YOUR
PRIVACY.

Who is responsible

This is the personal website of Tomasz Baran, based in the United Kingdom. Tomasz is the operator and data controller for the personal information handled through this site. Contact [email protected] or visit the contact page with a privacy question.

This notice covers the personal portfolio website. Baran Performance and any future live Bench service have their own scope and notices. Reading a project page here does not create a Bench account.

What information is used

• Messages: if you email me, I receive your email address, name if provided, message, attachments and the usual email details, such as when it was sent.
• Technical requests: a public hosting service processes information needed to send pages and protect its network. This can include IP address, requested URL, browser details and timestamps. The configured provider and logging details are listed below.
• Privacy setting: after you choose “Essential only”, the site saves a small localStorage record in your browser. It contains a version, essential-only setting and saved/expiry times. It is not a visitor profile.

The site has no account registration, payment checkout, contact-form submission, site visitor analytics or advertising pixels. Fonts are served from the same website. Optional YouTube players load only after you choose a particular video. Locally hosted clips are served by the website host. Ordinary external links open the destination service when you follow them.

Please leave health information, passwords, payment-card details and other sensitive material out of a general enquiry.

Why it is used

Answering enquiries: I use your message to reply and handle relevant follow-up. The usual lawful basis is legitimate interests in communicating with people who contact me. Where you ask about entering a specific agreement, steps taken at your request before a contract may apply instead.

Delivering and protecting the site: technical request information is used to deliver pages, diagnose faults and address misuse. This normally relies on legitimate interests in running a functioning, secure website, balanced against visitors’ privacy. Legal obligations may apply to particular records.

Remembering your privacy setting: the local record is limited to remembering the essential-only choice you actively make. The site uses it for that preference-management purpose. Details are in the Cookie Policy.

Optional YouTube players: the site activates a specific player at your request. Where consent is needed for the optional third-party connection or storage, it relies on the informed Load YouTube video action for that video. You can remove the player at any time. YouTube’s own processing, which may include playback, analytics or advertising, is explained under Providers below and in its policy.

You are free to browse without sending an enquiry. Providing a message is voluntary, although I need a way to contact you if you want a reply. Browsing or closing the privacy notice does not give permission for unrelated marketing.

Providers and international processing

Email sent to the address above is handled through Google Workspace. Google and the sender’s own email provider process the message as part of delivering and managing email. See Google Workspace’s data-processing terms for information about its processing and international-transfer arrangements.

Local clips and optional YouTube videos

The current Rocket League clips are hosted on this website. No YouTube video is currently configured. If a YouTube clip is added, the following controls apply.

Loading a YouTube video connects your browser to YouTube/Google. The provider can receive technical information such as IP address and device details, process viewing information for playback, analytics or advertising, and use browser storage. The privacy-enhanced player is used, but this does not make the connection anonymous or mean no information is processed. No YouTube player or remote thumbnail is requested by this site before you choose to load one.

Your choice applies to the selected video on that page; it is not remembered as permission for every video or a future visit. Remove the player below the video or through Cookie settings to stop using it. This cannot undo information already received by YouTube. Read Google’s Privacy Policy for its processing. Leaving the player unloaded avoids that optional connection.

Cloudflare’s Privacy Policy explains its technical and security processing and retention criteria. Its Data Processing Addendum explains contractual processing and transfer safeguards. These documents provide details and access to the relevant safeguards. Google Workspace has separate arrangements for email, linked above.

Information may also be disclosed where the law requires it or where necessary to address a security incident or legal claim. This website does not sell enquiry information.

How long information is kept

Enquiries: correspondence is kept while the enquiry and relevant follow-up are being handled. If it leads to an ongoing project, complaint or dispute, relevant messages may be kept for that matter and any applicable record-keeping or legal-claim period. Routine messages that no longer serve those purposes should be deleted rather than kept indefinitely.

Privacy setting: the record is used for up to 180 days. An expired or invalid record is removed when the site next reads it. You can clear it sooner through your browser settings. It stays on your device and is not sent to a consent database.

Hosting logs: Cloudflare’s retention criteria are set out in the hosting details above and its linked Privacy Policy. This website does not create a separate visitor-log database. Clearing browser storage does not delete an email you have already sent.

Your choices and rights

You can contact me to request access to your personal information, correction of inaccurate information, or deletion or restriction where the legal conditions are met. Portability can apply to certain automated processing based on consent or contract. If a particular activity relies on consent, you can withdraw it for the future.

Your right to object: you may object to processing based on legitimate interests for reasons relating to your circumstances. You can object to direct marketing at any time if it is ever introduced.

Email [email protected] with enough information to identify the relevant correspondence. I may need proportionate identity checks before disclosing personal information. Your rights depend on the processing and any lawful exceptions.

You can also complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint. You do not have to contact me first to exercise that right.

Security and younger visitors

Reasonable technical and organisational measures must be used to protect information. No website or email system can promise absolute security. Suspected incidents must be investigated and assessed, with regulator or individual notifications where the applicable legal thresholds require them.

This is a general personal portfolio. It does not ask children to register or submit training, health or payment data. If a younger person has sent information they or their parent would like removed, contact the email address above. The site does not make automated decisions about visitors with legal or similarly significant effects.

Changes and contact

The date at the top identifies this edition. This notice should be updated when the hosting, features or actual use of personal information changes. New accounts, payments, tracking or data collection would need their own assessment and accurate information before activation.

For a question about this site, contact Tomasz. For the separate Baran Performance website, see its Privacy Policy.