Privacy policy

1Who is responsible for your data

The controller of your personal data is Bartosz Bem, running the business Bemideas Bartosz Bem (Polish tax ID, NIP: 5783155140), which operates the bemideas.pl website. You can reach me through the contact form or on LinkedIn (opens in a new tab).

2What data I process and why

• Contact form - your name, email address, optional company name, the project details you select and your message. I use them only to reply to you and, if you want, to discuss working together. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering correspondence (Art. 6(1)(f) GDPR). Providing the data is voluntary, but I can’t reply without an email address.
• Server logs - when you open the site, the hosting provider automatically processes technical data such as your IP address, browser user agent, the requested address and time. This is needed to deliver the site and protect it from abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Spam protection - the contact form solves a small proof-of-work puzzle in your browser. It sets no cookies, doesn’t fingerprint you and involves no third parties.

3Cookies and local storage

This site doesn’t use cookies. If you change the theme, accent color or language, that choice is saved in your browser’s local storage so the site remembers it next time. It never leaves your device and you can clear it at any time in your browser settings.

4Who else receives your data

Two service providers process data on my behalf, under data processing agreements: Vercel Inc. (hosting and handling the contact form) and Resend (delivering the form message to my inbox). Both are based in the United States; transfers are covered by the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

I don’t sell your data or share it with anyone else, unless I’m legally required to.

5How long I keep it

I keep messages for as long as our conversation needs, and no longer than 12 months after our last contact. If we start working together, correspondence may be kept for as long as the law requires (for example, tax and accounting rules). Server logs are kept by the hosting provider only briefly, according to its own policy.

6Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. To use any of these rights, just write to me via the contact form.

You can also lodge a complaint with a data protection supervisory authority - in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl (opens in a new tab)).

I don’t use your data for automated decision-making or profiling.

7Links to other sites

This site links to GitHub, LinkedIn and SoundCloud. Nothing is loaded from those services until you click a link; once you do, their own privacy policies apply.

8Changes to this policy

If anything here changes, I’ll update this page and the date at the top.