Marcin Grzegorzewski Send a brief

Privacy policy

Last updated: 22.10.2026

Who processes the data

The controller of personal data is Marcin Grzegorzewski. In matters concerning personal data, please get in touch through the contact form.

Data from the contact form

When you send a brief, I save your full name, company name, e-mail address, the description of the job, the deadline and budget if you give them, and your IP address (spam protection). I use them to answer the inquiry, prepare a quote and - if we work together - carry out the job (Art. 6(1)(b) GDPR). I process the IP address in my legitimate interest of protecting the form against abuse (Art. 6(1)(f) GDPR).

E-mail correspondence

When you write to my e-mail address or reply to my message, I save this correspondence - your address, full name, content and date - in the system in which I run projects and conversations with clients. I keep it so that I can reply to you and, if we start working together, to carry out the work (legitimate interest, Art. 6(1)(f) GDPR; when working together - performance of a contract, Art. 6(1)(b) GDPR). I don't save messages unrelated to work, e.g. newsletters.

Business contacts

I write to agencies and companies I would like to work with. Their business contact details - first name, last name, position, e-mail address, phone - come from public sources: company websites, LinkedIn, referrals or earlier work. I process them in my legitimate interest of starting and running business cooperation (Art. 6(1)(f) GDPR). For every contact I record where the address comes from.

You can object to such contact at any time - just reply “no”. The address then goes on a block list and I won't write to you again.

How long I keep data

  • Inquiries that did not lead to work together - 12 months from the last message.
  • Data related to work together - for the duration of the work, and then for the period required by tax and accounting law.
  • Business contacts without a reply - 12 months from being added, after which I delete or anonymise them.
  • The block list - indefinitely, as a hash from which the address cannot be read.

Who I share data with

I don't sell data. Only the service providers without which the site cannot work use it: the hosting company and the e-mail provider. They process it on my behalf.

Your rights

You have the right to access your data, to have it corrected, deleted or its processing restricted, to data portability and the right to object. You can also lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

Cookies

The site uses only strictly necessary cookies:

  • a session identifier – keeps the form working and protects it against abuse,
  • “language” – remembers the language version selected in the site footer, so the site opens in that language on your next visit. It is stored for one year and contains no personal data.

Your light or dark theme preference is saved in your browser's storage (localStorage). This information is not sent to the server.

I don't use advertising or tracking cookies.