Legal
Privacy Policy
1. Data Controller
The data controller under the GDPR is Aleksander Szlaga Teamwork Design, ul. Krzycka 85A, 53-019 Wrocław, Poland, tax number (NIP): 7561882685, operating under the brand code'n'seo.
Contact for data protection matters: contact@codenseo.eu
2. Purposes and legal bases for processing
a) Contact form and project enquiries
When you submit the contact form, we process: full name, email address, phone number (optional), company name (optional) and message content.
Legal basis: Art. 6(1)(b) GDPR – processing necessary for pre-contractual steps taken at the request of the data subject. After the correspondence is closed: Art. 6(1)(f) GDPR (legitimate interest in establishing or defending legal claims).
Retention period: duration needed to handle your enquiry, then until expiry of applicable limitation periods (generally 3 years).
b) Analytics cookies (Google Analytics 4)
With your explicit consent, we use Google Analytics 4 to analyse website traffic (visitor count, traffic sources, pages visited). GA4 is configured with IP anonymisation. Data is processed by Google LLC (USA) under Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Legal basis: Art. 6(1)(a) GDPR – consent. You may withdraw it at any time:
Withdraw analytics cookie consent
c) Strictly necessary cookies
The PHPSESSID cookie (PHP session) is required for the contact form and admin panel to function. No consent is needed (Art. 5(3) ePrivacy Directive).
The cookie_consent cookie stores your cookie preference for 365 days.
d) Google reCAPTCHA
The contact form is protected by Google reCAPTCHA. Google may process device and behaviour data to distinguish humans from bots. Legal basis: Art. 6(1)(f) GDPR (legitimate interest – spam prevention). Google Privacy Policy.
e) Server logs
The server automatically records IP address, date and time of visit, requested URL and browser type, solely for technical diagnostics and security. Data is retained for 30 days then deleted.
3. Recipients of data
- Google LLC – Google Analytics 4 (with consent) and reCAPTCHA (legitimate interest)
- Hosting provider / server – data storage under a data processing agreement
We do not sell personal data or share it with third parties for marketing purposes.
4. Your rights under the GDPR
You may exercise the following rights by contacting us at contact@codenseo.eu:
- Right of access – request a copy of data processed (Art. 15 GDPR)
- Rectification – request correction of inaccurate data (Art. 16 GDPR)
- Erasure – request deletion of your data, "right to be forgotten" (Art. 17 GDPR)
- Restriction of processing – request temporary suspension of processing (Art. 18 GDPR)
- Data portability – receive your data in a structured format (Art. 20 GDPR)
- Objection – object to processing based on legitimate interest (Art. 21 GDPR)
- Withdrawal of consent – at any time, with no effect on prior processing
We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority in your country of habitual residence or with the Polish supervisory authority UODO (uodo.gov.pl).
5. Cookie register
| Name | Type | Purpose | Expiry |
|---|---|---|---|
| PHPSESSID | Necessary | PHP session (form, admin) | Session |
| cookie_consent | Necessary | Stores your consent choice | 365 days |
| _ga, _ga_* | Analytics (with consent) | Google Analytics 4 – traffic statistics | 2 years |
| _grecaptcha | Functional | Google reCAPTCHA – spam protection | 6 months |
6. Data security
We apply appropriate technical and organisational measures: HTTPS encryption (TLS 1.2+), reCAPTCHA form protection, restricted admin panel access and regular server backups.
7. Automated decision-making
We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.
8. Policy changes
This policy may be updated. The current version is always available at codenseo.eu/privacy-policy/. We will notify you of significant changes via a banner on the site at least 14 days in advance.