets.
- Formspree Inc.: for contact form message delivery.
7. Data Retention
- Hosting and technical logs (OVHcloud): Retention depends on the type of log and the hosting service terms. OVHcloud’s privacy policy specifies up to 12 months for certain logs concerning account, product and service security. This is not a uniform period for all website visitor logs. Details: OVHcloud privacy policy.
- Analytics (GA4): User-level and event-level data retention depends on the property settings. Standard GA4 offers a choice of 2 or 14 months. This setting does not apply to standard aggregated reports. Details on retention scope and deletion: Google Analytics documentation.
- Submission copies and technical data held by Formspree: These are separate from correspondence in my mailbox. Submission history availability depends on the service plan; the 30 days described for the Free plan do not mean that all provider-held data is deleted after that period. Formspree bases retention on the time needed to provide its services, meet legal obligations and resolve disputes. Details: Formspree privacy policy and submission history limits.
- Email contact: I retain ordinary inquiries in my mailbox for 12 months after the end of contact and then delete them. I review correspondence quarterly to assess whether it still needs to be retained. If a specific message must be kept to meet a legal obligation or to establish, exercise or defend legal claims, I retain it only for as long as necessary for that purpose.
8. User Rights
You have the right to:
- Access, rectify, or delete your data.
- Restrict or object to processing.
- Data portability and withdrawal of consent.
- Lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office - PUODO).
9. Cookies
This website uses cookies in a minimal way:
- Essential cookies: required for basic operation and security.
- Analytics cookies: used only after explicit consent (opt-in).
A simple consent mechanism (cookie banner) allows you to manage your choice. Your decision is stored in the browser’s localStorage and treated by the website as valid for 180 days. After this period, the banner appears again on your next visit. You can change it at any time by clearing your browser data or clicking the "Manage cookies" link in the footer. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. No profiling or marketing cookies are used.
10. Data Security
Technical measures such as SSL/TLS encryption, limited access, and data minimization are applied to protect your information. The contact form is protected by Google reCAPTCHA mechanism to prevent spam and automated attacks.
11. Contact & Data Protection Officer
For inquiries: andrzej.dudek@securehavenet.ovh. A Data Protection Officer has not been appointed, as it is not required under applicable law.