Privacy Policy

The data controller is MATEUSZ BARTOCHA BESTCODING, Kąty Nowe 54, 28-130 Kąty Nowe, Poland, tax ID 6551974563, REGON 366754095, operating under the BestCoding brand.

Privacy-related questions can be sent to contact@bestcoding.net.

• Data provided in the contact form: full name, email address, topic, message content, and any other information you voluntarily place in the message.
• Technical and anti-abuse data: IP address, request identifiers, user-agent, date and time of submission, and the Cloudflare Turnstile token.
• Site-usage settings: theme preference and the cookie-consent choice stored in browser localStorage.
• Analytics and statistics data: page views, basic device and browser information, approximate location, and Google Analytics identifiers once analytics consent has been granted.

• Handling your inquiry, replying to your message, preparing an estimate, or discussing work before a contract: Article 6(1)(b) GDPR where you take steps before entering into a contract, or Article 6(1)(f) GDPR for general business communication; the legitimate interest is handling such communication and responding to inquiries.
• Protecting the form, preventing abuse, and maintaining site security: Article 6(1)(f) GDPR, i.e. the controller’s legitimate interest in protecting the website and communication channels.
• Keeping correspondence for business follow-up, evidence, and defence against claims: Article 6(1)(f) GDPR.
• Website analytics and statistics via Google Analytics 4: Article 6(1)(a) GDPR, i.e. your consent, together with consent required under Polish rules on storing or accessing information on a user device.
• Remembering requested site settings such as theme and cookie choice: Article 6(1)(f) GDPR, i.e. the controller’s legitimate interest in providing the functionality requested by the user.

• Cloudflare, Inc. - website hosting, CDN, application protection, security layer, and Cloudflare Turnstile.
• Resend, Inc. - delivery of contact-form emails.
• Google LLC - Google Analytics 4 and Google Consent Mode for traffic analytics once consent is granted.
• IT subcontractors and infrastructure providers - only where necessary to maintain the site and handle inquiries.

Some providers supporting the website may process data outside the European Economic Area, especially in the United States. This may apply in particular to Cloudflare, Google, and Resend.

Where a transfer outside the EEA occurs, the controller relies on transfer mechanisms provided for by the GDPR and made available by the providers, in particular an adequacy decision or standard contractual clauses together with supplementary safeguards where required.

Information about the safeguards used, or a copy of the relevant transfer mechanisms, can be obtained by contacting the controller at contact@bestcoding.net.

• Contact messages and business correspondence: for as long as needed to handle the matter, continue follow-up, and defend legal claims, and no longer than required by the purpose or limitation periods.
• Technical and security data: for the period resulting from log rotation, infrastructure-provider settings, and the time needed to investigate incidents and abuse.
• Google Analytics 4 data: according to the active GA4 retention settings and only until consent is withdrawn or the data is aggregated / anonymized.
• Settings stored in localStorage (`theme`, `cookie_consent`): until you change them or clear your browser data.

• You may request access to your data, rectification, erasure, restriction of processing, portability, and objection where processing is based on legitimate interest.
• Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• You may lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO).

• The website uses localStorage to remember the cookie choice (`cookie_consent`) and the selected theme (`theme`). These entries support requested site functionality.
• Google Analytics 4 is configured with Google Consent Mode. Before analytics consent is granted, analytics operates in a restricted mode and should not store analytics cookies on the user device.
• Once analytics is accepted, Google Analytics may store cookies, in particular `_ga` and `_ga_<service_id>`, and process statistical information about site usage.
• You can also control cookies and similar technologies in your browser or device settings, including limiting storage or deleting data that has already been stored.
• You can change your cookie choice at any time using the “Cookie settings” control in the footer.

Providing data in the contact form is neither a statutory nor a contractual requirement, but it is necessary if you want to receive a reply through the form. Without at least your name, email address, and message content, a reply will not be possible.

The controller does not make decisions producing legal effects solely by automated means and does not use profiling for that purpose.

Questions about privacy, data requests, or cookie-setting changes can be sent to contact@bestcoding.net.