Skip to content
TestLine Menu
TestLine
Contact
[email protected]

Privacy policy

This policy explains what personal data TestLine processes, why, and what rights you have. The site uses no cookies or analytics tools.

last updated:

Data controller

The controller of personal data is Artur Machowski, a sole proprietor trading as TestPro Artur Machowski (the TestLine brand), ul. Świerkowa 1, 32-067 Tenczynek, Poland, tax ID (NIP) 5130275637, REGON 520595775 (the Controller). Contact on data protection matters: [email protected] or by post at the address above.

This policy covers the testline.pl website (the Site) and fulfils the information obligations under Article 13 of Regulation (EU) 2016/679 (GDPR).

What data I process

  • Contact form data: first name, email address, company name (optional), project type and message.
  • Email correspondence: email address, signature and message content if you write directly.
  • Server logs: IP address, date and time of the request, page address, browser type. These are recorded automatically by the Site's server for security purposes.

Providing data in the form is voluntary, but without an email address and a project description I can't reply to your enquiry.

Purposes and legal bases

  • Replying to your enquiry and further correspondence, including preparing a quote - Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in replying to messages).
  • Keeping the Site secure and protecting the form against spam - Article 6(1)(f) GDPR.
  • Establishing, exercising or defending legal claims - Article 6(1)(f) GDPR.
  • Complying with legal obligations, such as tax and accounting, if we work together - Article 6(1)(c) GDPR.

The consent box in the form confirms that you have read this policy and want me to reply. Data is not used for profiling or automated decision-making.

Cookies and analytics

The Site uses no cookies, no browser local storage and no analytics or advertising tools. Fonts are served from the Site's own server, without connections to third-party providers. The one exception is the contact page: the form is protected against spam by Cloudflare Turnstile, whose script is loaded from Cloudflare's servers. It checks that a human is sending the form, based on signals such as the IP address and browser characteristics, and is not used for tracking or advertising. That's why the Site shows no consent banner.

To monitor the Site's visibility in search I use Google Search Console, which relies on data collected by Google Search, not on scripts embedded in the Site.

Recipients

Data may be shared with providers who deliver services to me:

  • the provider of the server the Site runs on (OVH, server located in Canada) - for data sent through the form and server logs;
  • the email delivery provider (Resend) - the form message is sent through its servers to my mailbox;
  • Cloudflare, Inc. - intermediary for traffic to the Site (proxy and CDN: all requests pass through Cloudflare, including the IP address and data sent through the form) and spam protection for the form (Turnstile);
  • the email provider (Google Workspace, Google Ireland Limited) - form messages and correspondence are stored in a mailbox in this service;
  • an accounting firm - if we work together and an invoice is issued.

The Site's server is located in Canada. Transfers to Canada are based on the European Commission's decision finding an adequate level of personal data protection (Article 45 GDPR). Google, Resend and Cloudflare may also process data in the United States. Such transfers are based on the European Commission's decision on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission. Where another provider processes data outside the European Economic Area, I rely on the same GDPR mechanisms. Data may also be disclosed to public authorities where the law requires it.

How long I keep data

  • Form messages and correspondence - for the duration of our conversation and then until the limitation period for possible claims expires.
  • Documents related to our work together - for the period required by tax law.
  • Server logs - up to 14 days. The form content is not stored on the server, it goes straight to my mailbox.

Your rights

You have the right to:

  • access your data and receive a copy;
  • rectify your data;
  • have your data erased;
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interest;
  • lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, Poland).

To exercise your rights, write to [email protected]. I'll reply without undue delay and within one month at the latest.

Security

The Site works only over an encrypted HTTPS connection. Only I have access to the mailbox and enquiry data, and accounts are protected with strong passwords and two-factor authentication.

Changes

This policy may change, for example when service providers change. The current version is always available on this page with the date of the last update.