Privacy Policy

The site is run by Dmytro Bala, a sole proprietorship (jednoosobowa działalność gospodarcza), NIP 6751828984, Kraków, Poland. I am the controller of the personal data described here. I have not appointed a data protection officer; for anything about your data, email hi@dmytrobala.com.

The project form asks for:

• your name, email address and, if you add it, your company website
• your answers about the project — its type, size, timing, budget and any links you share
• where your visit came from: UTM tags in the link, the site that referred you and the first page you opened. This travels to the form in the link to it — nothing is stored in your browser — and is sent only if you send the form.

I use this to reply to you, to prepare for a call and to put together a quote. The legal basis is taking steps at your request before a possible contract (Article 6(1)(b) GDPR) and my legitimate interest in knowing which channels bring enquiries (Article 6(1)(f)).

Your name and email are required, because without them I cannot reply. Everything else is optional: skipping a question only means I ask it on the call.

If you book a call, Cal.com collects your name, email, the time you pick and any notes, and adds the booking to my calendar.

I use PostHog, hosted in the EU, to see how the site is used — which pages people read, where they come from and where the form loses them. How much it records depends on your answer to the cookie banner:

• Before you answer, and if you decline: no cookies and nothing stored in your browser. Visits are counted with a hash that changes every day, so you cannot be recognised from one day to the next. Your IP address is not stored. The legal basis is my legitimate interest in understanding how the site performs (Article 6(1)(f)).
• If you accept: PostHog sets a first-party cookie and uses local storage to recognise return visits, and may record your session — clicks, scrolling and page changes — with every form field masked. If you then send the form, your visits are linked to your email address. The legal basis is your consent (Article 6(1)(a)).

You can change your choice at any time with Cookie settings, also in the footer. Withdrawing consent does not affect what was processed before.

The booking calendar is provided by Cal.com and may set its own cookies when it loads on the project form.

• ph_…_posthog — a PostHog cookie and a local storage entry that recognise return visits. Set only after you accept; kept for up to a year.
• __ph_opt_in_out_… — local storage entry that remembers your answer to the banner, so it is not asked again on every page.
• Cal.com — cookies set by the booking calendar when it loads, needed for the booking to work.

You can also clear or block all of these in your browser settings. Blocking them does not stop the form from working.

Depending on the budget you choose, the form offers either a call or a reply by email. That only decides which next step you see: I read every enquiry myself. No decision with legal or similarly significant effects is made automatically, and there is no profiling.

I do not sell your data or use it for advertising. These services process it on my behalf:

• Cloudflare — hosting, the form endpoint and email forwarding
• Attio — the CRM where enquiries are stored
• Telegram — notifications to me when an enquiry arrives
• Cal.com — call booking
• Google — my email (Gmail) and calendar
• PostHog — analytics, in its EU region

Some of them are based outside the European Economic Area, mainly in the United States. Where data leaves the EEA, it is protected by the European Commission’s adequacy decision for the EU–US Data Privacy Framework or by Standard Contractual Clauses.

• Enquiries and the emails around them: up to 24 months after our last contact, unless we start working together — then for as long as the work and the law require.
• Analytics: up to one year for events and up to 30 days for session recordings, the limits of my PostHog plan.
• Telegram notifications: until I delete them, which I do once an enquiry is in the CRM or closed.

You can ask me to show you the data I hold about you, correct it, delete it, limit how I use it, or send it to you in a portable format. You can object to processing based on legitimate interest, and withdraw consent at any time. Email hi@dmytrobala.com and I will reply within 30 days.

You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), or to the authority where you live.

If the site starts collecting something new, this page changes first. The date at the top shows the last update.