Privacy
Privacy notice
Last updated: 28 July 2026
Who handles your data
The controller is Krzysztof Kozioł, professionally known as Christopher Koziol, conducting business under the name Soke Pro Krzysztof Kozioł and operating under the standardLayer brand. You can contact me at [email protected].
What I collect
When you use the contact form, I collect your email address, message, links, and other information you choose to provide. When you visit the website or submit the form, technical data such as your IP address, timestamp, requested URL, browser or user-agent information, and security logs may also be processed to deliver and protect the website and prevent abuse. Please do not submit special-category personal data through the form.
Providing your data
Providing data through the form is voluntary and is not a statutory requirement. An email address and enough information to understand your request are necessary if you want me to review it and respond; without them, I may be unable to do so. Where your request concerns possible work, this information may also be necessary to take steps at your request before entering into a contract.
Why I use it
I use contact-form data to review your submission, reply, and discuss possible work. Where your enquiry concerns a possible engagement with you, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). In other cases, the legal basis is my legitimate interest in handling business correspondence (Article 6(1)(f) GDPR). I process technical data based on my legitimate interest in operating a reliable and secure website and preventing abuse (Article 6(1)(f) GDPR). I do not use form submissions for marketing, profiling, or automated decision-making.
Who receives it
I review submissions personally. Cloudflare provides website delivery, protects the form with Turnstile, and processes the form submission. Resend delivers the submission by email, and Google Workspace stores it in my mailbox. Adobe Fonts receives technical request data to deliver the website fonts; Adobe states that it receives, but does not store, the visitor’s IP address. These providers may use subprocessors to deliver their services. Adobe does not receive form content. I do not sell personal data. Cloudflare explains Turnstile processing in its Turnstile Privacy Addendum. Resend describes its processing terms in its Data Processing Addendum.
Transfers outside the EEA
Cloudflare, Resend, Google Workspace, and Adobe may process personal data outside the European Economic Area. Transfers to certified US recipients are based, where applicable, on the European Commission’s adequacy decision for the EU-US Data Privacy Framework. Where no adequacy decision applies, the providers use Standard Contractual Clauses approved by the European Commission and, where applicable, supplementary safeguards. You can read the relevant Cloudflare terms, Resend terms, Google terms, and Adobe transfer information, or contact me at [email protected] to request information about the safeguards used.
How long I keep it
Enquiries are normally kept for up to 12 months after the last contact, then deleted. If we start working together, relevant records may be kept for the duration of our work and for any longer period required by tax, accounting, or claims rules. Technical and security records are kept only for as long as needed to operate and protect the website, investigate abuse or a security incident, and meet legal obligations; the period depends on the type of record and the provider’s configured retention settings.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Contact [email protected] to exercise a right. You can also lodge a complaint with your local data protection authority; in Poland this is the Personal Data Protection Office.