Privacy Policy

1. Who is responsible for your data

The data controller is Innovative Devices Marcin Purzycki, a sole proprietorship registered in Poland (CEIDG), VAT ID PL 6112596225. The consulting services are offered under the name Marcin Purzycki · Embedded & IoT Consulting at marcinpurzycki.com.

Contact for any question or request concerning your personal data: privacy@marcinpurzycki.com.

2. What data is processed, and why

2.1 Booking a diagnostic call

Scheduling runs on Cal.com, embedded in the booking window on this site. When you book, Cal.com collects the data you enter: name, email address, your time zone, the selected date and time, and any note you add. Cal.com also records technical data needed to deliver the booking form (IP address, browser type).

Purpose: to schedule, confirm, reschedule or cancel the call you requested, and to send you a calendar invitation with the meeting link.

Legal basis: Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract.

The Cal.com embed loads only after you click a booking button. Until then, no data is sent to Cal.com.

2.2 Video meetings

Calls are held on Google Meet. Cal.com generates the meeting link and adds it to the calendar invitation. During the call, Google processes the data you share in the meeting under Google’s privacy policy.

2.3 Email correspondence

If you write to us, we process your email address, name and the content of your message in order to answer you. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in handling enquiries, or Article 6(1)(b) GDPR where the enquiry concerns a contract.

2.4 Server logs

The web server that hosts this site keeps standard access logs: IP address, date and time of the request, requested URL, referrer, browser type and response status. Logs are used solely to keep the site secure and available and are rotated automatically.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in operating a secure website.

2.5 Web fonts

The site loads typefaces from Google Fonts. To deliver the font files, your browser sends your IP address to Google’s servers. No cookies are set by this request. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in a consistent, fast-loading presentation.

2.6 Website statistics (Google Analytics)

With your consent, the site uses Google Analytics 4, a web analytics service provided by Google LLC, to understand how visitors use the site: which pages are viewed, how long visits last, which links are clicked, where visitors come from, and what devices and browsers they use. Google Analytics 4 does not log or store individual IP addresses; approximate location is derived from the IP address and the address itself is discarded.

Google Analytics sets cookies (_ga and _ga_<id>) that assign your browser a random, pseudonymous identifier for up to 24 months. The cookies are set only after you accept analytics cookies in the cookie banner. Until you do, no Analytics script loads and no data is sent to Google.

Purpose: measuring reach and improving the content and usability of the site.

Legal basis: your consent, Article 6(1)(a) GDPR, together with the cookie-consent rules of the Polish Electronic Communications Law implementing the ePrivacy Directive. You can withdraw consent at any time, with effect for the future, by changing your choice in the cookie settings linked in the footer or by deleting the cookies in your browser. You can also block Google Analytics in every website with the Google Analytics opt-out browser add-on.

Google processes this data on our behalf under the Google Ads Data Processing Terms. Event-level data is retained in Google Analytics for up to 14 months and is then deleted automatically. More information: How Google uses data from sites that use its services.

3. Cookies and tracking

The site uses two kinds of cookies and similar technologies:

• Strictly necessary — cookies or local storage that the embedded Cal.com booking form needs to work, and the single first-party entry that remembers your cookie choice. These require no consent.
• Analytics — Google Analytics cookies described in section 2.6. These are set only after you accept them in the cookie banner, and you can change your decision at any time.

The site uses no advertising or social-media tracking.

4. Who receives your data

• Cal.com, Inc. (USA) — scheduling platform. Cal.com privacy policy.
• Google LLC (USA) — Google Meet for the video call, Google Fonts for typefaces, Google Analytics for website statistics (with your consent). Google privacy policy.
• Hosting provider — the server that stores and delivers this site and its access logs.

These providers act as processors or independent controllers under their own terms. Data is not sold and is not shared with anyone else unless the law requires it.

5. Transfers outside the EU/EEA

Cal.com and Google are based in the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses together with additional safeguards.

6. How long data is kept

• Booking data — for the duration of the engagement and up to 12 months after the last contact, unless a contract or legal obligation requires longer storage.
• Email correspondence — until the matter is closed, and then for as long as needed to establish, exercise or defend legal claims.
• Server logs — up to 30 days, unless an incident requires longer analysis.
• Analytics data — Google Analytics cookies expire after 24 months at the latest; event data in Google Analytics is kept for up to 14 months. Your cookie choice is remembered for 12 months.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data erased, where no legal ground for keeping it remains;
• restrict processing in the situations set out in Article 18 GDPR;
• receive the data you provided in a portable, machine-readable format;
• object to processing based on legitimate interest (Article 21 GDPR);
• withdraw consent at any time where processing is based on consent, such as analytics cookies, without affecting the lawfulness of processing before withdrawal (Article 7(3) GDPR).

To exercise any of these rights, contact us using the details in section 1. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

8. Is providing data mandatory?

No. You can read this site without providing any personal data. Name and email are needed only if you want to book a call — without them the meeting cannot be scheduled or confirmed.

9. Automated decision-making

No decisions producing legal or similarly significant effects are made about you by automated means, and no profiling takes place.

10. Changes to this policy

This policy may be updated when the site, the tools it relies on, or the law change. The current version is always published at this address, with the date of the last update shown at the top.