Privacy policy

Who is responsible for this site

This site is run by USŁUGI IT Ryszard Schossler, the sole proprietorship of Ryszard Schossler, registered in Poland and trading as RSApps. For the personal data described below I am the controller, in the sense of Article 4(7) of the GDPR.

• USŁUGI IT Ryszard Schossler, Kurzyna Mała 127, 37-410 Kurzyna Mała, Poland
• Email:
• NIP (Polish tax number): 6020147376, EU VAT number PL6020147376
• REGON: 526611624

I have not appointed a data protection officer, so please use the email address above for anything in this policy.

The short version

This is the website of a Flutter consultancy. Every page is plain HTML, built in advance, which means:

• no cookies and nothing stored on your device, so no cookie banner either;
• no analytics, no advertising, no tracking of any kind;
• no forms, accounts, comments or sign-ups;
• nothing loaded from another company's servers. The fonts, styles, images and the site's single script all come from this domain, so no one else learns that you were here.

The only personal data that reaches me is what you choose to send me, for example by email.

Cookies and other storage

This site uses no cookies, no local storage, no session storage and no device fingerprinting. That is why there is no cookie banner: under Article 399 of the Polish Electronic Communications Act, consent is needed to store or read data on your device, and this site stores and reads nothing.

The site's one script, reveal.js, shows my email address and phone number after you press "Show email" or "Show phone". It is served from this domain, it stores nothing and it sends nothing anywhere. Its only job is to keep both values out of the page source, away from address harvesters. The site works without it: with JavaScript turned off, the email address is written out on this page and on the Contact page.

What data is processed, and why

Technical request data

Your IP address, the page you asked for, the time of the request, and the browser and operating system your browser reports.

• Processed by: Google, as the provider of Firebase Hosting, on my behalf.
• Why: to deliver the pages to you and to protect the site against abuse and attacks. Legal basis: my legitimate interest, Article 6(1)(f) GDPR.
• How long: this site keeps no request logs of its own, and Firebase Hosting's optional request logging is switched off. Google processes the data within its own infrastructure under its terms.

What you send me

The content of an email, a phone call or a LinkedIn message, together with whatever contact details it carries.

• Processed by: me, and the providers of my mailbox and phone service.
• Why: to reply and, where it comes to that, to prepare an offer and discuss working together. Legal basis: Article 6(1)(b) GDPR for steps taken before a contract, and Article 6(1)(f) for answering enquiries and keeping a record of them.
• How long: until the matter is closed, and after that for as long as I may need it to defend against claims.

If we sign a contract, the invoices and the records it requires are kept for as long as Polish tax and accounting law demands. Legal basis: Article 6(1)(c) GDPR.

Nothing else is collected. There is no form on this site, so nothing can be submitted through it.

Who else sees the data

• Google Ireland Limited and Google LLC host the site through Firebase Hosting and so handle the technical request data above as my processor. See Google's privacy policy and Firebase's privacy documentation.
• My email and phone providers, if you write to me or call me.

Hosting can involve transferring data outside the European Economic Area. Those transfers rely on the EU-US Data Privacy Framework and, where it does not apply, on the European Commission's standard contractual clauses.

Nothing from this site is sold, rented or handed to anyone else, and none of it is used for advertising.

Automated decisions and profiling

There are none. Nothing here profiles you, scores you or decides anything about you automatically.

Do you have to give me any data

No. You can read every page without giving me anything, and there is nothing to fill in. If you write to me, you decide what goes in the message; without some way to reply, though, I cannot answer.

Your rights

Under the GDPR you can ask me to:

• tell you what personal data of yours I hold and give you a copy of it (Article 15);
• correct it (Article 16);
• erase it (Article 17);
• restrict how I use it (Article 18);
• hand it over in a portable form (Article 20);
• stop processing that rests on legitimate interest (Article 21).

Write to the email address above and I will answer within one month. If you believe I handle your data wrongly, you can also complain to the supervisory authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

Changes to this policy

If the site changes in a way that affects this policy, I rewrite the text and update the date at the top of this page. There is no version history: what you read here is what applies now.

This policy is published in English and Polish. Should the two ever differ, the Polish version applies.