Privacy
Privacy policy
This site collects as little as it can: what you send through the contact form or the booking calendar, and anonymous visit counts without cookies. Nothing is sold or used for advertising.
Last updated 15 Oct 2026
Who is responsible
The controller of your personal data is Wojciech Król, PaxCode, VAT ID PL8982298501, Poland. For anything about your data, write to hello@paxcode.it.
What data is collected, and why
Contact form and email
Your name, email address, company (optional) and message. They are used only to reply to you and, if we decide to work together, to prepare that work. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and the legitimate interest of answering enquiries (Art. 6(1)(f)).
To stop spam, the form counts submissions per address: your IP address is turned into a salted one-way hash and the count is deleted after about an hour. The IP address itself is never stored. Legal basis: legitimate interest in keeping the form secure (Art. 6(1)(f)).
Booking a call
The calendar on the contact page is provided by Cal.com and loads from its servers, so opening that page
connects your browser to Cal.com. When you book, Cal.com collects what you enter (name, email, notes) and sends
PaxCode the booking. Cal.com may set a strictly necessary cookie used by its network provider for bot protection
(__cf_bm). Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)).
Analytics
Visits are counted with Umami, a privacy-focused tool that sets no cookies and does not identify or follow individual visitors. It records the page, referrer, browser, device type and country, in aggregate. Legal basis: legitimate interest in knowing which pages are read (Art. 6(1)(f)).
Server logs
Pages are served by Amazon CloudFront. Errors of the contact form are logged without the content of your message and kept for one month. Email delivery events (delivered, bounced) are kept for three months; they include the message subject, which contains the name you entered.
How long it is kept
- Messages and booking details: as long as the conversation or the resulting work needs them, then deleted, at most two years after the last contact, unless the law requires longer (for example invoices).
- Spam counter (hashed IP): about one hour.
- Contact form error logs: one month. Email delivery events: three months.
- Analytics: aggregate statistics only, no personal data.
Who processes it for PaxCode
- Amazon Web Services: hosting (S3, CloudFront), the contact form and email delivery (Amazon SES), EU (Frankfurt).
- Google Workspace: the mailbox that receives your message.
- Cal.com: scheduling calls.
- Umami: cookieless analytics, data stored in the EU.
Some of these providers are based in the United States. Where data leaves the European Economic Area, it is protected by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework, as provided by each provider.
Your rights
You can ask for access to your data, its correction, deletion or restriction, object to its processing, and ask for a copy in a portable format. Write to hello@paxcode.it; a reply follows within one month at the latest. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or with the authority in your country.
No decisions about you are made automatically, and no data is used for profiling or advertising.