Home Portfolio Services Blog Contact
Documents

Privacy Policy

Your privacy matters to me. Below I explain in plain terms what data I collect, why, who I share it with and what rights you have. Last updated: October 14, 2026.

This is an English translation of my Polish Privacy Policy. If the two versions differ, the Polish version prevails.

1. Who the data controller is

The controller of your personal data is Yonatan Hanczakowski, an independent graphic designer working in Kraków, Poland. For anything related to personal data, write to me at: hej@yonatan.pl.

2. What data I process

I process only the data I really need:

  • Contact form data: your name or company name, email address, type of service, the content of your message and any files you choose to attach.
  • Project brief data: if we work together, you may get a link to a brief from me. It saves what you enter: answers to questions about the project (e.g. a description of your business, links to your profiles and, if the brief asks for it, contact details such as your name or email), files you add (e.g. logos, photos, recordings) and voice notes, if you record an answer with your microphone instead of typing (the microphone turns on only after you click and your browser allows it). The brief is available only through the link you get from me.
  • Technical data collected automatically: through the Microsoft Clarity analytics tool (including device and browser type, how you move around the site and a truncated IP address). It is used only to analyze and improve the site.

3. Why I process data and on what legal basis

  • Replying to your inquiry and preparing a quote: Article 6(1)(b) GDPR (steps taken before entering into a contract) and Article 6(1)(f) GDPR (my legitimate interest in handling correspondence).
  • Carrying out the project (brief data): Article 6(1)(b) GDPR (performance of a contract) and, when you fill in the brief on behalf of a company or team, Article 6(1)(f) GDPR (my legitimate interest in carrying out the project). Saving a brief does not add you to my mailing list.
  • Commercial and marketing information (offers, materials, newsletter): Article 6(1)(a) GDPR (consent). Sending the contact form means you consent to having your email address added to my mailing list and to receiving commercial information from me. You can withdraw your consent at any time, using the “unsubscribe” link in any message or by emailing hej@yonatan.pl. This does not affect the lawfulness of earlier mailings.
  • Analyzing and improving the site: Article 6(1)(f) GDPR (legitimate interest).

4. Who I share data with

I don’t sell your data or share it for marketing purposes. I do, however, use trusted service providers who process data on my behalf:

  • Brevo: sending emails (contact form messages and notifications about changes to a brief) and managing the mailing list (a provider from the European Union; data processed within the EEA).
  • Cloudflare: website hosting, handling the contact form and storing briefs and the files added to them (a provider from the USA; data transfers based on Standard Contractual Clauses / the Data Privacy Framework).
  • Microsoft Clarity: website traffic analytics (Microsoft; data may be transferred to the USA on the same basis).

5. Cookies and analytics

This site uses Microsoft Clarity, which relies on cookies and similar technologies to analyze traffic and how the site is used. It helps me understand what works well and what needs improving. You can manage cookies in your browser settings; turning them off does not limit access to the site’s content.

The brief page keeps unsaved answers in your browser’s storage (localStorage) so they aren’t lost when you close the tab. This draft stays on your device and disappears once the brief is saved. The content of the brief is hidden from Microsoft Clarity.

6. How long I keep data

  • Correspondence and quotes: for as long as needed to handle the inquiry, and then until any potential claims become time-barred.
  • Brief data (answers, voice notes and files): until the project is finished; after that I delete it from the Cloudflare server. Correspondence about the project is kept as described above.
  • Mailing list data: until you withdraw your consent.
  • Analytics data: in line with the retention periods of Microsoft Clarity.

7. Your rights

With regard to the processing of your data, you have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object, and to withdraw your consent at any time. To exercise these rights, write to hej@yonatan.pl.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Changes to this policy

I may update this policy when tools or regulations change. The current version is always on this page, and the date of the last change is shown at the top.