Privacy Policy
1. Data Controller
The controller of your personal data is:
Name / Business name: CodeTime Marcin Szabłowski, sole trader (jednoosobowa działalność gospodarcza)
Address: ul. Chmielna 2/31, 00-020 Warszawa, Poland
NIP: 9512562622
REGON: 524548318
Email: marcin@codetime.pl
2. What Personal Data We Collect
2.1 Quote Request Form
When you submit a quote request, we collect the following information you provide voluntarily:
- First and last name
- Email address
- Project description (free text)
- Approximate budget
- Preferred timeline
- Type of project
Legal basis: Article 6(1)(b) GDPR — processing is necessary to take steps at your request prior to entering into a contract, and Article 6(1)(f) GDPR — our legitimate interest in responding to business enquiries.
2.2 Analytics Data — Google Analytics
This website uses Google Analytics (provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics collects data such as:
- IP address (anonymised)
- Browser type and version
- Operating system
- Pages visited, time spent, referral source
- Device type and screen resolution
Data may be transferred to Google servers in the United States. Google LLC participates in the EU–US Data Privacy Framework.
Legal basis: Article 6(1)(a) GDPR — your consent, given via the cookie banner.
2.3 Behavioural Analytics — Hotjar
We use Hotjar (provided by Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta). Hotjar may collect:
- Mouse movements, clicks, and scrolling behaviour (heatmaps)
- Session recordings (video-like replays of your visit — no passwords or payment data are recorded)
- Device and browser information
- Approximate geographic location (country/city level)
Hotjar suppresses sensitive fields (passwords, payment details) automatically.
Legal basis: Article 6(1)(a) GDPR — your consent, given via the cookie banner.
3. Purpose of Processing
We use your data exclusively for the following purposes:
- Responding to your quote request and potential contract negotiation
- Analysing website traffic to improve performance and user experience (Google Analytics)
- Understanding how visitors interact with the website to improve its design and content (Hotjar)
We do not use your data for marketing or advertising purposes, and we do not sell your data to third parties.
4. Data Retention
- Quote request data: retained for up to 3 years from the last contact, or for the duration of any resulting contractual relationship plus the applicable statutory limitation period (generally 3 years for civil claims in Poland).
- Google Analytics data: retained for 14 months by default (configurable in Google Analytics settings).
- Hotjar session data: retained for up to 365 days.
5. Third-Party Processors & International Transfers
We share data only with trusted processors acting on our behalf:
| Processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Google LLC | Google Analytics | USA | EU–US Data Privacy Framework |
| Hotjar Ltd | Session recording & heatmaps | EU (Malta) | Standard Contractual Clauses |
6. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access — you may request a copy of the data we hold about you.
- Right to rectification — you may ask us to correct inaccurate data.
- Right to erasure (‘right to be forgotten’) — you may ask us to delete your data, subject to legal retention obligations.
- Right to restriction of processing — you may ask us to limit how we use your data.
- Right to data portability — you may request your data in a machine-readable format.
- Right to object — you may object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent (analytics cookies), you may withdraw it at any time via the cookie settings on this website. Withdrawal does not affect the lawfulness of prior processing.
- Right to lodge a complaint — you may file a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl.
To exercise any of the above rights, contact us at: marcin@codetime.pl
7. Cookies
This website uses cookies. For detailed information on which cookies are used, their purposes, and how to manage them, please refer to our Cookie Policy.
You can manage your cookie preferences at any time via the cookie banner displayed on your first visit, or via the Cookie Settings link in the website footer.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. These include secure email transmission and access controls.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the latest revision is shown at the top of the document. Where changes are material, we will make them clearly visible on the website.
10. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact:
CodeTime Marcin Szabłowski, marcin@codetime.pl