what this site does with your data.

The controller is Dawid Winiarski, contact dawid@dawid.xyz. This page describes the site as it is configured today. Last updated 29 October 2026.

reading the site

No cookies are set and no analytics or advertising scripts run. The site is hosted on Cloudflare, which processes technical data from each request, such as your IP address, the page requested and the time, to deliver the page and protect it from abuse. The legal basis is my legitimate interest in running a working, secure site (Article 6(1)(f) GDPR).

the letter

When you subscribe, I process your email address, the date and time of sign-up, the IP address you signed up from (kept as proof of your consent), and what you open and click in my emails. I use it to send the letter and a short welcome series. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link in every email; withdrawing doesn't affect earlier processing.

The sign-up form passes your address through Cloudflare to SendFox, a service based in the USA that sends the emails and processes this data on my behalf. Subscriber addresses are never shared with or sold to vendors. I keep your data until you unsubscribe, and keep proof of consent for as long as the law requires.

the help me choose form

When you send the form, I receive your answers, your role and your work email. Cloudflare delivers them to my mailbox at dawid@dawid.xyz, which is hosted by Google Workspace. I use them only to reply to your request. The legal basis is taking steps at your request (Article 6(1)(b) GDPR) and my legitimate interest in answering you (Article 6(1)(f)).

Your answers are not added to the letter and are not passed to anyone. If you ask me to introduce you to a vendor, I send that vendor your name, email and a summary of the problem you agreed to share, and nothing else. I keep the conversation while it's useful for your request and delete it when you ask.

your rights

You can ask for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Write to dawid@dawid.xyz. You can also complain to your data protection authority; in Poland that is the UODO (Prezes Urzędu Ochrony Danych Osobowych).