Privacy policy

Controller and contact

The data controller is Krzysztof Klamka / namir.design. For personal data enquiries, contact privacy@syntimo.com.

Contact form

The form stores the name you provide, email address, selected subject, message and submission time. New inquiries do not include a stored IP address. Providing information is voluntary, but an email address and a message are needed to respond. Please do not include special-category data or information unrelated to your inquiry.

I use the information to respond and handle correspondence. Enquiries about entering a contract rely on GDPR Article 6(1)(b); other correspondence relies on Article 6(1)(f), the legitimate interest in responding to enquiries. Sending a message does not require marketing consent.

Newsletter — currently inactive

The newsletter is currently inactive and the contact form does not accept new subscriptions. A pause in sending is neither new consent nor deletion of previously recorded addresses. If you subscribed earlier, you can withdraw consent and request erasure by contacting privacy@syntimo.com. Any restart will not expand the scope of previous consent; information about sending and its providers will be updated before it restarts.

Earlier subscriber data is retained for a possible restart within the scope of the consent given, under GDPR Article 6(1)(a). I stop using it for this purpose when consent is withdrawn or the newsletter is permanently discontinued. Withdrawal does not affect the lawfulness of earlier processing.

Technical information and statistics

The web server records logs needed to operate and secure the website, which may include an IP address, requested URL, browser information and request time. Separate CMS statistics measure page popularity using only page paths, the day and the number of views. The basis is the controller’s legitimate interest in maintaining and improving the website under GDPR Article 6(1)(f).

The public pages do not load third-party analytics or advertising pixels. Social-media links lead outside namir.design; the relevant service’s own terms apply after you open them.

Cookies and browser storage

The website uses XSRF-TOKEN for CSRF protection and namir_design_session for the website session. These cookies are sent over HTTPS and last about two hours, renewed while you use the website.

Syntimo Accessibility stores your reading preferences locally in your browser under syntimo.accessibility.v1. They remain until you reset the panel or clear the website data. The component itself does not send those preferences to external telemetry.

You can delete or block cookies and website data in your browser. Blocking the required session may prevent form submission. The website language is selected through the URL rather than profiling.

Service providers and access

Hosting is provided by CyberFolks; email is provided by dHosting. Authorised site operators and technical providers may access data where needed to maintain the website, handle correspondence or provide backups. Messages submitted through the form are not published.

I use CyberFolks and dHosting to handle namir.design data. I do not use an additional external newsletter service, advertising tools or cloud backup service. I do not separately arrange transfers of form or statistics data to services outside the European Economic Area. If a change of services requires such a transfer, I will identify the recipients, applicable transfer basis and safeguards before introducing it.

Retention

I retain correspondence while the matter is being handled. Afterwards I keep only information needed for legal obligations or establishing, exercising or defending claims, until the applicable limitation period expires or the dispute ends.

Web-server logs are rotated daily with fourteen archives retained, usually about fifteen days including the current file.

CMS statistics: new records contain only a known public page path and the day of the view. The CMS does not store IP addresses, browser information or referring pages in these records. Individual view records are retained for up to 90 days. Older views remain only as daily counts per page, for up to 13 months. Automatic maintenance runs daily and is applied again after restoring a backup.

Backups: local update backups support recovery after a failure. Daily updater retention removes recognised backups older than 30 days only when at least 10 newer backups remain. A backup required for the current or last recovery operation is protected. Initial recovery copies and independent archives do not follow this same automatic rule; their continued usefulness depends on website recovery needs. Therefore, 30 days is not a maximum period for data to remain in backups. Backups are not used for routine correspondence or marketing.

Cookies and browser preferences follow the periods stated above.

Your rights

You may request access, rectification, erasure or restriction. Data portability applies where the GDPR conditions are met. You may object to processing based on legitimate interests.

Contact privacy@syntimo.com to exercise your rights. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). I do not use data from this website for solely automated decisions with legal or similarly significant effects on you.

Updates and scope

This policy describes namir.design. If the form, services or processing changes, I will update this page and its date. Syntimo product websites provide their own privacy information.