LEGAL
Privacy policy and legal notice
Last updated: 8 November 2026
Who is responsible
cra.thelapwing.com is run by Cezary Czajka (thelapwing), NIP 8331389071, ul. Aleksandra Fredry 23, 95-060 Brzeziny, Poland, who is also the controller of the personal data below. Contact: contact.thelapwing@gmail.com.
What we process and why
- Contact form. Your work email, company name and message, plus the optional fields (main need, how you heard about us). We use them to answer your request and to prepare an intro call. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). Giving the data is voluntary, but we cannot answer without your email.
- Where you came from. If the address you opened contains campaign parameters (
utm_source,utm_medium,utm_campaign,utm_term) or comes from another website, the form sends them with your request so we know which content led to it. Nothing is stored in your browser for this. Legal basis: legitimate interest in understanding which channels work (Art. 6(1)(f)). - Bot protection. The form uses Cloudflare Turnstile to check that a person is sending it. Cloudflare receives technical data such as your IP address and browser details for this purpose. Legal basis: legitimate interest in protecting the form from abuse (Art. 6(1)(f)).
- Visit statistics. We count page views and a few actions (starting and finishing the CRA scope check with the resulting scope and class, clicking a button, starting and sending the form) with Umami. It sets no cookies and stores nothing on your device, and we do not use the data to identify you. We never send form content or your check answers to it. Legal basis: legitimate interest in understanding how the site is used (Art. 6(1)(f)).
- CRA scope check. Your answers are evaluated in your browser and are not sent to us or stored. Only the anonymous events above are counted.
We use no advertising cookies, no tracking pixels and no profiling. We do not sell personal data.
Who receives data
Service providers that help us run the site, only as needed: Cloudflare (hosting, Turnstile), Resend (delivery of the form email), our email provider (Google, for the mailbox that receives your request) and Umami (visit statistics). Some of them may process data outside the European Economic Area, based on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
The website has no database. A request exists only as an email in our mailbox and in the delivery log of the email provider, which it keeps for its own limited period. We delete requests when they are handled, and in any case within 12 months of the last contact. If we work together, we keep the records that the law requires (for example for accounting) for as long as it requires.
Your rights
You can ask for access to your data, correction, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. Write to contact.thelapwing@gmail.com. You can also complain to the supervisory authority: the President of the Personal Data Protection Office (UODO) in Poland, uodo.gov.pl. We take no decisions based solely on automated processing.
Changes
We update this page when the website changes. The date at the top shows the latest version.