Privacy Policy

Last updated: 2025-12-16

This Privacy Policy explains how GTS7 – Software Development Services, operated by Kamil Wilk, collects, uses, and protects your personal data when you visit this website or contact me regarding software development services.

By using this website, you agree to the practices described in this Privacy Policy.

1. Data Controller

GTS7 – Software Development Services
Operated by: Kamil Wilk
Email: office@gts7-soft.com

If you have any questions about your data or this Privacy Policy, contact me at the email above.

2. Data I Collect

I only collect the personal data that is necessary to operate this website, respond to enquiries, and improve the service.

2.1. Data you provide directly

When you submit the Start Your Project / contact form, you may provide:

  • Full name
  • Email address
  • Company or organization
  • Project budget range
  • Project type
  • Message / project description
  • Any additional information you choose to share

2.2. Automatically collected data (analytics)

This website uses Google Analytics 4 (GA4) to understand how visitors use the site.

The information collected may include:

  • IP address (anonymized by Google — last digits truncated)
  • Browser type and version
  • Device information (mobile/desktop, OS)
  • Pages viewed and actions performed
  • Session duration
  • Referrer URL
  • Basic location (city/country level, not exact address)

Google Analytics does not collect personally identifiable information, such as your name or email.

Analytics data is collected only with your consent, based on cookie settings that you choose via the cookie banner.

2.3. Anti-spam and security (Google reCAPTCHA v3)

This website uses Google reCAPTCHA v3 to protect the contact form from spam and automated abuse.

reCAPTCHA automatically evaluates:

  • device and browser characteristics
  • mouse and keyboard interactions
  • anonymized behavioral patterns
  • technical metadata (e.g. IP address, timestamp)

reCAPTCHA does not show challenges or user-verification images (invisible v3).

Use of reCAPTCHA is subject to:

This data is processed based on legitimate interest (Art. 6(1)(f) GDPR) to protect the website from abuse.

2.4. Cookies and similar technologies

Cookies are used for:

  • Essential website functionality
  • Cookie preference storage
  • Analytics (only if you accept them)

You can manage cookie preferences at any time via the cookie banner or cookie settings.

3. How I Use Your Data

Your personal data is used for the following purposes:

Responding to your enquiry

To review your project details, communicate with you, and determine whether we can work together.

Providing services

If we start cooperation, your data will be used to deliver software development services, prepare contracts, and maintain communication.

Website analytics

To understand how visitors use the site and to improve page performance and content. Google Analytics is only activated if you consent.

Website protection

reCAPTCHA v3 is used to protect forms from spam and bots.

Legal / accounting purposes

To meet obligations under tax and accounting law.

I never sell your personal information.

4. Legal Basis for Processing (GDPR)

If you are located in the EEA, your data is processed based on:

  • Art. 6(1)(b) – preparing for or performing a contract (e.g., project discussions)
  • Art. 6(1)(f) – legitimate interests (security, spam prevention, site functionality)
  • Art. 6(1)(a) – consent (analytics cookies, optional tracking)
  • Art. 6(1)(c) – legal obligation (invoicing, accounting)

You may withdraw your consent for non-essential cookies at any time.

5. Data Retention

  • Contact form submissions: 12–24 months
  • Project and contract-related data: as required by tax/accounting law
  • Google Analytics data: based on GA4 retention settings (14 months by default)
  • reCAPTCHA logs: as per Google's own retention policies

Data no longer needed is deleted or anonymized.

6. Sharing Your Data

Your data may be shared with trusted service providers, including:

  • Hosting and infrastructure (e.g. Vercel)
  • Google Analytics (for usage statistics, only after consent)
  • Google reCAPTCHA v3 (spam protection)
  • Email providers
  • Payment and invoicing tools (if project cooperation begins)

All providers act under data processing agreements where applicable.

I do not sell or trade your personal data.

7. International Data Transfers

Some service providers (Google, Vercel, email services) may store data outside the EEA, including the United States.

Transfers are protected using:

  • Standard Contractual Clauses (SCC)
  • Adequacy decisions
  • Additional technical and organizational measures

These safeguards ensure adequate protection for your personal data.

8. Cookies and Tracking Technologies

Cookies used on this site fall into these categories:

1. Necessary Cookies (always active)

Required for basic site functions, form security, and cookie preference storage.

2. Analytics Cookies (optional)

Used by Google Analytics to measure performance, only activated after consent.

3. Functional / Marketing Cookies (optional)

Not used by default, but may be used in the future for integrations or personalization.

You can update your choices anytime in the cookie settings or banner.

9. Your Rights

Depending on your location, you may have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to certain processing
  • Withdraw consent
  • Request a copy of your data (data portability)

To exercise your rights, contact:
office@gts7-soft.com

You may also file a complaint with your local data protection authority.

10. Website Security

I use reasonable technical and organizational measures to protect your data. However, no online system can be completely secure.

If you believe your data has been compromised, please contact me immediately.

11. External Links

This website may link to external sites (e.g., LinkedIn, client projects, GitHub). I am not responsible for their content or privacy practices.

12. Children's Privacy

My services and website are not intended for individuals under the age of 16. I do not knowingly collect data from minors.

13. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect:

  • new features,
  • legal updates,
  • changes in processing practices.

The "Last updated" date at the top will show when changes were made.

14. Contact

For questions about this Privacy Policy or your data, contact:

GTS7 – Software Development Services
Email: office@gts7-soft.com