How this website handles your data

Who is responsible

This website and DB-Ex are operated by Krzysztof Książek. For privacy questions or requests, use the contact form or LinkedIn.

When you send an enquiry

The contact form collects:

• your name and email address;
• optionally, your company, database platform and the topic of the enquiry;
• the description you write;
• your agreement to the enquiry being stored, and the time of submission.

The enquiry and its notification status are saved in a database on the server. A notification worker sends an email to the DB-Ex mailbox and retries unsuccessful attempts. A saved-enquiry confirmation does not confirm delivery to the mailbox. These details are used only to handle your enquiry and any engagement that follows. You are not added to a mailing list. Earlier file-based enquiries may remain in historical records and backups.

Please do not include passwords, customer data, connection strings or sensitive logs in the form. If an engagement goes ahead, a suitable way to share technical evidence is agreed separately.

Spam protection

The contact page uses Cloudflare Turnstile to tell people from automated spam. When the contact page loads, Cloudflare receives technical information such as your IP address and browser characteristics. Turnstile is loaded only on the contact page. The server also keeps the IP address of recent form submissions in memory for a short period to limit repeated submissions; this is not written to disk. This security feature is separate from optional analytics and still operates when analytics is rejected.

Server logs

Like most web servers, the servers behind this site record requests: IP address, date and time, the page requested, the browser's user-agent string and the response. These logs are used to keep the site secure and working. Analytics preferences do not disable necessary security logging.

Cookies and privacy choices

We do not use advertising trackers, session recordings or social-media pixels. Fonts are served from this site. We store your analytics choice in this browser's local storage under dbex-cookie-choice-v1 for up to 180 days. This record contains the choice, policy version and expiry times, not a visitor identifier. Accepted and rejected choices have the same expiry. Clearing browser storage removes the saved choice; if storage is unavailable, it applies only to the current page.

Use Cookie settings to accept or reject optional analytics, or withdraw a previous acceptance. Closing the popup or continuing to browse is not consent. Withdrawal stops future analytics requests; it cannot recall requests already sent or remove earlier aggregate statistics. Browser Do Not Track and Global Privacy Control signals keep analytics off. Without JavaScript, optional analytics does not run.

Optional traffic analytics

On the production website, optional Plausible analytics runs only after you accept it. Preview sites are excluded.

When enabled and accepted, Plausible receives the public page path, referring website origin, approved general campaign labels, and limited events such as an enquiry being saved or a sample report link being clicked. We do not send names, email addresses, company details, messages, enquiry references, search-field contents, arbitrary URL parameters or URL fragments to analytics. A link click is not proof of a completed download; an enquiry event is not proof of email delivery.

Analytics requests include technical connection data such as your IP address and browser user agent. Plausible uses these for approximate location, device statistics and daily aggregate visitor counting. According to its data policy, visitor data is processed and stored in the EU, raw IP addresses and user agents are not stored, and no cookies or persistent visitor identifiers are used. This site does not link analytics to enquiry records.

Search-engine performance tools provide aggregate reports about search queries and pages. These reports are not joined to an individual visitor or enquiry. They require no search-engine tracking script on this website.

Legal basis

• Enquiries: your consent, given with the checkbox on the form, and the legitimate interest in answering business enquiries.
• Server logs and spam protection: the legitimate interest in keeping the website secure and free of abuse.
• Optional analytics: your separate, freely chosen acceptance in Cookie settings. It is not a condition of contacting DB-Ex.
• Privacy-choice storage: remembering and respecting the preference you request.

Who else processes the data

• Hetzner Online GmbH — hosting of the website and the enquiry service.
• Brevo (Sendinblue SAS) — delivery of the enquiry notification email.
• Cloudflare, Inc. — the Turnstile spam check on the contact page. Cloudflare is based in the United States, so this data may be processed outside the European Economic Area.
• Plausible Insights OÜ — optional traffic analytics on the production site after acceptance, using EU-hosted infrastructure.

How long data is kept

Enquiries are kept for as long as needed to handle the enquiry and any resulting engagement, and to keep a record of business correspondence. There is currently no automatic deletion: stored enquiries are removed manually, and you can ask for yours to be deleted at any time. Enquiry retention includes the database, historical files and backups. The browser privacy choice expires after at most 180 days. Aggregate analytics, when enabled, follows the service's retention and deletion settings; it does not contain a persistent visitor ID that DB-Ex can use to find an individual's browsing history.

Your rights

You can ask for access to, correction or deletion of your personal data, ask for its processing to be restricted, object to processing, and receive your data in a portable format. You can withdraw your consent at any time; this does not affect processing that took place before. You also have the right to complain to a data protection authority, for example in the country where you live.