This policy explains what personal data justbuilt.it collects, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR, in Polish RODO).
Who is responsible
The data controller is Just Built It Justyna Dabrowska, NIP PL5783176403. You can reach me about anything in this policy at justyna@justbuilt.it.
Address
What I collect
When you email me: your name, email address and whatever you write in the message.
When you buy a component: checkout runs on Polar, the merchant of record, which processes your name, email address, billing and payment details as a separate controller under its own privacy policy. Polar shares with me what I need to deliver and support your purchase, such as your name and email address. I never see your card details.
When you visit the site: basic technical data, such as your IP address and browser, which the hosting provider Framer keeps in server logs to run and secure the site.
Site statistics: Framer Analytics counts visits without cookies and without building a profile of you.
The components I sell do not collect or send any personal data. Some remember their settings in your browser, and that stays on your device.
Why, and on what legal basis
To reply to your message and talk about a project: my legitimate interest in answering you, and steps you ask for before a contract (Art. 6(1)(f) and 6(1)(b) GDPR).
To deliver and support components you bought through Polar: my legitimate interest in helping my customers (Art. 6(1)(f) GDPR), and my tax and accounting duties (Art. 6(1)(c) GDPR).
To keep the site secure and understand how it is used: my legitimate interest (Art. 6(1)(f) GDPR).
Who receives your data
Only the services I need to run this site and my business: Framer (hosting and analytics) and home.pl (email). Polar receives your checkout details directly as the merchant of record and is responsible for them. Some of them are based outside the European Economic Area. Where that happens, the transfer is protected by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long I keep it
Messages: as long as we are in touch, then up to 12 months in case you come back to the conversation.
Sales records from Polar: 5 years from the end of the year in which the tax was due, as Polish tax law requires.
Server logs: as long as Framer keeps them, usually a few weeks.
Your rights
You can ask me for a copy of your data, to correct it, to delete it, to limit how it is used, to receive it in a portable format, and you can object to processing based on my legitimate interest. Write to justyna@justbuilt.it and I will reply within one month.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Do you have to give me your data?
No. You can browse the site without giving me anything. I only need your details if you want me to reply to you or if you buy something.
I do not sell your data, and I do not use it for automated decisions or profiling.
Changes
If this policy changes, the new version will be posted here with a new date at the top.