PstrykWeb

Privacy notice

This notice explains what is recorded about a business that receives an email from pstrykweb.site, where the address came from, and how to be removed. It was last changed on 30 August 2026.

Who is responsible

Mateusz Muszarski, trading as PstrykWeb, based in Poland and working remotely. There is one person here. No other party decides what is done with the information described below.

You can raise anything in this notice by replying to any message you have received from this domain. Requests are handled by the same person who sent the message.

What this website records

Nothing. This site sets no cookies, uses no analytics, loads no third-party script, and makes no request to any server other than the one serving the page. There is no consent banner because there is nothing to consent to.

The company hosting this page keeps ordinary server logs, as every web host does, which record the address of the computer that asked for a page. Those logs are the hosting company's own record and are used to keep the service running and secure. They are not read, exported or analysed to work out who visited.

Where the email address came from

From the published website of the business itself. A business email address printed on a public contact, about or booking page is collected, together with the name of the business, the address of its website, the exact page the email address appeared on, and the date it was read.

The message sent to the business names that page and that date, so the claim can be checked rather than taken on trust. No address is bought, rented, guessed, scraped from a social network, or taken from a list compiled by anybody else.

Businesses with no website are not contacted at all, because there is no published address to write to.

What is stored

No special category information is collected. No profile is built about any individual person, and no automated decision producing a legal or similarly significant effect is made about anyone.

What is never done

There is no record of whether a message was opened. No tracking pixel is placed in any email sent from this domain, and no link is rewritten to pass through a counting service, so there is also no record of whether a link was followed. This is a property of how the mail is built rather than a policy that could be quietly changed: nothing capable of recording it is present.

No information is sold, rented, or shared with anybody for their own marketing. No list is exchanged with another sender. No advertising network receives anything.

Why this is lawful

The messages are business to business and are sent on the basis of legitimate interests, under Article 6(1)(f) of the General Data Protection Regulation. The interest is finding a small number of businesses whose current website is not serving them and who would want a replacement built.

That interest has been weighed against the interests of the person receiving the message. The considerations were these: only addresses the business itself published for the purpose of being contacted are used, the message concerns the recipient's trade rather than their private life, the volume any one business receives is small, nothing about the reader is tracked, the source of the address is stated in the message itself, and one click removes them permanently. If you consider that balance wrong in your case, say so and the objection is honoured without argument.

Who else is involved

Two kinds of company necessarily see some of this, because mail and websites cannot exist without them:

Both act only on instructions and neither uses anything for their own purposes. Nobody else receives any of it, other than where the law requires disclosure.

Where the information is

The person responsible is in Poland, inside the European Economic Area. The businesses contacted are in the United States, so messages necessarily travel there. Where a provider stores information outside the European Economic Area, that transfer relies on the safeguards that provider has in place, which for the providers in question are the European Commission's standard contractual clauses.

How long anything is kept

A business that does not reply is kept for no longer than two years from the last message, and is then deleted along with everything recorded about it.

A business that replies is kept for as long as the conversation and any work arising from it is live, and for six years afterwards where keeping it is necessary for tax and accounting records.

A business that asks not to be contacted again is kept on a suppression list indefinitely, holding the email address and nothing else. Deleting that record would mean the address could be collected again from the same published page and written to a second time, which is the opposite of what was asked for.

How to stop receiving messages

Every message carries an unsubscribe link in its footer. Following it removes the business immediately, no further messages are sent, and no reason has to be given. Replying and asking to be removed does exactly the same thing.

The email address is then held on the suppression list described above and used for nothing except making sure it is never contacted again.

Your rights

If the General Data Protection Regulation applies to you, you have the right to ask for a copy of what is held about you, to have it corrected, to have it erased, to restrict what is done with it, to receive it in a portable form, and to object to it being used at all. Because the messages rely on legitimate interests, you may object at any time and the objection will be honoured.

Ask by replying to any message you have received from this domain. There is no charge and a reply comes within one month. If you are unsatisfied with how a request was handled you may complain to a supervisory authority, which in Poland is the President of the Personal Data Protection Office.

If you are in the United States, the same requests are honoured on the same terms. Where a state privacy law gives you a right to know what is held, to have it deleted, or to opt out of its sale, those rights are honoured as well. Nothing is sold, so there is nothing to opt out of.

Commercial email

Messages sent from this domain are commercial email under the United States CAN-SPAM Act. The subject line describes what the message is about, the sending address is a real mailbox that is read, no header is disguised, and every message carries a working unsubscribe link that is honoured within ten business days and in practice immediately.

Changes to this notice

If this notice changes, the date at the top changes with it. There is no archive of previous versions, because this is the first one.