Privacy policy

This page describes what data Járnhaus collects, why, and what your rights are. It is written in plain English. It is also the legal statement required by the GDPR.

1. Who we are

Járnhaus is a trading name of Marek Rybka, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in Poland.

• Tax ID (NIP): 7831831894
• Registered address: ul. Krótka 54/2, 60-185 Skórzewo, Poland
• Contact: hello@jarnhaus.dev

We are the data controller for any personal data you submit through this website.

2. What we collect, and why

We only collect data when you choose to contact us. We do not run analytics, advertising trackers, or third-party cookies on this site.

Contact form

When you fill in the contact form on this site, we collect:

• Your name
• Your email address
• Your company (if you provide it)
• Your message and project details
• The budget range you select

We use this data for one purpose: to respond to your inquiry and potentially work with you. Legal basis: your consent (GDPR Article 6(1)(a)) and our legitimate interest in conducting business communications (GDPR Article 6(1)(f)).

Email correspondence

If you email us directly at hello@jarnhaus.dev, we will hold your email address and the content of your messages for as long as needed to communicate with you.

3. Who we share data with

We use a small set of trusted providers to run this site and handle communications. Each one is contractually bound to GDPR-compliant processing.

We do not sell your data. We do not share it with advertisers or marketing platforms. We do not use it to train any AI models.

4. How long we keep your data

• Contact form submissions and email correspondence: 24 months from your last contact with us. After that, we delete them, unless we have an active project or contract with you (in which case we retain them as long as the business relationship and applicable tax law require).
• Server logs (Cloudflare): Retained according to Cloudflare's policies, typically up to 30 days for analytics aggregates. We do not have access to personally-identifiable log data.

5. Your rights

Under the GDPR, you have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data ("right to be forgotten")
• Object to or restrict our processing of your data
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the Polish data protection authority (Urząd Ochrony Danych Osobowych — UODO, uodo.gov.pl)

To exercise any of these rights, email us at hello@jarnhaus.dev. We will respond within 30 days.

6. Cookies and tracking

This site does not use cookies, analytics, advertising trackers, or third-party scripts. The only data stored in your browser is what your browser stores by default for any website (cache, temporary connection state). We do not have access to it.

If we add analytics in the future, we will use a privacy-respecting, cookieless tool (such as Plausible or similar) and update this policy before doing so.

7. International transfers

Some of our processors (Cloudflare, Resend, Google) are based in the United States. When your personal data is transferred outside the European Economic Area, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
• EU-US Data Privacy Framework certification where applicable.

8. Security

We take reasonable technical and organizational measures to protect your data: HTTPS everywhere, encrypted email transit, access controls on our systems. No method of transmission over the internet is 100% secure, but we work to protect your data to industry standards.

9. Changes to this policy

If we change this policy, we will update the "Last updated" date at the top. For significant changes, we will notify affected users by email where possible.

10. Questions

If anything here is unclear, email hello@jarnhaus.dev. We will answer in plain English.