WOMMWORKS ON MY MACHINE

Legal

Privacy policy

Last updated: 2026-11-01

1. Who is responsible for your data

The data controller is Works On My Machine, Warsaw, PL. You can reach the controller through the contact form on this website.

2. What data I process and why

  • Contact form: name, email address, company (optional) and your message. Used to reply to your enquiry and, if we agree to work together, to prepare an offer. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).
  • Checklist download: your email address, to send you the checklist, and — only if you tick the box — occasional emails about release testing, which you can unsubscribe from at any time. Legal basis: your request (Art. 6(1)(b) GDPR) and, for the occasional emails, your consent (Art. 6(1)(a) GDPR).
  • Call booking: if you book a call, Calendly collects your name, email address and anything you enter in the booking form, to schedule and hold the call. Legal basis: Art. 6(1)(b) GDPR.
  • Website analytics: Google Analytics 4, only if you accept analytics cookies in the banner. Google Ireland Ltd. processes the data; it may be transferred to the U.S. under the EU–U.S. Data Privacy Framework. You can withdraw consent at any time by clearing this site's data in your browser.
  • Server logs: the hosting provider processes technical data (such as IP address and browser type) to deliver the site securely. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

3. Who receives the data

I use the following service providers, who process data on my behalf:

  • Lovable (website hosting and transactional email), with infrastructure on Cloudflare;
  • Supabase (database storing contact form messages and checklist signups);
  • Calendly (call scheduling);
  • Google Analytics (website statistics, only with your consent).

Some of these providers are based in or use infrastructure in the United States. Transfers are based on the EU–U.S. Data Privacy Framework or Standard Contractual Clauses. I do not sell your data or use it for advertising.

4. How long I keep it

Contact form messages are kept for as long as needed to handle your enquiry and any resulting cooperation, and then for the period required by tax and accounting law or until any claims expire.

5. Your rights

You have the right to access your data, correct it, have it deleted, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. You also have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

6. Is providing data required?

No. Providing data in the contact form or booking form is voluntary, but without an email address I cannot reply.

7. Client projects

Data I access while testing your product is covered by a separate data processing agreement signed before work starts, not by this policy.