Dominika Kuś
Back to home

Privacy policy

Effective date: 26 May 2026

This page explains what personal data this site collects, why, how it is stored, and what rights you have over it.

1. Who is the data controller

The controller of your personal data is Dominika Kuś, an independent professional based in Poland (EU), operating https://dominikakus.com. For privacy questions, write to hello@dominikakus.com.

2. What data is collected

Two paths:

  • Brief form: name, email, optional company, plus your project description, industry, team size, budget range, timeline. You provide this voluntarily when you submit a brief.
  • Technical telemetry: anonymised analytics from Vercel (page views, country, device class) only if you accept analytics cookies. No fingerprinting, no cross-site tracking.

3. Why it is collected

Strictly to respond to your brief and run the site:

  • Form data: respond to your inquiry within 24h, prepare a quote, schedule a discovery call. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering a contract) and Art. 6(1)(f) GDPR (legitimate interest in handling business inquiries).
  • Analytics: improve site performance and content relevance. Legal basis: Art. 6(1)(a) GDPR (your consent).

4. Where it is stored and who processes it

On a need-to-know basis, with reputable EU-aligned processors:

  • Form submissions: Supabase (Frankfurt, EU region) - encrypted at rest.
  • Email notifications: Resend (EU region) - to deliver inquiry alerts to Dominika.
  • Site hosting: Vercel (global edge, primary EU data centres).
  • Analytics: Vercel Analytics (anonymised, cookieless by default).

5. How long it is kept

Briefs are kept for the duration of the engagement plus 12 months after the last contact, then deleted unless retention is required by law (e.g. tax records for fulfilled paid contracts: 5 years per Polish tax law). Analytics: 12 months. Cookies: see the cookies policy.

6. Your rights under GDPR

You have the right to: access your data, rectify it, erase it, restrict processing, port it to another controller, object to processing, withdraw consent at any time, and lodge a complaint with the Polish Data Protection Authority (UODO) or your local supervisor. Send any request to hello@dominikakus.com - response within 30 days.

7. Data sharing

Data is never sold. It is not shared with third parties for advertising. It is processed only by the subprocessors listed in section 4, each under their own GDPR-aligned data processing agreements.

8. International transfers

Subprocessors are EU-based or operate under Standard Contractual Clauses (SCCs) where data may transit non-EU regions for technical reasons (Vercel global CDN, Supabase EU primary). No transfer happens outside this framework.

9. Changes to this policy

Material changes are announced on this page with a new effective date. The current version applies from 26 May 2026.

10. Contact

For any privacy matter, write to hello@dominikakus.com.