Privacy
This page explains how personal data is handled when you use this website or contact me.
Last updated: 20 July 2026.
Data controller
Iwa Kowalska is the controller of your personal data. For any data-related request, email iwa@iwakowalska.pl.
Data I use and why
When you send the form or an email, I use the contact details and message you provide to reply, prepare a proposal and take steps requested before entering into a contract. The legal basis is Article 6(1)(b) GDPR. Where necessary, I may also retain correspondence to establish, exercise or defend legal claims, based on Article 6(1)(f) GDPR.
Providing data is voluntary, but I cannot reply without an email address and information about your enquiry. I do not use form data for a newsletter or automated decision-making.
Form protection and technical data
The form uses Cloudflare Turnstile to limit automated spam. Cloudflare may process the technical data needed to assess whether the form is being submitted by a person. The website is also hosted on Cloudflare infrastructure, which processes standard connection data such as IP addresses and request information.
Service providers
Data may be processed by providers I use to operate the website and handle correspondence: Cloudflare (hosting and Turnstile) and Resend (sending form messages). They process data on my behalf or in line with their own legal obligations.
If you follow an external Easytools purchase link, the data entered in its checkout will also be processed by Easytools under the information provided there. Easytools privacy policy .
Transfers outside the EEA
Some infrastructure providers may process data outside the European Economic Area. Where this happens, the transfer relies on a mechanism permitted by the GDPR, such as an adequacy decision or standard contractual clauses.
Retention
I retain correspondence for as long as needed to handle the enquiry and any resulting work. I may then retain it until the relevant limitation periods expire, or for as long as accounting and tax rules require if a contract was entered into.
Your rights
You can request access to, correction or deletion of your data, or restriction of its processing. You can also object to processing based on legitimate interests and, where the law provides for it, request your data in a portable format.
If you believe your data is being processed unlawfully, you can complain to the Polish supervisory authority, the President of the Personal Data Protection Office, or your local data protection authority.