Skip to main content

Privacy Policy

Last updated: April 9, 2026

1. Data Controller

The controller of personal data collected via gromek.dev is Marcin Gromek, operating a sole proprietorship as a Frontend Developer, based in Poland.

Controller details:

2. Data Collected

gromek.dev is a portfolio / business-card website and does not use contact forms, user registration, or user accounts. The following data may be processed in connection with your visit:

  • Technical data — IP address, browser type and version, operating system, device type, screen resolution, language, referrer, date and time of visit. Automatically logged by the hosting provider (Netlify) and — with your consent — by Google Analytics.
  • Data from direct contact — if you email or call the addresses listed above, any data you voluntarily share (name, email, message content, etc.) will be processed.

3. Purposes and Legal Bases

Your data is processed for the following purposes, based on GDPR:

  • Ensuring the site's operation and security — Art. 6(1)(f) GDPR (legitimate interest).
  • Analytics and statistics (Google Analytics 4) — Art. 6(1)(a) GDPR (consent given via the cookie banner).
  • Handling inquiries sent by email or phone — Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR.

4. Cookies

This site uses cookies (small text files stored by your browser) in two categories:

  • Necessary — required for the site to function correctly (e.g. remembering your cookie choice and your light/dark theme preference). Stored in browser localStorage. No consent required.
  • Analytics (Google Analytics 4) — loaded only after you give consent via the cookie banner. Used to anonymously measure traffic and site usage. Measurement ID: G-WT3CP8NSDK.

You can withdraw consent at any time by clearing site data in your browser — the banner will reappear on your next visit. Most browsers also let you manage cookies globally in settings.

5. Data Recipients

Data may be shared with the following processors:

  • Netlify, Inc. — hosting provider (server logs).
  • Google Ireland Limited / Google LLC — Google Analytics 4 provider (only with consent). This may involve transfer outside the EEA; Google ensures appropriate safeguards through Standard Contractual Clauses.

6. Retention Periods

  • Server logs — according to Netlify's policy (typically up to 30 days).
  • Google Analytics data — per account settings, up to 14 months.
  • Email correspondence — for the time needed to respond and for any resulting cooperation, then until claims become time-barred.

7. Your Rights

Under GDPR you have the right to:

  • access your data and receive a copy,
  • rectify (correct) your data,
  • erase your data ("right to be forgotten"),
  • restrict processing,
  • data portability,
  • object to processing,
  • withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
  • lodge a complaint with a supervisory authority — in Poland: President of the Personal Data Protection Office (uodo.gov.pl).

To exercise these rights, contact: gromek.marcin@outlook.com.

8. Links to Third-Party Services

This site contains links to external services (LinkedIn, GitHub). The controller is not responsible for the privacy practices of those services — please review their respective privacy policies directly.

9. Changes to This Policy

This policy may be updated. The last update date is shown at the top of the page. For material changes, a notice will be displayed in a prominent place.