1. Who is the data controller
The controller of personal data is [COMPANY NAME], Tax ID (NIP) [NIP], KRS [KRS], [ADDRESS], operating under the RobimyWeb brand. For matters concerning personal data, write to .
2. What data I collect and why
Contact form and email
I collect your full name and email address and, if you provide them, also your phone number, company name and the content of your inquiry. I use them to reply and prepare an offer (Art. 6(1)(b) GDPR) and to contact you about your inquiry (Art. 6(1)(f) GDPR). I keep them for up to 12 months from our last contact, unless we sign a contract.
Contracts and invoices
I keep the data needed for the contract and the invoice for the period required by tax law, i.e. 5 years from the end of the year in which I issued the invoice (Art. 6(1)(c) GDPR).
AI assistant on the website
I send the messages you type in the chat to Google (Gemini API) to generate a reply. I use the paid version of the API, in which Google does not use the messages to improve its products. I don’t store conversations on my server. The conversation history stays in your browser until you close the tab. Do not enter sensitive data in the chat. Legal basis: answering your question (Art. 6(1)(f) GDPR). Google may process data outside the European Economic Area with the safeguards required by the GDPR.
If you leave your name and email (and optionally your phone number) in the chat and send the conversation, it reaches me by email together with that data, the page you are writing from and the services in your inquiry. I treat it like an inquiry from the form: I use it to reply and prepare an offer (Art. 6(1)(b) GDPR) and keep it for up to 12 months from our last contact, unless we sign a contract.
Booking a call (Cal.com)
The “Book a call” button opens a calendar on Cal.com (Cal.com, Inc., USA) in a new tab. No Cal.com script loads on my website. If you book a slot, you provide your name, email and the topic of the call there, and optionally your phone number and website address. I receive them together with the booking and use them to hold the call and prepare an offer (Art. 6(1)(b) GDPR). Cal.com processes data in the USA on the basis of standard contractual clauses approved by the European Commission. I keep booking data for up to 12 months from our last contact, unless we sign a contract.
Analytics and ad measurement (only with consent)
If you consent, I use Google Analytics 4 and Google Ads conversion tracking (Google Ireland Limited). This tells me where inquiries come from. Without your consent, these tools do not load. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with the Cookie settings button in the footer.
Server and security
The server that runs the website keeps technical logs, including IP addresses, to protect the website against attacks and spam (Art. 6(1)(f) GDPR). The form limits the number of messages from a single address; the limit works on a hash of the IP address, not on the address itself. To filter out bots, the form fetches a one-time, time-limited token that contains no personal data. I also keep aggregate statistics, e.g. how many conversations with the assistant and how many form submissions there were, without message content and without IP addresses.
Third-party resources
I host the site’s fonts, icons and libraries on my own server, so browsing the site does not connect you to other companies’ servers. The exceptions are Google Analytics and Google Ads measurement, which load only after you consent, and links you click yourself (e.g. booking a call on Cal.com).
3. Cookies and browser storage
This data is needed for features you ask for, so it does not require consent. It stays in your browser and does not reach me until you send the form.
| Name | Purpose | Duration |
|---|---|---|
rw-zapytanie | Services added to your inquiry | until you send the form or delete them |
rw-wycena | Result of the Pricing calculator | 14 days |
rw-ref | Project selected with the “I want a similar project” button | until you send the form |
rw-vat | Choice of net or gross prices | until deleted |
rw-cur | Selected price currency (PLN, EUR or USD) | until deleted |
rw-lang (cookie) | Selected language version of the website (the server checks it only on the home page, so as not to redirect you to a different language) | 1 year |
rw-consent | Your decision on Google cookies | until you change it in the settings |
rw-chat | Conversation with the AI assistant | until you close the tab |
_ga, _ga_* | Google Analytics 4, only with consent | up to 2 years |
_gcl_* | Google Ads conversion tracking, only with consent | up to 90 days |
4. Who I share data with
Data is seen only by companies that help me run the website: the hosting provider [HOSTING], the email provider [EMAIL], Google (the AI assistant and, with your consent, also Analytics and Ads), Cal.com (if you book a call) and an accounting office if I issue an invoice. I don’t sell data or send it to anyone else.
5. Your rights
You have the right to access your data, to have it rectified or erased, to restrict its processing and to data portability, as well as the right to object. If I process data on the basis of your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before the withdrawal. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
I do not make decisions based solely on automated processing and do not profile you in a way that produces legal effects.
6. Changes
If I change the way I process data, I will update this page and the date at the top.