Legal

Privacy Policy

Last updated September 2026

Data controller

Urszula Krakowiak (sole proprietor)
Moosanger 949, 6473 Wenns, Austria
Email: legal@ulakrakowiak.com

Hosting and server logs

This website is hosted by Spaceship (Spaceship, Inc.). The hosting infrastructure automatically records technical access data (such as IP address, browser type, referring page and timestamp) in server log files for the purpose of operating, maintaining and securing the website. I use AWStats to analyse these server logs and compile aggregate statistical information about website traffic and server usage.

Spaceship acts as a processor in relation to personal data processed on my behalf. Where data is transferred outside the EU/EEA, Spaceship applies the transfer safeguards described in its Data Processing Addendum, including Standard Contractual Clauses where applicable.

This processing is based on Art. 6(1)(f) GDPR, reflecting my legitimate interests in ensuring the stable, reliable and secure operation of the website and in understanding its general usage. Server log data is retained only for as long as necessary for these purposes and is subsequently deleted or rotated in accordance with the hosting provider’s technical configuration.

Contacting me

If you contact me by email — including via the email address shown on this website — the information you provide (such as your email address and the content of your message) is used solely to process and respond to your enquiry. This processing is based on Art. 6(1)(b) GDPR (steps necessary prior to or under a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) where no contract is in place.

Contact form (Formspree)

The contact form on this website is processed by Formspree, Inc., 1301 Ridgeview Drive, Suite 210, Lewisville, TX 75057, USA (privacy policy). When you submit the form, the name, email address and message you enter — together with technical data transmitted by your browser, such as your IP address and the time of submission — are sent to Formspree's servers, forwarded to my inbox and stored in the Formspree account for the submission history.

This data is used solely to receive and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract) or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries sent to me). Providing the data is voluntary, but without it I cannot respond. Formspree acts as a processor on my behalf under a data processing agreement, and applies technical measures to filter spam submissions.

Formspree processes data in the United States, so transfers outside the EU/EEA take place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR). Submissions are retained in the Formspree account for as long as needed to handle your enquiry and are deleted thereafter; email correspondence resulting from it is kept as described under “Retention”. If you would rather not use the form, you can email me directly at legal@ulakrakowiak.com — the address shown on the homepage works too.

Cookies and tracking

This website does not set cookies and does not use advertising trackers or browser-based analytics tools. Basic website statistics are generated from server access logs using AWStats, as described under “Hosting and server logs”. AWStats does not require an analytics cookie or similar technology to be stored on your device.

For this reason, no cookie consent banner is currently used.

Externally hosted fonts

This website loads typefaces (Google Fonts) directly from Google's servers rather than hosting them locally. To display these fonts, your browser establishes a connection to Google and transmits your IP address and browser information; Google may process this data on servers located outside the EU/EEA, including in the United States. This processing is based on a legitimate interest (Art. 6(1)(f) GDPR) in a consistent and reliable display of the website's typography. No other Google services are embedded on this site.

Appointment booking (Google)

This website links to an appointment booking page provided by Google (Google Calendar Appointment Scheduling). The link opens in a new tab; no booking tool is embedded on this site and no data is transmitted to Google unless you follow the link. If you do, any information you enter there (such as your name, email address and chosen time) is processed by Google under its own privacy policy, and the resulting appointment details are made available to me in my calendar. My use of that information is limited to arranging and holding the call; the legal basis is Art. 6(1)(b) GDPR (steps prior to a contract) or Art. 6(1)(f) GDPR (legitimate interest in arranging requested meetings).

Other embedded third-party services

Aside from the font loading and the contact form described above, this website does not embed any other third-party widgets, scripts, plugins or services (for example no social-media embeds, maps or chat tools).

Recipients of data

Data described above may be accessible to the hosting provider, Spaceship, Inc. (as a processor, in connection with server operation and web hosting services), to Formspree (as a processor, in connection with the contact form) and to Google (in connection with font delivery and, if you use the booking link, appointment scheduling, as described above). No data is sold or passed on for advertising purposes.

International data transfers

Where data is processed outside the EU/EEA — for example by Formspree in connection with contact form processing, or by Google in connection with font delivery — this takes place on the basis of the applicable safeguards under Chapter V GDPR (such as an adequacy decision or standard contractual clauses put in place by the provider). Hosting and server log processing by Spaceship take place on servers located within the EU.

Retention

Server log data is retained in accordance with the hosting provider’s applicable retention and log-rotation settings and only for as long as required for the relevant purposes.

Email correspondence is kept only for as long as necessary to handle your enquiry and any resulting business relationship, or as required by statutory retention obligations under Austrian law.

Your rights

Under the GDPR you have the right to request access to, rectification or erasure of your personal data, to request restriction of or object to processing, and to data portability, subject to the applicable legal conditions. To exercise any of these rights, please contact me using the details above.

Right to complain

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at, or with the supervisory authority of your habitual residence or place of alleged infringement.