busz.it is the website of a small software consultancy. This notice explains, in plain language, what personal data the site touches, why, and what you can do about it. It is deliberately short, because the site does very little.
Who is responsible
The data controller is Busz.it Michał Busz, a sole trader (jednoosobowa działalność gospodarcza) registered in Poland.
- Business name: Busz.it Michał Busz
- NIP: 8133722185
- REGON: 364549652
- Address: ul. Polskiego Czerwonego Krzyża 6/1, 35-060 Rzeszów, Poland
- Contact: [email protected]
No Data Protection Officer has been appointed, because the processing here does not require one.
What is collected, and why
There are no user accounts, no payments, no newsletter, no advertising and no profiling. That leaves two things:
Server and security logs
Like any website, the hosting provider and the content delivery network in front of it record technical information about each request — such as your IP address, the page requested, the time, and your browser's user agent. This is used to deliver the site, keep it available, and protect it against abuse. The legal basis is our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
Enquiries sent through the contact form
If you use the contact form, we receive the email address you enter, the subject and your message, and we use them only to reply to you. The form does not store anything on the server; it composes an email in your own mail client. Where your message concerns possible cooperation, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR); otherwise it is our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).
If we go on to work together and an invoice is issued, the related data is processed to meet our legal and tax obligations (Article 6(1)(c) GDPR) and kept for the period the law requires.
Cookies and analytics
No cookies are used for tracking, and no tool reads or writes anything on your device. Any analytics is cookieless and stores nothing on your device. Thecookie policy lists this precisely.
Who else is involved
Your data is not sold and is not shared for marketing. These service providers process it on our behalf:
- lh.pl — hosting and email.
- Cloudflare — content delivery, security, and cookieless analytics.
Transfers outside the EEA
Cloudflare is a global provider and may process data outside the European Economic Area, including in the United States. Where that happens it is covered by appropriate safeguards, in particular the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
How long it is kept
- Server and security logs — for the limited period our hosting provider and CDN set for operational and security purposes, after which they are deleted.
- Enquiries — for as long as needed to handle your message, and then only as long as necessary for our records.
- Contract and accounting data — for the period required by Polish tax law, where an agreement is concluded and invoiced.
Your rights
You have the right to:
- access your data and obtain a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict processing;
- object to processing based on legitimate interests;
- receive data you provided in a portable, machine-readable format;
- withdraw any consent at any time, without affecting processing before that date.
To exercise any of these, email[email protected]. You also have the right to lodge a complaint with the supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland —uodo.gov.pl.
Changes
This notice may be updated. The version published here always applies.
Last updated: 12 October 2026.