This document explains how personal data is handled on dawid.dev. What exactly is stored in your browser, and for how long, is listed in the Cookie policy.
Controller
The controller of your personal data is Dawid Ryłko, who runs this site as a personal collection of notes. Contact: hello@dawid.dev.
No data protection officer has been appointed, because none of the conditions in article 37 GDPR applies. Questions about this document go to the address above.
What is collected
This site has no accounts, no forms, no comments and no newsletter. Two things are collected, and only one of them is optional.
Server logs. The site is hosted on GitHub Pages. Requesting a page leaves an entry in GitHub’s logs containing your IP address, the time of the request, the address requested and your browser’s user agent string. I do not have access to those logs.
Traffic measurement, only with your consent. If you allow the analytics category in the consent banner, Google Analytics 4 records the pages you open, approximate location derived from your IP address, and technical details of your browser and device. Google Signals and ad personalisation are switched off, so the data is not joined with advertising profiles.
An embedded video player, on two notes, and only if you press play. The player is not loaded with the page. If you press the button that stands in its place, YouTube receives your IP address and may store its own entries on your device. The Cookie policy says which notes those are.
Nothing else is collected. There is no contact form, and site search runs in your browser without sending your query anywhere.
Purposes and legal bases
| Purpose | Legal basis | Notes |
|---|---|---|
| Serving the site, security and abuse prevention | Legitimate interest, article 6(1)(f) GDPR | Server logs kept by the host |
| Traffic measurement | Consent, article 6(1)(a) GDPR and article 399 of the Electronic Communications Law | Optional, off until you allow it |
Analytics does not rely on legitimate interest. Without consent, the measurement script is not loaded.
Recipients
- GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, United States, as the host of the site.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the provider of Google Analytics 4, processing data under article 28 GDPR on Google’s data processing terms.
- Google Ireland Limited again, as the operator of YouTube, but only on the two notes with a video and only from the moment you press play. The Cookie policy names those two notes.
No data is sold, and none is passed to anyone else.
Transfers outside the European Economic Area
Both recipients are part of United States groups, so your data may be transferred to the United States.
GitHub, Inc. and Google LLC are certified under the EU-US Data Privacy Framework, the adequacy decision of the European Commission of 10 July 2023, which is the primary basis for these transfers. Should that decision be annulled or suspended, the transfers fall back to the standard contractual clauses of the Commission Implementing Decision 2021/914, which both providers include in their terms.
You have the right to ask for a copy of the safeguards in place. United States law does not offer a level of protection identical to the GDPR, in particular regarding access by public authorities. If you would rather not take that risk, refuse the analytics category. The site works exactly the same either way.
Retention
- Server logs: for as long as the host keeps them, under GitHub’s own privacy statement. I have no control over that period.
- Analytics data in Google Analytics 4: 14 months from collection, which is the retention configured on the property.
- Analytics cookies on your device: 13 months, or until you withdraw consent, whichever comes first.
- The record of your consent: 13 months, after which you are asked again.
Your rights
You have the right to access your data, to have it rectified or erased, to restrict its processing, to object to processing based on legitimate interest, and to data portability. To exercise any of them, write to hello@dawid.dev.
Where processing rests on consent, you may withdraw it at any time through the Cookie settings link in the footer, and withdrawing must be as easy as giving it. Withdrawal does not affect the lawfulness of what was processed beforehand.
You may also lodge a complaint with the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland.
Automated decision making
There is none, and no profiling.
Is providing data required
No. Reading this site requires no data from you beyond what a browser sends to reach a server. Analytics is optional and refusing it changes nothing about what you can read.
Changes to this document
The document is updated whenever the tools in use change. The date of the last update is shown at the top of the page.