Documents

Privacy policy

Information about data that may be processed when using rexbit.pl, contact forms and analytics tools.

Last updated: July 5, 2026
Cookie policy
01

Data controller

The data controller is Rexbit / Michał Sierpień. Privacy contact: msierpien@rexbit.pl or +48 793 440 792.

The website presents website and online store design and implementation services. It does not sell online or offer user accounts, so separate website terms are not currently necessary. Cooperation terms are agreed individually before a project starts.

02

Data that may be processed

Data may include information voluntarily submitted through the contact form or project brief, as well as basic technical data related to website use.

  • name, surname or company name
  • email address and phone number
  • current website URL, project description, budget, timeline and message content
  • technical data such as IP address, device type, browser, approximate location and page view information if you consent to analytics
03

Purposes and legal bases

Data is processed only as needed to handle inquiries, prepare replies, run project discussions, secure the website and analyze website performance after consent.

  • replying to a message or brief - pre-contract steps or legitimate interest
  • project cooperation, if started - performance of a contract
  • accounting or tax duties - legal obligation
  • Google Analytics and Microsoft Clarity analytics - user consent
  • website security and claims handling - legitimate interest
04

Tools and recipients

Data may be shared with providers that technically support the website, email, forms, hosting, CMS and analytics. I use only services needed to run the website and handle inquiries.

  • hosting and infrastructure providers
  • Resend or an email provider used for forms
  • Sanity as a content management system if specific content is handled by the CMS
  • Google Analytics and Microsoft Clarity only after analytics cookie consent
05

Transfers outside the EEA

Some tools, especially Google and Microsoft, may involve data transfers outside the European Economic Area. In such cases, GDPR mechanisms such as standard contractual clauses or other safeguards offered by providers are used.

06

Retention

Form messages and correspondence are kept for the time needed to handle the inquiry, then for a period justified by claims protection or continued discussions. Accounting data is kept according to applicable law. Analytics data is processed according to Google Analytics and Microsoft Clarity settings and your consent.

07

Your rights

You have the right to access, rectify, delete or restrict processing of your data, object to processing, request data portability and withdraw consent. Withdrawal does not affect processing that took place before consent was withdrawn.

You also have the right to lodge a complaint with the Polish Data Protection Authority.