Privacy notice

1. Controller

The controller of your personal data is JAMES ENTERPRISES - ANETA JAMES, Witkowice 50G, 95-060 Brzeziny, Poland, NIP 7282448205. All data protection matters are handled by Roger Barrett James, who can be reached at connect@jamesenterprises.biz or on +48 660 161 348. A Data Protection Officer within the meaning of art. 37 GDPR has not been appointed, as none of the criteria in art. 37(1) apply to the controller's processing.

2. What this website collects

Nothing directly. This site is composed of static files. It sets no cookies, uses no local or session storage, embeds no analytics, advertising or social media scripts, and loads no fonts, maps or media from third-party servers. There is no contact form and no user account.

The site is hosted by Cloudflare, Inc., which processes standard server log data — IP address, timestamp, requested page, user agent — for the purpose of delivering the site and protecting it from abuse. This is processed on the basis of legitimate interest (art. 6(1)(f) GDPR) and retained only for the short period applied by that provider. Cloudflare acts as a processor under its Data Processing Addendum, concluded pursuant to art. 28 GDPR.

3. If you write to us

If you send an email, the data you include — your name, address, and anything else you choose to write — is processed in order to respond to you and, where relevant, to take steps prior to entering into a contract. The legal basis is art. 6(1)(b) GDPR where the correspondence concerns a possible or existing engagement, and art. 6(1)(f) GDPR (legitimate interest in responding to enquiries) otherwise.

Correspondence is retained only for as long as necessary to deal with the matter it concerns. Where it relates to an engagement, records carrying accounting or tax significance are retained for 5 years counted from the end of the calendar year in which the tax payment deadline fell, as required by art. 86 § 1 of the Tax Ordinance and art. 74 of the Accounting Act. Correspondence that does not lead to an engagement is deleted once it is clear that none will follow, and in any event no later than the expiry of the limitation period for any related claims.

4. Recipients

Personal data is not sold, and is not transferred to third parties other than: Cloudflare, Inc. as hosting provider; our email providers, being GoDaddy (which provides mail forwarding for our domain) and Proton AG (which provides the mailbox itself); and, where required, accountants, legal advisers, or public authorities acting within their competence.

4a. Transfers outside the European Economic Area

Three of the processors above are established outside the EEA. Each is covered by a European Commission adequacy decision, so no additional safeguards under art. 46 GDPR are required and your data does not lose the protection of the GDPR:

• Proton AG (Switzerland) — Switzerland is recognised as providing an adequate level of protection under Commission Decision 2000/518/EC, which remains in force.
• GoDaddy Operating Company, LLC (United States) — self-certified under the EU–U.S. Data Privacy Framework, which the Commission recognised as adequate in its decision of 10 July 2023.
• Cloudflare, Inc. (United States) — self-certified under the EU–U.S. Data Privacy Framework, and its Data Processing Addendum additionally incorporates the Standard Contractual Clauses as a second basis.

Current certifications may be verified at dataprivacyframework.gov. Should any recipient cease to be covered by an adequacy decision, transfers will instead be made on the basis of Standard Contractual Clauses adopted by the European Commission.

5. Your rights

Under arts. 15–22 GDPR you have the right to:

• access your personal data and obtain a copy of it;
• have inaccurate data corrected;
• have your data erased, where the conditions in art. 17 are met;
• restrict processing;
• data portability, in respect of data processed on the basis of contract or consent;
• object to processing carried out on the basis of legitimate interest.

To exercise any of these rights, write to connect@jamesenterprises.biz. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

6. Is providing data required?

No. Providing personal data is entirely voluntary. It is, however, necessary in order to receive a reply to correspondence or to conclude an agreement.

7. Automated decision-making

Personal data is not used for automated decision-making or profiling within the meaning of art. 22 GDPR.

8. Changes

Any change to this notice is published on this page with an updated revision date.