Privacy policy

The controller of your personal data is Gracjan Kolary, operating as unregistered business activity under the brand Stackly by Temaco, based in Bydgoszcz, Poland.

Contact for data protection matters: business@temaco.pl or +48 574 173 833.

Unregistered business activity under Polish law has no tax or company registration numbers. No data protection officer has been appointed, as the law does not require one at this scale of processing.

From the contact form: your name or company name, email address, optionally a phone number, the selected service, an approximate budget and your message. Providing this is voluntary, but without an email address there is no way to reply.

From the demo chat: the content of the messages you type into it. Do not share anything confidential there. The conversation is passed to an external language model provider in order to generate a reply. The chat does not collect your contact details and does not create a booking.

Automatically, in server logs: IP address, browser type, and the date and time of the request. These are needed for security and to limit abuse of the form.

With your consent, via Google Analytics: anonymised data about how the site is used. No analytics script runs without consent.

Answering your enquiry — Article 6(1)(b) GDPR, steps taken at your request prior to entering into a contract.

The email sequence with practical tips: Article 6(1)(a) GDPR, your separate and voluntary marketing consent. This is a second, distinct checkbox on the form. Without it you receive only a reply to your enquiry.

Analytics and statistics: Article 6(1)(a) GDPR, consent given in the cookie banner.

Site security, including rate limiting and spam protection: Article 6(1)(f) GDPR, legitimate interest.

Enquiry correspondence is kept for 24 months from the last contact and then deleted. If we work together, for the period required for settlement and defence of possible claims.

Data in the marketing sequence is kept until consent is withdrawn. You can withdraw it at any time using the unsubscribe link in any message or by writing to business@temaco.pl.

Server logs are kept in line with the hosting provider's policy, typically around 30 days.

Analytics data: in line with Google Analytics settings, typically 14 months.

Vercel Inc.: site hosting and HTTP request handling.

Resend (Plus Five Five, Inc.): sending emails from the form and running the follow-up sequence, if you consented to it.

Google: the Gemini model powering the demo chat, only the content of messages typed into that chat. The chat runs on the free tier of the service, where the provider may use conversation content to develop its models. That is why you should not type anything confidential there.

Google Ireland Limited: Google Analytics, only after you give consent.

Some of these providers process data outside the European Economic Area, mainly in the United States. Transfers take place under standard contractual clauses approved by the European Commission or an adequacy decision.

I do not sell data and do not share it with anyone other than the providers listed above.

You have the right to access your data, rectify it, erase it, restrict processing, port it, and object to processing based on legitimate interest.

Any consent you gave can be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.

To exercise these rights, write to business@temaco.pl. I respond within 30 days, usually much sooner.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Essential: remembering your chosen language and your cookie decision. The site would not work correctly without them, so they do not require consent.

Analytics: Google Analytics. These run only after you click accept in the banner. Until then the Google script is not loaded at all, and Consent Mode v2 starts in a denied state.

You can change your decision at any time using the cookie settings link in the footer.

I do not use advertising cookies or cross-site tracking.

I do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you.

I update this policy when the way the site works changes. The last update date is shown at the top of this page. For material changes I will inform people who gave marketing consent.