Privacy policy

Last updated: 2 September 2026

kwerenda.ai is an informational website. There are no accounts and no log-in, we store no cookies, show no ads and do not profile Users. The only data you can give us is what you type into the contact form. Below we describe exactly what data is nevertheless created when you visit the site, and what happens to it.

1. Data controller

The controller of personal data is Piotr Telka, a sole trader doing business as PIOTR TELKA, ul. Melcera 21, 02-495 Warsaw, Poland, tax ID (NIP) 6572936792, business registry number (REGON) 369884585, entered in the Polish Central Register and Information on Economic Activity (CEIDG).

The site is available at https://kwerenda.ai.

Contact regarding personal data: kontakt@kwerenda.ai

The controller has not appointed a Data Protection Officer - the conditions of art. 37 GDPR do not apply.

2. What we do not do

This list describes the Site more precisely than any description of what we do:

  • we store no cookies and nothing else in the browser (localStorage, sessionStorage),
  • we run no accounts, sign-up or log-in - the only data you can give us is what you type into the contact form yourself (section 6),
  • we show no ads and use no ad networks or tracking pixels (Google Analytics, Meta Pixel, LinkedIn Insight and the like),
  • we do not profile Users and take no automated decisions about them,
  • we do not sell data and do not share it for marketing purposes.

Because the Site neither stores nor reads anything on the User's device, the rules requiring consent for storing information on terminal equipment (so-called cookie consent) do not apply here. That is why there is no consent banner.

3. Visit statistics

The Site uses Plausible Analytics - an analytics tool that stores no cookies or any other identifiers on the User's device and keeps no IP addresses. Only aggregate data is collected:

  • the number of pageviews and visits and the pages visited,
  • the referring page address,
  • approximate location at country, region or city level,
  • browser and operating system type and version,
  • device category (desktop, phone, tablet).

The IP address is used once, in the analytics server's memory, to determine the approximate location and to distinguish visits within a single day, and is then irreversibly discarded. No persistent identifier is created that would allow a User to be tracked across days or across websites.

Purpose: keeping audience statistics for the Site.
Legal basis: art. 6(1)(f) GDPR - the controller's legitimate interest in analysing traffic on its own website.
Provider: Plausible Insights OÜ (Estonia); data processed on servers within the European Union.
Retention: aggregate data indefinitely; it contains nothing that identifies a person.

4. Hosting logs

The Site is a static page hosted on GitHub Pages. The hosting provider keeps standard access logs containing the IP address, the date and time of the request, the requested resource, the browser type and the referring page. These logs are kept by the provider for its own purposes - serving the page, security and abuse prevention - under its own retention policy. The controller has no access to them and does not use them for its own purposes.

Purpose: serving the page and infrastructure security.
Legal basis: art. 6(1)(f) GDPR.
Provider: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (a Microsoft company).

5. Resources loaded from external servers

The look of the Site relies on one resource fetched from an external server. When the page opens, the User's browser connects to it directly, so its provider receives the IP address, the browser type and the address of the page making the request:

  • the Saira and Spline Sans Mono typefaces from Google Fonts (fonts.googleapis.com, fonts.gstatic.com) - Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,

The Site's stylesheet is built locally and served from the same server as the page, so it causes no connections to external servers of its own.

This resource serves only to display the page. It is not used for tracking or profiling, and the controller passes its provider no additional information about the User. According to Google's documentation, requests to Google Fonts are unauthenticated and carry no cookies.

Purpose: correct and consistent rendering of the page.
Legal basis: art. 6(1)(f) GDPR.

6. Contact form and correspondence

If a User writes to kontakt@kwerenda.ai, the controller processes the data contained in the message (e-mail address, name, company name, the content of the correspondence) in order to reply and to carry on the exchange. Providing this data is voluntary but necessary to receive an answer.

Purpose: answering the enquiry and taking steps towards concluding a contract.
Legal basis: art. 6(1)(f) GDPR (conducting correspondence) and, where the message concerns concluding a contract, art. 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract).
Retention: for the duration of the correspondence and then no longer than 12 months from the last message; if a contract is concluded, for the period required by law, in particular tax and accounting rules.

The controller's mailbox is maintained by an external e-mail provider under a data processing agreement.

Contact form

The Site carries one contact form, used to arrange a demonstration of the kwerenda.ai Service. It requires a name, an e-mail address, a company name and the content of the message. Providing this data is voluntary but necessary to receive an answer; the form collects nothing else and stores nothing in the User's browser.

Submissions are handled by Web3Forms, an external provider that receives the submission and passes it on to the controller's mailbox. The provider processes the data solely for that purpose, under a data processing agreement. The data then becomes ordinary e-mail correspondence and follows the rules described above.

7. Recipients of data

The only recipients of data may be:

  • Plausible Insights OÜ - as described in section 3,
  • GitHub, Inc. - as described in section 4,
  • Google Ireland Limited - as described in section 5,
  • the e-mail provider and the contact form provider (Web3Forms) - as described in section 6,
  • authorities entitled under the law, where they present a request with a proper legal basis.

The controller does not sell data and does not share it with third parties for marketing purposes.

8. Transfers outside the EEA

The data described in sections 4, 5 and 6 may reach countries outside the European Economic Area, including the United States. GitHub, Inc. (as part of Microsoft) and Google participate in the EU-U.S. Data Privacy Framework, whose adequacy the European Commission confirmed in its decision of 10 July 2023; standard contractual clauses serve as an additional basis for the transfer.

The connection to api.web3forms.com is made directly from the User's browser at the moment the form is submitted and covers the data entered in the form. Standard contractual clauses agreed with the provider serve as the basis for that transfer.

The controller plans to move the typefaces to its own server, which will remove connections to servers outside the EEA during ordinary browsing.

9. Profiling and automated decisions

The controller does not carry out profiling and takes no decisions about Users based solely on automated processing that produce legal effects or similarly significantly affect them.

10. Your rights

Every User has the right to:

  • access their data (art. 15 GDPR),
  • rectification (art. 16 GDPR),
  • erasure (art. 17 GDPR),
  • restriction of processing (art. 18 GDPR),
  • data portability (art. 20 GDPR),
  • object to processing based on legitimate interest (art. 21 GDPR),
  • lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Requests should be sent to kontakt@kwerenda.ai. The controller responds without undue delay and no later than one month from receipt.

An important limitation. The data described in sections 3 and 4 does not allow the controller to identify a User. Under art. 11(2) GDPR the controller is not obliged to obtain additional information solely in order to satisfy a request when it cannot determine which records the request concerns. In practice, these rights therefore apply to data from correspondence (section 6).

11. External links

The Site may contain links to external websites. The controller is not responsible for their content or for the privacy practices they apply.

12. The kwerenda.ai Service

This policy covers the kwerenda.ai website only. Processing of data within the kwerenda.ai Service - including data on people holding positions in company bodies, taken from open public registers - is governed by the separate contract concluded with the client and is not the subject of this document.

13. Changes to this policy

The controller may amend this privacy policy. The current version is always published on this page together with the date of the last update. In case of material changes to the scope or purposes of processing, a notice will be displayed prominently on the Site for no less than 14 days.

Changes do not limit rights acquired by Users before they take effect.

This English version is a translation provided for convenience. In case of any discrepancy, the Polish version of the policy prevails.