Effective from .
This website processes the information needed to reply to messages and AI chat questions, together with technical data needed to operate the site. I use GoatCounter for aggregate pageview statistics without analytics cookies. The details are below.
1. Who is responsible for your data
I am the data controller: Rafał Mokrowiecki. For matters concerning your data, write to kontakt@mokrowiecki.pl.
2. What data I collect
Contact form and email. Your name, your email address and whatever you write in the message. Depending on the subject, also: the job title and the name of your company or recruitment agency, or a description of a problem and the approximate number of employees in your company.
The contact form is handled by a Cloudflare Worker. It sends the message through OVHcloud MX Plan using SMTP to my mailbox. If you wish, you can indicate how you found the website, for example through LinkedIn or a recommendation. Answering is voluntary.
AI chat. Your question and the public website content needed to prepare a response are sent to Cloudflare Workers AI. Each question is considered separately. Responses use the published website material and include source links. Do not enter personal or confidential information in the chat.
Visit statistics. GoatCounter records aggregate pageview counts, page paths and titles, and the domain referring a visitor. The integration removes query strings and URL fragments and does not send form contents, AI chat questions or answers from the IT self-assessment. Sessions, individual pageview records, browser, screen size, language and location statistics are disabled. These are pageview counts, not a count of distinct people. Do Not Track and Global Privacy Control are respected. The browser makes a direct connection to GoatCounter, which receives the IP address needed for that connection; according to its policy, it does not store IP addresses in its database.
Please do not include data that I do not need in order to reply, especially health data or data about other people.
IT Self-Check in 5 Questions. Your answers are processed only in your browser. They are not sent to a server or to me until you send them. If, at the end, you move the answers into the form and send the message, they become part of the correspondence and the rules in section 4 apply to them.
Technical data. The website runs on servers of Cloudflare, which records basic connection data in its server logs, including the IP address, the date and time, and the browser type. This serves the security and correct operation of the website. I do not link this data to specific people. Cloudflare, not I, decides how long it is kept.
3. Why and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your message and further correspondence | My legitimate interest: conducting the correspondence you ask for (Article 6(1)(f) GDPR) |
| Assessing which sources lead to contact, and whether the website does its job | My legitimate interest (Article 6(1)(f) GDPR) |
| Preparing a proposal for cooperation, if you ask for one | Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) |
| Conversations about employment, if you write as a recruiter or employer | My legitimate interest: contact about a job offer (Article 6(1)(f) GDPR) |
| Security and correct operation of the website | My legitimate interest (Article 6(1)(f) GDPR) |
| Defending against or pursuing legal claims | My legitimate interest (Article 6(1)(f) GDPR) |
| Providing a source-based response to a question you choose to ask in the AI chat | My legitimate interest: providing information about my experience and publications in response to your question (Article 6(1)(f) GDPR) |
Providing the data is voluntary. Without an email address I will not be able to reply.
I do not send marketing messages and I do not add your address to any mailing list.
4. How long I keep the data
I keep correspondence for the duration of the conversation and for 12 months after the last message. If we start working together, I keep the data connected with that work for as long as the law requires (for example tax and accounting rules) and until any claims expire under the statute of limitations.
Aggregate GoatCounter statistics are retained for up to 365 days. The analytics integration does not set cookies or store data in browser storage. The dashboard is accessible only to logged-in account users.
The application does not save chat history on the server. Cloudflare’s processing rules, including operational metadata and exceptions, are described in the Workers AI data usage documentation. The correspondence retention period above applies to messages sent to me, not to AI chat questions.
You can ask for your data to be deleted earlier. I will delete it unless I have to keep it because of a legal obligation or to defend against legal claims.
5. Who receives the data
I do not sell data or share it for marketing purposes. I use the following service providers:
- Cloudflare, Inc. — website hosting, domain name service (DNS), the Worker that handles the contact form, and Workers AI processing of chat questions and responses;
- OVHcloud — SMTP delivery through MX Plan and the mailbox kontakt@mokrowiecki.pl.
- GoatCounter, operated by Martin Tournoij in Ireland — aggregate pageview statistics; data is hosted by Hetzner in Finland and Germany. GoatCounter privacy policy.
The providers process the data as part of their services and under their own privacy policies.
6. Data outside the EEA
Cloudflare operates internationally. In providing website hosting, contact-form handling and Workers AI, data may be processed outside the European Economic Area. The applicable processing and international transfer terms are described in the Cloudflare Customer Data Processing Addendum.
7. Your rights
You have the right to:
- access your data and receive a copy of it;
- have your data rectified;
- have your data erased;
- restrict processing;
- object to processing based on my legitimate interest;
- receive the data provided to me in connection with a proposal for cooperation in a commonly used format, and have it transmitted to another controller.
To exercise these rights, write to kontakt@mokrowiecki.pl. I will reply within one month at the latest.
You can also lodge a complaint with the President of the Personal Data Protection Office in Poland (Urząd Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, uodo.gov.pl).
8. Automated decisions
I do not make decisions about you by automated means and I do not carry out profiling.
9. Cookies and browser storage
I do not use cookies of my own: neither for statistics nor for advertising. If you change the language of the website, your choice is remembered for the duration of your visit, so that the following pages open in the same language. Cloudflare may set a cookie that is necessary to protect the website against abuse. None of this is used for tracking.
10. Links to other websites
The website contains a link to my profile on LinkedIn. Once you go there, the privacy rules of that service apply.
11. Changes
If the way the website works changes, I will update this document and give a new date from which it is in force.