PRIVACY POLICY
Last update: July 30, 2026
Thank you for visiting the Veles Digital website. We respect your privacy and care about the security of your personal data.
1. Personal Data Administrator
The administrator of your personal data is:
Veles Digital – Kamil Truszkowski
ul. Szeligowska 42, 01-320 Warszawa, Polska
Contact regarding personal data:
E-mail: velesdigital@proton.me
2. Scope of collected data
The site keeps no database and stores no form data. The scope of processing is as follows:
a) Data you provide in a message:
The forms on this site send nothing. They compose the message and open it in your own mail client — you send it yourself, from your own mailbox. The controller therefore processes the data contained in the correspondence received, not data collected by the site.
- Full name
- Email address
- Message content (contact form / job application)
- Link to portfolio (in the career form)
b) Data logged technically by the hosting provider:
The site itself collects no information about your visit — it runs no analytics, no pixels and no third-party scripts. The data below is logged solely by the hosting provider while serving a request, to the extent technically required to deliver the page:
- IP address
- Browser type and device
- Operating system
3. Purposes and legal basis of processing
We process your data for the purpose of:
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Contact correspondence | Art. 6(1)(b) GDPR | Up to 3 years from the end of correspondence |
| Job applications | Art. 6(1)(a) GDPR (consent) | Until the recruitment ends or consent is withdrawn |
| Execution of potential cooperation | Art. 6(1)(b) GDPR | Duration of cooperation + 6 years |
| Establishment, investigation or defence of claims | Art. 6(1)(f) GDPR | Until the expiry of the limitation period |
4. Data recipients
Your data may be transferred solely to the following recipients:
- Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA — website hosting
- Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland — the email service that receives messages from the forms
No one else receives your data. The site uses no external analytics, no marketing tools, no payments and no external database.
Both providers make data processing terms (a DPA) available and process data on that basis.
We do not sell your personal data to any third parties.
5. Cookies and browser storage
The site uses no cookies and no tracking technologies. Only your own settings are kept in browser storage (localStorage):
- theme — the light or dark mode you picked. Written only once you click the toggle yourself.
- lang — a language choice remembered by the previous version of the site. The site does not write it; it only reads it to redirect an old address to the right language version.
Neither value is shared with anyone or used for tracking. Should analytics or marketing tools be introduced in the future, consent will be collected separately, before any such tool is activated.
6. Your rights
According to GDPR, you have the right to:
- Access to your data
- Rectification of data
- Deletion of data (right to be forgotten)
- Restriction of processing
- Data portability
- Objecting to processing
- Withdrawing consent at any time
- Lodging a complaint with the President of the Personal Data Protection Office (PUODO)
To exercise the above rights, contact us at: velesdigital@proton.me
7. Data security
We apply appropriate technical and organizational measures ensuring the security of processed data, in particular connection encryption (HTTPS).
8. Data transfer outside the EEA
Vercel Inc. is based in the United States. The transfer relies on standard contractual clauses: that provider's data processing agreement incorporates the clauses approved by European Commission decision 2021/914, with Irish law selected in Clause 17 (Option 1). In addition, according to the provider's documentation, Vercel Inc. declares certification under the EU-U.S. Data Privacy Framework. Proton AG is based in Switzerland, which the European Commission has recognised as providing an adequate level of data protection — no additional basis is required there.
9. Children's data
Our site is not directed at children under 16 years of age and we do not knowingly collect data from minors.
10. Changes to the Privacy Policy
If necessary, we may update this policy. We will inform about significant changes through a visible message on the site and an update of the "Last updated" date.
Veles Digital – Kamil Truszkowski