Datenschutzerklärung

1. Introduction

This Privacy Policy explains how YCode("we", "us", or "our") collects, uses, stores, and protects personal data when you visit our website or contact us. We are committed to handling personal data responsibly and in accordance with the General Data Protection Regulation (GDPR), the Polish Act on the Protection of Personal Data, the ePrivacy rules on cookies and similar technologies, and other applicable data protection laws.

This website is a business landing page. We do not operate user accounts, online checkout, or subscription services on this site. If you engage us for software development or consulting services, separate contractual terms may apply to that relationship.

2. Data controller

The data controller responsible for your personal data is:

• YCode Wiktor Byrka (trading as YCode)
• Operator: Wiktor Byrka
• Country: Poland
• Tax identification number (NIP): 8961657604
• Business registry number (REGON): 542806108
• Business registry number (REGON): 542806108
• Email: byrka.w@gmail.com

For privacy-related requests, please contact us using the email address above and include enough information for us to identify you and respond to your request.

3. Personal data we collect

Depending on how you use this website, we may process the following categories of personal data:

3.1 Data you provide to us

• Contact and inquiry data - such as your name, email address, company name, phone number, and the content of messages you send us through the website contact form, live chat, email, or other communication channels initiated from this website.

3.2 Data collected automatically

• Technical and usage data - such as IP address, browser type and version, device type, operating system, referring URL, pages viewed, date and time of access, and general interaction data generated when you browse the site.
• Server and security logs - our hosting provider may record technical logs needed to deliver the website, maintain security, and diagnose errors.

3.3 Cookies and local storage

• Strictly necessary cookies and storage- limited technical data needed for the website to function, including language preference stored in your browser's local storage.
• Third-party service cookies - our live chat provider and contact form provider may set cookies or use similar technologies when you open or use those services.

We do not currently use advertising cookies or third-party analytics platforms such as Google Analytics on this website.

4. How we use personal data and legal bases

We process personal data only where we have a valid legal basis under GDPR Article 6. The main purposes and bases are:

• Responding to inquiries and providing information - to answer questions, discuss potential projects, and communicate with you (legal basis: performance of steps prior to entering into a contract at your request, and/or our legitimate interest in handling business inquiries).
• Operating and securing the website - to host the site, ensure availability, prevent abuse, and protect our systems (legal basis: legitimate interest in operating a secure and functional website).
• Remembering language preferences - to display the website in your selected language (legal basis: legitimate interest in providing a usable multilingual experience; where required, your consent for non-essential storage may apply).
• Complying with legal obligations - where we are required to retain or disclose information under applicable law (legal basis: legal obligation).

Where we rely on legitimate interests, you have the right to object to processing as described in Section 9 below.

5. Cookies and similar technologies

Cookies are small text files stored on your device. We use cookies and similar technologies only to the extent necessary for the operation of this website and the integrated services described below.

At a high level, the following types of technologies may be used:

• Essential / functional storage - for example, storing your selected language in local storage so the site remembers your preference on return visits.
• Live chat technologies - when you use our chat widget, Crisp may use cookies or similar identifiers to maintain chat sessions, remember conversation context, and provide the service.
• Contact form technologies - when you submit the project inquiry form, HubSpot may use cookies or similar technologies to deliver the form, prevent spam, and process your submission.

You can control cookies through your browser settings. Blocking all cookies may affect website functionality, including language persistence, live chat, and the contact form. For more information about how these providers use data, see Crisp's Privacy Policy and HubSpot's Privacy Policy.

6. Third-party service providers

We use trusted third parties to help us operate this website. These providers process personal data only on our instructions or as independent controllers where applicable, and only to the extent needed to provide their services.

• Hosting provider (Vercel) - hosts the website and may process server logs and technical data necessary for delivery and security.
• Crisp (live chat) - provides the chat widget and processes messages and related metadata when you contact us through chat.
• HubSpot (contact form and CRM)- hosts the website contact form and processes the information you submit so we can respond to project inquiries. HubSpot may process this data in the EU (this site uses HubSpot's EU data centre).

We require appropriate contractual safeguards where personal data is processed on our behalf. Some providers may process data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms permitted under GDPR Chapter V.

7. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Inquiry and chat records - typically retained for up to 24 months after the last interaction, unless a longer period is needed to manage an ongoing business relationship, resolve disputes, or comply with legal obligations.
• Server logs - generally retained for a limited period defined by our hosting provider, usually between 30 and 90 days, unless longer retention is required for security investigations.
• Language preference - stored locally in your browser until you clear site data or change the setting.

When data is no longer needed, we delete it or anonymise it where deletion is not immediately possible.

8. International transfers

We are based in Poland. Your personal data is primarily processed within the EEA. However, some of our service providers may process data in countries outside the EEA, including the United States. Where personal data is transferred internationally, we implement appropriate safeguards in accordance with GDPR requirements, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

9. Your rights

If you are located in the EEA, the United Kingdom, or another jurisdiction that provides similar rights, you may have the following rights regarding your personal data:

• Right of access - to obtain confirmation of whether we process your data and receive a copy of it.
• Right to rectification - to request correction of inaccurate or incomplete data.
• Right to erasure - to request deletion of your data in certain circumstances.
• Right to restriction - to request that we limit processing in certain cases.
• Right to data portability - to receive data you provided to us in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Right to object - to object to processing based on legitimate interests, and to object to direct marketing where applicable.
• Right to withdraw consent - where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact us at byrka.w@gmail.com. We may need to verify your identity before responding. We aim to respond within one month, as required by GDPR.

You also have the right to lodge a complaint with a supervisory authority. In Poland, the competent authority is the President of the Personal Data Protection Office (UODO): uodo.gov.pl.

10. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include secure hosting, access controls, and limiting data collection to what is necessary. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children

This website is intended for business users and is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or website functionality. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Material changes may also be communicated through a notice on the website where appropriate.

13. Contact

If you have questions about this Privacy Policy or how we handle personal data, please contact us at byrka.w@gmail.com.