Last updated: 28.09.2026
This policy explains what personal data I collect through thisoneprocess.com and my services, what I use it for, and what rights you have over it.
1. Who I am
The data controller is High Five Industries Marcin Skrzypiec
Address: Grzegorzka 18D/13, 40-309 Katowice, Poland.
VAT-EU: PL6462753412.
For anything related to your data, email marcin (at) thisoneprocess.com.
2. What I collect and why
Visiting the website
- Technical data: your IP address, browser type, and the pages you requested. The hosting server records these automatically.
- Why: to keep the site running and secure.
- Legal basis: my legitimate interest in a working, secure website.
Booking and paying
- Booking data: your name and email, plus what you write in the booking form.
- Why: to schedule the call and prepare for it.
- Legal basis: taking the steps needed to provide the service you’re booking.
- Checkout data: your business name, address and VAT number.
- Why: to take payment and issue an invoice.
- Legal basis: the contract, and my legal obligation to issue and keep invoices.
- Card details: entered directly into Stripe. I never see or store your card number.
During and after our work together
- Call recordings: with your permission, I record calls so I can review them afterwards for extra notes, instead of taking notes during the call.
- I ask at the start of every call. If you, or anyone else on the call, says no, the call isn’t recorded.
- Recordings are stored only on my own computer.
- I delete them within 14 days and don’t share them with anyone.
- They include the voices and images of everyone on the call, and whatever is shown on screen.
- Legal basis: your consent. You can withdraw it at any time, and I’ll delete the recording.
- Notes, proposals, write-ups and plans: what I write about your business and our work together, and records of payments.
- Why: to deliver the service and keep track of our work.
- Legal basis: the contract, or taking the steps you asked for before one.
- Emails: what we write to each other.
- Legal basis: the contract, or my legitimate interest in answering you.
Mailing list
If you sign up for my email list, I store your email address, your name if you give it, and whether you open the emails.
- Why: to send you the emails you asked for.
- Legal basis: your consent. Every email has an unsubscribe link.
Information shown on screen
Your workspace may contain details about your clients or your team. I use what I see only to understand your process, and I don’t copy personal details into my notes. If something shouldn’t be seen at all, you can show a copy with placeholders instead.
Data in your tools during build work
If we agree that I’ll build something in your tools, I’ll have access to the data they hold, which may include details about your clients or your team. For that data, your business is the controller and I process it only on your behalf, for the agreed work. The rules for this are in section 11 of the Terms of Service.
3. Whether you have to give me your data
Using the website doesn’t require any. To book or buy a service, however, I need your contact and business details, because I can’t schedule, deliver or invoice without them.
4. Who processes your data on my behalf
I use these providers to run the business. Each processes data only as needed for its role:
- ChemiCloud: website hosting and email
- Cal.com: booking calendar and booking form
- Stripe: payments
- inFakt: invoicing and taxes
- n8n, hosted on Railway: automations that pass booking and payment information between the tools above
- Google (Meet, Docs, Drive): video calls, and storing and sharing write-ups and proposals
- Notion: my notes on client work and additional payment records
- MailerLite: the mailing list
Stripe also processes some data for its own purposes, such as fraud prevention or operating its platform, under its own privacy policy.
I also share data with public authorities where the law requires it, for example invoices with the tax office. I don’t sell your data to anyone.
5. Transfers outside the EU
Some of these providers are based in the United States or use subcontractors there.
Where your data leaves the European Economic Area, the transfer relies on one of two safeguards: the EU–US Data Privacy Framework, or standard contractual clauses approved by the European Commission.
6. How long I keep it
- Call recordings: up to 14 days.
- Booking data, notes, proposals, write-ups and emails: one year after our last contact about work together.
- Invoices and accounting records: as long as Polish tax law requires, which is generally five years from the end of the relevant tax year.
- Mailing list: until you unsubscribe. After that, your email address stays on a do-not-send list so you aren’t emailed again by mistake.
- Server logs: set by the hosting provider.
7. Your rights
You can ask me to:
- tell you what data I hold about you and give you a copy
- correct data that’s wrong
- delete your data
- limit how I use it
- send your data to you or someone else in a usable format
- stop using it where I rely on legitimate interest
Where I rely on your consent, you can withdraw it at any time. That doesn’t affect what happened before.
Some requests have limits. For example, I can’t delete invoices before the law allows.
To use any of these rights, email marcin (at) thisoneprocess.com. I’ll reply within one month.
You also have the right to complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
8. Automated decisions
No decisions about you are made automatically, and no profiling is used to make decisions that affect you.
9. Changes to this policy
When this policy changes, the date at the top changes with it.