This policy describes what happens to the personal data you leave on dryseo.com — in the contact form or in a message sent to the address given below.
Who processes your data
The controller of your personal data is drySEO, which runs the dryseo.com website.
For any matter concerning personal data, write to [email protected].
The controller has not appointed a data protection officer.
What data we collect and where it comes from
From the contact form we collect only what you type in yourself.
| data | required | what for |
|---|---|---|
| first name | yes | so that we know how to address you |
| surname | no | as above |
| email address | yes | so that we can reply |
| description of the situation, that is the message itself | yes | so that we can prepare an answer on the subject |
On every visit to the site, the Cloudflare infrastructure automatically records the IP address, the browser and device type, the address of the page opened, the address of the page you arrived from, and the date and time. That data serves only to deliver the page and to protect it against abuse.
We do not profile, we take no automated decisions, we do not sell data, we run no newsletter and we add nobody to a mailing list.
On what basis and for how long
| purpose | basis in the GDPR | period |
|---|---|---|
| answering an enquiry sent through the form | art. 6(1)(b) — steps taken at your request before entering into a contract — or art. 6(1)(f), our legitimate interest in business correspondence | up to 24 months from the last message, unless the contact turns into cooperation |
| defence against claims | art. 6(1)(f) | until the limitation period expires |
| site security: logs and bot protection | art. 6(1)(f) | in line with the Cloudflare retention period |
| accounting, if cooperation begins | art. 6(1)(c) — tax obligation | 5 years from the end of the tax year |
Who we entrust data to
| entity | role | where |
|---|---|---|
| Cloudflare, Inc. | site hosting, content delivery, bot protection and passing the form message to the controller mailbox | USA and a global network; standard contractual clauses and the EU-US Data Privacy Framework |
| the email provider of the controller | storing correspondence once it has been delivered | the controller mailbox, outside the site |
Apart from the above, your data reaches nobody, except where the law requires it.
Your rights
You have the right to access your data, to rectify it, to erase it, to restrict its processing and to port it, as well as the right to object to processing based on a legitimate interest.
To exercise any of them, write to [email protected]. We reply within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw).
Cookies and similar technologies
The site is static and uses no analytical, marketing or advertising cookies. We use neither Google Analytics nor social network pixels.
Visit statistics — Cloudflare Web Analytics. To know which pages get read, we use Cloudflare Web Analytics. The provider states that the tool uses no client-side state — neither cookies nor localStorage — and that it does not fingerprint visitors by IP address or browser header. That is why we ask for no cookie consent: nothing is stored in your browser.
The tool records only the country, the address of the page visited, the referring address, device type, browser, operating system, navigation type and load time. Query strings are not recorded. Detailed data is kept for 7 days, after which only an aggregated sample remains.
The form is protected by a Cloudflare mechanism that tells a human from a bot and may store technical data from the browser for that purpose.
Security
The connection to the site is encrypted with HTTPS. Data from the form is not stored in any database of the site — it goes to the mailbox of the controller, and only the controller has access to it.
Changes
Last updated: 16 October 2026. We announce material changes on this page. Questions: [email protected].