Privacy notice
Last updated: 11 November 2026.
This notice explains what happens to the details you send through the contact form on decisiondriven.dev.
Who is responsible
The controller of your personal data is Grzegorz Kowal STMG, ul. Łomnicka 24 lok. 14, 54-061 Wrocław, Poland (NIP 8943016728, REGON 360372257). You can reach us at greg@decisiondriven.dev.
What we collect
- What you type into the form: your name, work email, company, role, team size and message.
- Abuse-prevention data: your email address and IP address are turned into salted, one-way hashes, which sit in rate-limit counters. The counters reset over time and are overwritten as new messages arrive. They contain no readable address, cannot be turned back into one, and are never stored with your message.
Why, and on what legal basis
- To reply to your enquiry (GDPR art. 6(1)(b), steps taken at your request).
- To keep the form from being abused by bots and floods (GDPR art. 6(1)(f), our legitimate interest in running a safe site).
Who processes it for us
- Netlify hosts the site and runs the function that handles the form.
- Cloudflare Turnstile checks that the sender is not a bot. It processes your browser signals for bot detection. It loads when the contact form comes into view, before you send anything.
- Resend delivers the form’s email, and keeps a delivery log for its own retention period.
- Google Workspace hosts the mailbox that receives your message.
Transfers outside the EEA
Netlify, Resend and Cloudflare may process this data in the United States. Where they do, the transfer relies on the European Commission’s standard contractual clauses or on the provider’s participation in the EU–US Data Privacy Framework.
How long we keep it
The emails from the form are kept in Greg’s Google Workspace mailbox for as long as the conversation needs them. When it is over, we delete them unless the law requires us to keep them.
Your rights
You can ask us for access to your data, to correct it, to erase it, or to restrict it. You can object to processing based on our legitimate interest. Write to greg@decisiondriven.dev. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), at uodo.gov.pl.
Analytics and cookies
This site has no analytics and no trackers, and it sets no cookies. Fonts are served from this site, not from a third party.