Last updated: September 4, 2026
This Privacy Policy explains how personal data may be processed when you visit nalepa.us or contact us by email.
Website operator and data controller:
Krzysztof Nalepa
ul. Sadowa 35
32-020 Wieliczka
Poland
email: contact@nalepa.us
“Christopher Nalepa” is the author/creative name used on this website. Krzysztof Nalepa is the individual who legally operates the website and is the controller of personal data processed for the purposes described below.
What personal data we collect and why: The hosting infrastructure may record technical server logs, including your IP address, browser/device information, the date and time of a request, and the requested URL. These data support delivery of the website, troubleshooting and security. If you choose to contact us by email, we process your email address, the contents of your message and any information you provide to respond to your enquiry. This website has no user accounts or checkout and does not directly collect payment details or purchase records.
Legal basis (GDPR): Processing for website operation, troubleshooting, security and responding to enquiries is based on legitimate interests under Article 6(1)(f) GDPR, subject to your rights and interests. These interests are maintaining a functioning, secure website and handling correspondence initiated by you.
Your rights under GDPR: Where applicable, you may request access to your personal data, rectification, erasure or restriction of processing, and object to processing based on legitimate interests. Data portability applies where the legal conditions are met. You may lodge a complaint with a data protection supervisory authority, including the President of the Personal Data Protection Office (UODO) in Poland. Contact us using the details below to exercise your rights.
California privacy rights: If applicable California privacy law grants you rights in relation to our processing, you may contact us to exercise them. We do not sell personal data.
How we protect and share your data: Personal data should be protected by appropriate technical and organisational safeguards. Hosting and email providers may process technical data or correspondence as necessary to operate the website and handle email. Data may also be disclosed where required by law.
Third-party platforms: This website links to platforms such as Amazon, Empik, Spotify, Kobo and Everand. When you follow a link, the destination platform processes data under its own privacy policy. Purchases, payments and accounts on those platforms are handled by those platforms, not by this website.
How long we retain your data: Retention of technical logs depends on the hosting configuration and the time needed to diagnose faults or investigate security incidents. Email correspondence is retained for handling your enquiry and related follow-up. Any longer retention must be justified by an applicable legal obligation or the need to establish, exercise or defend legal claims.
Cookies: The current website code does not set first-party cookies and contains no analytics or marketing scripts. Hosting infrastructure may use technically necessary cookies to deliver or secure the website. External platforms may use cookies under their own policies when you visit them.
Changes: We may update this policy to reflect changes to the website or its data processing. The date above indicates the latest update.
Contact: Krzysztof Nalepa, ul. Sadowa 35, 32-020 Wieliczka, Poland. Email: contact@nalepa.us
Thank you for trusting us with your information.