1. Data Controller
The controller of your personal data is Oskar Gołosz, operating as a sole trader under the business name Oskar Gołosz Design, based in Warsaw, Poland, Tax ID (NIP): 1182207048, REGON: 385677900 (the "Controller").
For any questions regarding your personal data, contact: oskargolosz@gmail.com.
2. What data we process and why
This website is a professional portfolio. We do not sell products online or create user accounts. We process personal data in the following cases:
a) Contact form. When you submit the contact form, we process the data you provide (such as your name, company and e-mail address). This data is delivered to us as an instant notification via the Telegram messaging service, which we use as an internal notification tool; the message always includes your e-mail address so that we can reply to you.
Purpose: to respond to your enquiry, hold correspondence, and - where relevant - send you access credentials (a password) to the protected "Selected Work" section of this site.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries) and, for matters relating to potential cooperation, Art. 6(1)(b) GDPR (steps taken prior to entering into a contract).
b) Scheduling meetings (Calendly). To book a meeting we use the third-party tool Calendly. When you enter your details into the booking form (such as your name, e-mail address and chosen time slot), your personal data is processed by Calendly in accordance with its Privacy Policy.
Legal basis: Art. 6(1)(b) and (f) GDPR (arranging a meeting, business contact).
Providing your data is voluntary. However, failure to provide the required data may prevent us from responding to your enquiry, sending you access credentials, or arranging a meeting.
3. Protected content and access credentials
Part of this website (the "Selected Work" section) is protected and encrypted. To view it, an access password is required, which we may send to the e-mail address you provide. We ask that you keep this password confidential and do not share it further. We reserve the right to grant or deny access to this section at our discretion.
4. Recipients of your data
Your data may be shared with trusted parties that support the operation of this website and our communication, in particular:
- Vercel Inc. - website hosting and infrastructure, including the serverless functions that process your contact-form submission,
- Calendly LLC - for handling meeting bookings,
- Telegram - used solely to send us notifications about new contact-form submissions (the sender's name, company and e-mail address).
5. Transfers outside the EEA
Some of the tools we use (including Vercel, Calendly and Telegram) are provided by entities based outside the European Economic Area. This may involve transferring your data outside the EEA. Such transfers are carried out on the basis of appropriate safeguards under the GDPR (such as Standard Contractual Clauses). For details, see:
- Vercel Privacy Policy: https://vercel.com/legal/privacy-policy
- Calendly Privacy Policy: https://calendly.com/privacy
- Telegram Privacy Policy: https://telegram.org/privacy
6. How long we keep your data
Contact enquiries (including form submissions and related Telegram notifications) are generally retained for up to 24 months after the last correspondence, unless a longer retention period is necessary for legal or business purposes, after which they are deleted. We keep data relating to booked meetings for as long as needed to hold the meeting and for any subsequent cooperation.
7. Your rights
You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, and object to processing based on our legitimate interest. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland). To exercise these rights, contact us at: oskargolosz@gmail.com.
8. Cookies and tracking technologies
This website does not use its own cookies for marketing or analytics purposes. We do not use Google Analytics, Meta Pixel or similar tracking technologies. Fonts are served directly from our own server (not fetched from third-party services). When you use the embedded Calendly tool, cookies necessary for its operation may be stored, managed by that tool's provider.
9. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy. The current version is always available on this page, and the date of the latest change is shown at the top.