Controller and contact
The controller of your personal data is Chris Golda, operating under the ETLens brand.
ETLens is a brand used by Chris Golda, not a company or other legal entity separate from him.
For questions about personal data, you can contact me using the homepage contact form: contact form.
Data processed through the contact form
The form asks for your name, reply email address, a description of your problem or project, and a checkbox confirming your request to be contacted. The current public form does not ask for a phone number or job title.
To handle an inquiry, the application also records the page language, a generic topic, the inquiry source, and form metadata. A company value may be supplied through a compatible form or backend path, but it is not required by the public form.
Purposes and legal basis
Inquiry data is used to reply, discuss the need you described and, where applicable, take steps you requested before possible cooperation. The inquiry is also kept in the CRM so the conversation can be handled.
Technical data is used to operate the service, diagnose problems, and prevent abuse. Inquiry data is processed as necessary to respond and take requested steps before entering into a contract, where applicable. Protecting the service and preventing abuse rely on the legitimate need to operate it securely.
The contact checkbox does not subscribe you to a newsletter or provide marketing consent. Form data is not used for marketing unrelated to your inquiry.
CRM and email notification
After a valid form submission, the inquiry is first saved in the CRM database. The application then attempts to send an email notification. A failed notification does not by itself remove the saved inquiry.
Contact details and the message may be transmitted through the configured email or SMTP service so the notification can be delivered for handling. In the active production environment, notifications are currently delivered through Google Gmail SMTP; the processing region has not been verified and is not fixed in the application code.
Hosting, database, and service providers
Providers needed to host the website, store the database, and deliver email may process data as necessary to provide those services. Deployment documentation identifies Azure App Service as the intended hosting environment and Neon PostgreSQL as the database platform; the services actually used depend on each environment's configuration.
Microsoft Azure and Neon, if used in the active environment, are infrastructure providers. They are not affiliated with the ETLens brand. In the active production environment, email notifications are currently delivered through Google Gmail SMTP; the processing location for that service has not been established here.
Security and abuse prevention
Contact submissions are rate-limited to help reduce spam and abuse. The application derives an HMAC-based source key from connection-address information. The throttle table stores that key and attempt timestamps; it does not store the raw IP address. Network data may still be processed by the server or infrastructure needed to handle a connection.
The protection window for these attempts defaults to 24 hours. On each subsequent form attempt, the application removes throttle records older than that window; there is currently no separate scheduled cleanup process, so a record may remain stored for longer than 24 hours when no new attempts occur.
Retention
CRM inquiries are retained only as long as needed to handle the inquiry, any cooperation resulting from it, and legitimate operational or legal needs. The application does not currently enforce one fixed deletion period for all CRM records.
Contact-attempt data is needed to enforce the 24-hour protection window described above. Records older than that window are removed on the next form attempt, so their actual storage time may be longer during periods with no new attempts.
Your rights
Depending on the circumstances and applicable legal conditions, you may have the right to access, correct, or erase your data, restrict processing, object to processing, and receive or transfer data where applicable. If processing relies on consent, you may withdraw it; this does not affect the lawfulness of processing before withdrawal.
You may also lodge a complaint with the competent supervisory authority; in Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO). To exercise a right or ask a question, use the contact form and describe your request.
For questions about personal data, you can contact me using the homepage contact form: contact form.
Cookies and analytics
No third-party analytics or advertising tracking is currently active. The application's analytics code does not insert tracking scripts. The service may use technical cookies needed for sessions and security; they are not used for advertising or analytics.
Policy changes
This policy may be updated if data processing, infrastructure, or legal requirements change. The current version is published on this page.