Privacy policy

Data controller

The controller of your personal data is Łukasz Wątor, running a business under the ThorSoft brand, ul. Franciszka Zabłockiego 6C/6, 80-287 Gdańsk, Poland, tax ID (NIP) 6792934631, REGON 520314240. For matters concerning personal data, write to kontakt@thorsoft.dev.

What data and why

If you send a message through the contact form or by e-mail, I process the data you provide: your name, e-mail address, optionally your company name, and the content of the message. I use it only to reply to your message and, if you ask for it, to prepare an offer or a contract.

Legal bases:

• Article 6(1)(b) GDPR — steps taken at your request before entering into a contract,
• Article 6(1)(f) GDPR — the controller's legitimate interest in replying to messages and conducting correspondence, including with people representing companies.

Providing the data is voluntary, but I can't reply without an e-mail address.

How long I keep the data

I keep correspondence for up to 12 months after the last message if we don't start working together. If we sign a contract, I keep the data for the duration of the contract and then until the periods required by tax and accounting law expire or until claims become time-barred.

Who receives the data

The data may be processed by service providers I use:

• Amazon Web Services EMEA SARL — website hosting and sending messages from the form. Form data is processed in the European Union (Ireland region), and the site is delivered through the Amazon CloudFront network, whose edge servers also operate outside the EU,
• the e-mail provider hosting the kontakt@thorsoft.dev mailbox.

They process the data on my behalf under data processing agreements. I don't sell the data or share it for marketing purposes.

Spam protection and technical data

The form is protected by ALTCHA, which runs on the website's own server: before a message is sent, your browser solves a short computational task. It uses no cookies and no third-party services.

To limit abuse, the server stores the IP address and the number of requests from it, and the one-time identifier of the solved task. The IP entry expires after one hour at most and the task identifier after 20 minutes. The database deletes expired entries automatically, usually within a few days. The legal basis is the controller's legitimate interest in protecting the form against abuse (Article 6(1)(f) GDPR). The form server's logs contain only the delivery result, without the message or sender details, and are deleted after 30 days.

Cookies

The site uses no cookies or analytics tools and loads no content from external services.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability for data processed in connection with a contract, and to object to processing based on legitimate interest. To exercise these rights, write to kontakt@thorsoft.dev.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).

The data is not used for automated decision-making or profiling.