Legal
Privacy policy
This policy explains what personal data we process on letsweb.biz, for what purpose and on what legal basis, and the rights you have under the GDPR.
Last updated: 17 June 2026
1. Data controller
The controller of your personal data is Tomasz Kuśmierczyk, trading as letsweb.biz. For any data-protection matter, contact tomasz.kusmierczyk@letsweb.biz.
2. What data we collect and why
We process personal data in the following situations:
- Contact form / email. When you write to us, we process the data you provide — your name, email address and the content of your message — solely to respond and correspond about the matter you raised.
- Visit statistics. We collect anonymous, aggregate traffic data (see section 6) without identifying individuals.
- Client panel account. When you create an account and sign in to the client panel, we process your email address and name/username in order to maintain the account and make documents (e.g. invoices) and work-progress updates available to you there.
3. Legal basis
- responding to enquiries — Art. 6(1)(b) GDPR (steps prior to entering a contract) and Art. 6(1)(f) GDPR (our legitimate interest in handling correspondence);
- visit statistics — Art. 6(1)(f) GDPR (legitimate interest in analysing site traffic in a privacy-preserving way);
- maintaining the client-panel account — Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering one).
4. Retention
We keep correspondence for as long as needed to handle the matter and then for the period in which related claims may be brought. Statistical data is aggregate and does not allow individuals to be identified.
5. Recipients
Data may be entrusted to processors that support the site — in particular our hosting/server provider and email-service provider — only to the extent needed to deliver those services and under data-processing agreements. We do not sell or share your data with third parties for marketing.
6. Cookies and statistics
Visit statistics. For traffic analysis we use Umami, an analytics tool self-hosted on our own infrastructure (stats.letsweb.biz). Umami works without cookies and does not store your IP address or any data that could identify you. Only aggregate data is collected, such as page views, referrer, approximate country and browser/device type.
Signing in to the client panel. If you create an account or sign in to the client panel, we use cookies that are strictly necessary for that feature — to maintain your session and authenticate you securely. These include our own session cookie and the cookies of the sign-in system (Keycloak) running on our infrastructure (auth.letsweb.biz). They are first-party cookies, set only once you attempt to sign in, short-lived and tied to your session (the application session cookie expires after about 8 hours). They are used solely for authentication — not for tracking or marketing.
Cookies strictly necessary to provide a service you requested (signing in) do not require consent under privacy law. The site uses no marketing or tracking cookies and shares no data with external ad networks, so using it does not require a cookie-consent banner.
7. Your rights
In relation to the processing of your data you have the right to:
- access your data and obtain a copy,
- rectify (correct) your data,
- erase your data,
- restrict processing,
- object to processing,
- data portability.
To exercise these rights, email tomasz.kusmierczyk@letsweb.biz.
8. Right to lodge a complaint
If you believe the processing of your data infringes the law, you have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Changes to this policy
This policy may be updated. The current version is always available on this page, with the last-updated date shown above.