About your data
Privacy policy
This policy describes how personal data is processed when you use solvepatch.com or contact SolvePatch.
Last updated:
01Controller and contact details
The controller of your personal data is the business SolvePatch Paweł Bielecki, ul. Słowiańska 9, 41-209 Sosnowiec, Poland, tax identification number (NIP): 6443602965, business register number (REGON): 545682463.
For matters concerning your personal data, contact hello@solvepatch.com or write to the postal address above.
02Data we process
When you use the contact form, we receive your email address, selected topic, message and form language. Your name or company name is optional. When you contact us by email, we also receive sender and recipient details, message dates, and information and attachments included in the correspondence. If you contact us by phone, we may process your phone number and information needed to handle your enquiry.
Providing data is voluntary. An email address, topic and message are needed to submit the form and receive a response. You can use another available contact channel instead. Provide information relevant to your enquiry; we do not require health information or other special categories of data.
When you view the website or submit the form, the technical infrastructure processes information needed to handle the connection and protect the service, including your IP address, request time and address, browser information, and response status. Form protection uses temporary counters and transformed IP and email identifiers. We do not use them to create advertising profiles.
03Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, corresponding and understanding requirements; contacting a person representing a business | Article 6(1)(f) GDPR — our legitimate interest in handling enquiries and business discussions |
| Taking steps at your request before entering into a contract, and performing it where you are a party | Article 6(1)(b) GDPR |
| Operating the website, diagnosing errors, and protecting the form against spam and abuse | Article 6(1)(f) GDPR — our legitimate interest in maintaining a reliable and secure service |
| Keeping necessary records of discussions and establishing, exercising or defending legal claims | Article 6(1)(f) GDPR — our legitimate interest in protecting our rights and documenting agreements |
| Meeting data protection obligations, particularly handling requests concerning your rights | Article 6(1)(c) GDPR in conjunction with the obligations established by the GDPR |
Submitting the form does not subscribe you to a newsletter or advertising list. We do not run a newsletter or use form data for marketing profiling. We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. Automatic limits may temporarily prevent another form submission; you can still contact us by email.
04Service providers and international transfers
We use infrastructure providers that receive data to the extent necessary to provide their services:
- Vercel — website hosting, form processing, diagnostics and security.
- Resend — delivering form messages to our mailbox and sending an acknowledgement to your email address.
- Google Workspace — operating our business email and storing correspondence.
- Upstash — storing temporary counters to prevent abuse of the contact form. We send transformed identifiers and counters, without message content or plain IP and email addresses.
- Cloudflare — providing DNS services that direct the domain to the relevant internet services.
Enquiry content and attachments remain within our business correspondence channel. The owner's auxiliary address may receive only a general notification of a new message, without the sender's details, subject, content or attachments.
Providers processing data on our behalf operate under data processing terms. Where a provider independently determines processing purposes, for example to secure its own infrastructure or meet its own legal obligations, its own privacy terms also apply. Data may be disclosed to authorised public authorities where required by law.
Using these services may involve processing outside the European Economic Area, particularly in the United States. Resend also stores message content in the United States. Depending on the provider and transfer, transfers rely on a European Commission adequacy decision, including the EU–US Data Privacy Framework for entities covered by that mechanism, or on standard contractual clauses approved by the European Commission.
Information about transfer safeguards is available in the documents provided by Vercel, Resend, Google, Upstash, and Cloudflare. You can also write to hello@solvepatch.com to request information about the safeguards applicable to your data or a copy of them, subject to protecting other people's rights and confidential information.
05How long we retain data
| Data | Retention period |
|---|---|
| Correspondence concerning an enquiry that does not result in a contract | While handling the enquiry, then for no longer than 3 years after substantive correspondence about that matter ends; we delete it earlier when it is no longer needed to document discussions or protect rights |
| Correspondence forming part of a concluded contract's records | For the duration of the contract, then until the applicable limitation period for claims expires; records subject to a statutory retention obligation are kept for the period required by law |
| Data needed for a specific dispute or legal claim | Until proceedings are finally concluded; where further enforcement or pursuit of a claim is necessary, until those actions end or the applicable limitation period expires |
| Form protection counters and related transformed identifiers in Upstash | Individual entries expire automatically, no later than 2 hours and 1 second after creation; further attempts may create new entries |
| Application runtime logs available to us in Vercel | Up to 30 days after the event; selected information needed to investigate a specific incident may become part of the relevant case or claim records |
| Technical message copies and delivery logs in Resend | Up to 30 days; the provider's backups have a separate 7-day retention cycle |
| Browser preferences and session data | As described in section 6 |
We delete spam and messages unrelated to handling enquiries once identified, unless they are needed to investigate abuse. The three-year period does not mean that every message is kept regardless of its purpose, or that records of an ongoing dispute are automatically deleted.
Deletion covers correspondence, stored records of discussions, and downloaded attachments. Removal from a provider's systems may follow its technical deletion cycle. Google allows up to 180 days to carry out a deletion instruction after data is permanently deleted by its customer, subject to legal exceptions. This period concerns deletion by the provider, rather than continued use of correspondence by SolvePatch.
06Cookies and browser storage
The website does not use Google Analytics, Vercel Web Analytics or advertising trackers. We do not set a language cookie: the page address determines the language. We do not track opens or clicks in the emails we send.
After you select a theme, the website saves your preference in the browser's local storage so it can restore it on later visits. Session storage retains page display progress and an auxiliary scroll position to preserve presentation when you return or reload. We do not store form contents in these mechanisms.
The theme preference remains until changed or until you clear the website's data. Session data generally lasts for the tab's session; your browser may restore it when restoring a session. You can change the theme using the website's theme selector. You can delete or block local and session data in your browser settings, which may prevent preferences from being remembered.
07Your rights
Subject to the conditions established by the GDPR, you have the right to:
- access your personal data and obtain a copy;
- correct inaccurate data and complete incomplete data;
- have your data erased where the conditions for this right are met;
- restrict processing;
- receive and transfer data processed by automated means on the basis of a contract or consent, within the scope of Article 20 GDPR.
You may also object to processing based on legitimate interests on grounds relating to your particular situation. Following an objection, we will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or grounds for establishing, exercising or defending legal claims.
Send your request to hello@solvepatch.com. We respond without undue delay, normally within one month. If an extension is necessary under the GDPR, we will tell you and explain the reasons.
You may lodge a complaint with a competent supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. In Poland, this is the President of the Personal Data Protection Office.
08Changes to this policy
We update this policy when the website, our processing activities or legal requirements change. The current version is available at the same address with its update date. A new processing purpose requires appropriate notice before data is used for that purpose and, where required, your consent.