Privacy policy

Last updated: 2026-10-06

How kiodem.com and correspondence with KIODEM handle personal data.

Controller

The data controller is Magdalena Ociepa-Smolińska, sole trader operating as KIODEM, ul. Rybnicka 146, 44-100 Gliwice, Poland, tax ID (NIP) 6311230797, REGON 273490573. Contact for data matters: michal@kiodem.com, phone +48 789 350 367.

What data and why

Correspondence. When you email, call or send the answers from the Start form (the form opens your own email program and sends nothing by itself), I process what you give me to reply and prepare an offer (Art. 6(1)(b) GDPR), and after a contract also to perform and invoice it (Art. 6(1)(b) and (c) GDPR).

Business outreach. I write to companies at business addresses published on their own websites or in public registers. The basis is legitimate interest in informing them about my services (Art. 6(1)(f) GDPR; in the UK, PECR rules for corporate subscribers). Reply "no" and I will not write again and will mark the address as excluded.

Site statistics. Visits are counted with Cloudflare Web Analytics, which uses no cookies and does not track people across sites. The data is aggregate (legitimate interest, Art. 6(1)(f) GDPR).

Logs and security. The server (Cloudflare) records technical request data such as IP address and browser type to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR).

Cookies and browser storage

The site sets no advertising or analytics cookies. Cloudflare may set a technical bot-protection cookie (for example __cf_bm) that the site needs to work.

Your browser's local storage keeps only the language you chose and unfinished answers from the Start form, so they are not lost. They do not reach me unless you send them. Clearing site data in your browser removes them.

Who receives data

Providers the service cannot run without: Cloudflare, Inc. (hosting and protection) and Google (Google Workspace email). Both may process data in the USA under the EU-US Data Privacy Framework. For a contract, also the accounting office and authorities where the law requires it.

How long

Correspondence without a contract is kept until the matter is closed, no longer than 2 years. Contract and invoicing documents are kept for the period required by Polish tax law (5 years from the end of the year) and until claims expire. An address excluded from outreach stays on the exclusion list so it is not contacted again.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can complain to the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw) or the authority in your country. Giving data is voluntary, but without an address I cannot reply. There is no automated decision-making or profiling.