Privacy policy
Last updated 8 October 2026
In short: this site uses no cookies, no analytics and no tracking, and stores nothing on your device. It loads nothing from other companies — the fonts, video and photographs all come from pawelos.com itself. The only personal data involved is the technical information any web server receives when it sends you a page, and anything you choose to send me through the contact form or by email.
Who is responsible
The controller of your personal data under the EU General Data Protection Regulation (GDPR) is Paweł Laszczak, Poland. You can reach me about anything in this policy at pawel@pawelos.com.
Visiting the site
The site is delivered by Cloudflare, Inc., which hosts it and protects it from attacks. To send you a page, Cloudflare’s servers necessarily receive technical data from your browser: your IP address, the date and time, the address of the page requested, and your browser’s user-agent and referrer. This data is used only to deliver the site and keep it secure.
- Legal basis: my legitimate interest in running a working, secure website (Article 6(1)(f) GDPR).
- Who processes it: Cloudflare acts as my processor under its Data Processing Addendum. Cloudflare may process data in the United States; such transfers rely on the EU–US Data Privacy Framework, under which Cloudflare is certified, and on the European Commission’s Standard Contractual Clauses.
- What I see: only aggregated, anonymous statistics in Cloudflare’s dashboard, such as the number of requests. I do not see or keep any individual visitor’s data.
- How long: Cloudflare keeps such logs only for as long as it needs them to deliver and protect the service, as described in its privacy policy.
The contact form and email
The contact form asks for your name, your email address and your message. When you press send, they go to a small program on the same Cloudflare service that hosts the site, which immediately emails them to my inbox through Cloudflare Email Routing. The website itself does not store them anywhere. To keep spam out, the form also contains a hidden field and notes how long the form took to fill in; to stop abuse, Cloudflare briefly counts how many messages come from one IP address.
Whether you use the form or write to me directly, I use your email address and whatever you include in your message to reply and to continue our conversation — for example about a race, an interview or a partnership. The legal basis is my legitimate interest in answering correspondence (Article 6(1)(f) GDPR) or, where we are discussing an agreement, taking steps at your request before entering into it (Article 6(1)(b)). I keep messages as long as the conversation and any resulting cooperation need them, and then delete them, unless I must keep them longer to establish or defend legal claims. My email provider stores messages on my behalf.
Cookies and storage
The site sets no cookies and uses no local storage, so there is nothing to accept or decline.
Links to other sites
The site links to my profiles on Instagram, YouTube and Facebook, and to results published by organisations such as the FAI and MultiGP. Nothing from those services loads until you click a link. Once you do, you are on their site and their own privacy policies apply.
Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you and receive a copy (Article 15);
- have inaccurate data corrected (Article 16);
- have your data erased (Article 17);
- restrict how I process it (Article 18);
- receive your data in a portable format (Article 20);
- object to processing based on my legitimate interest (Article 21).
To use any of these rights, email pawel@pawelos.com. You also have the right to lodge a complaint with a data protection authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl — or with the authority in the country where you live or work.
Everything else
You are not required to give me any personal data; browsing the site needs none beyond what your browser sends automatically, and writing to me is up to you — though I can’t reply without an email address. I do not sell your data, use it for advertising, or make automated decisions or profiles about you. If this policy changes, the new version will be published on this page with a new date.