Privacy policy

Last updated: 5 October 2026

Who is responsible for your data

The controller of personal data is Tomasz Weber, a sole trader operating under the business name Tomasz Weber .com, Wyszyńskiego 23/50, 65-001 Zielona Góra, Poland, VAT ID (NIP) 9291660845, REGON 543324392.

For anything to do with your data, the simplest way is to write to info@tomaszweber.com.

What data I process and why

Email and phone contact

If you write to me or call me, I process the data you give me yourself: your name, email address, phone number, company name and the content of your message. I use it to reply, prepare a proposal and continue the conversation.

Legal basis: Art. 6(1)(f) GDPR (my legitimate interest, namely replying to your enquiry) and Art. 6(1)(b) GDPR where the conversation is heading towards a contract.

Booking a call in the calendar

The button for booking a call leads to Calendly, an external service. The data you enter there (name, email address, any notes) goes to Calendly and to me. I use it solely to arrange and hold the call.

Calendly is based in the United States, so data is transferred outside the European Economic Area on the terms described in that service’s privacy policy: calendly.com/legal/privacy-notice. Legal basis: Art. 6(1)(b) and (f) GDPR.

Visitor statistics

I check how this website is performing: how many people visit it, where they come from, which pages they read and whether they click the button to book a call. I use PostHog for this. The data is stored on servers in the European Union.

Measurement works in one of two ways, depending on your choice in the cookie notice:

• Without consent, or after you decline. Visits are counted anonymously. The website then stores no cookies or any other data in your browser. Your IP address is used only to work out your approximate location (country, city) and to count visits on a given day, and is not stored afterwards. This makes it impossible to recognise the same person the next day. Legal basis: Art. 6(1)(f) GDPR (my legitimate interest, namely basic statistics for my own website).
• After you give consent. The website stores a cookie with a random identifier in your browser. This lets me see that the same browser has come back to the website and judge which content is useful. Legal basis: Art. 6(1)(a) GDPR (consent).

In both cases I don’t record sessions, I don’t link this data to your name or email address and I don’t pass it on to advertising networks.

Server logs

The server the website runs on keeps standard technical logs, including your IP address, the date and time of your visit and your browser type. They are used to maintain and secure the website. Legal basis: Art. 6(1)(f) GDPR.

Cookies and browser storage

Until you give consent, the website stores nothing in your browser. Once you click a button in the notice, your decision itself is stored, and after consent the analytics data as well:

You can change your decision at any time: Cookie settings. The same link is in the footer of every page. When you withdraw consent, the website removes any analytics data stored earlier from your browser.

Who I share data with

Data goes only to providers that help me run the website and stay in touch with clients:

• PostHog (visitor statistics, servers in the European Union),
• Calendly (booking calls),
• the hosting provider the website runs on.

I don’t sell data or share it for advertising purposes.

How long I keep data

• Correspondence and contact details: for as long as our conversation or cooperation lasts, and then for the period required by law or needed to defend against claims.
• Statistical data: for as long as it is used to analyse traffic on the website.
• Cookies: as set out in the table above.

Your rights

You have the right to:

• access your data and receive a copy of it,
• have your data rectified,
• have your data erased or its processing restricted,
• object to processing based on legitimate interest,
• data portability,
• withdraw your consent at any time, without affecting processing carried out before then.

Just write to info@tomaszweber.com. You can also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Voluntary provision and automated decisions

Providing your data is voluntary, but without it I can’t reply to your message or book a call. I don’t make automated decisions about anyone and I don’t profile visitors.

Changes

If the way the website works changes, I will update this document and the date at the top. The current version is always available at tomaszweber.com/en/privacy-policy/.