Privacy Policy
1. Data controller
The controller of your personal data is Maciej Spychalski, a sole trader operating under the name MacSpy, ul. Telefoniczna 23E/13, 91-728 Łódź, Poland, NIP (Tax ID) 8883054960, REGON (Statistical ID) 544744481.
Contact for matters concerning personal data: rodo@spych.eu.
2. Scope of data processed
The spych.eu site is an informational website. It has no forms, user accounts, comment systems, or tracking mechanisms. Only the following data is processed:
- Web server logs
- On every visit, the server records the IP address, date and time of the request, the address of the requested resource, the HTTP response code, and information sent by the browser (the User-Agent and Referer headers). These records are created automatically and are a technical consequence of using the network.
- Email correspondence
- If you write to one of the contact addresses — mac@spych.eu (general inquiries), offer@spych.eu (business inquiries), or rodo@spych.eu (personal-data matters) — the data contained in the message is processed: the sender’s address, the content, and any information you choose to include.
3. Purposes and legal basis
- Server logs — ensuring the security and correct operation of the site, detecting abuse, and diagnosing failures. Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller).
- Correspondence — responding to inquiries and, where applicable, taking action prior to entering into a contract. Legal basis: Art. 6(1)(b) and (f) GDPR.
4. Retention period
Server logs are kept for as long as necessary for security and diagnostic purposes, for no longer than 12 months. Correspondence is kept for the duration of handling the matter and, afterward, for the period of limitation of any potential claims.
5. Recipients of data
The site runs on server infrastructure administered solely by the controller and located in data centres within the European Union. Data is not sold or shared with third parties for marketing purposes and is not transferred outside the European Economic Area.
Recipients of data — strictly to the extent technically necessary to deliver the service — may be:
- the server infrastructure provider (data centre) — the entity supplying the servers the site runs on, acting under a data processing agreement and storing data solely within the EEA;
- the email service provider — to the extent necessary to handle correspondence.
6. Data of hosting customers
This policy covers the spych.eu website only. If you use website hosting, application hosting, or backup services, the data you place in those environments is not processed under this policy — in that role MacSpy acts as a data processor and you remain the controller of that data. The purposes, scope, and terms of such processing are set out in a separate data processing agreement concluded under Art. 28 GDPR.
7. Cookies, local storage, and external services
The site does not use cookies. We do not use analytics tools, tracking pixels, or advertising. We do not profile you and we do not make automated decisions about you.
The site does, however, save two preferences in your browser’s local storage (localStorage) — both of which you set yourself:
- Color theme
- Your choice between the light and dark version. It is saved only when you click the theme toggle — if you never use it, nothing is stored.
- Language version
- Your choice between the Polish and English version. It is saved only when you click the language switch, and is used on your next visit to open the site in the version you picked.
These entries are not cookies. They are never sent to the server, never shared with anyone, and cannot identify you — they exist solely so that the site looks the way you left it next time you come back. Storing them is strictly necessary to provide a feature you explicitly requested, so under Art. 173(3) of the Polish Telecommunications Act it does not require separate consent. You can remove them at any time by clearing the site’s data in your browser settings.
All site resources — including typefaces, images, and stylesheets — are served from the spych.eu domain. Viewing the site does not trigger any request to external servers, so your IP address is not sent to third parties such as CDNs or Google Fonts.
8. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy of it,
- rectify inaccurate or incomplete data,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on legitimate interest.
To exercise these rights, write to rodo@spych.eu. You also have the right to lodge a complaint with the President of the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland) if you believe that the processing of your data infringes GDPR.
9. Voluntary provision of data
Providing data is voluntary. Being recorded in the server logs, however, is an automatic consequence of connecting to the server, and the only way to avoid it is not to visit the site. Contact details given in a message are necessary in order for us to reply.
10. Changes to this policy
This policy may be updated if the way the site operates changes, or if the law changes. The current version is always available at this address, together with the effective date given at the top of the document.