Last updated 9 August 2026

Privacy

Who is responsible

Arkadiusz Sorelli, an individual based in Poland. Contact: contact@provenaccess.com. That address is also how you exercise any of the rights described below.

What this website collects

Nothing. There are no cookies, no analytics, no tracking pixels, no embedded fonts loaded from third parties and no social media widgets. You can read every page here without leaving a trace with me.

The site is hosted on Cloudflare Pages, which processes technical connection data such as IP addresses to deliver the page and to protect against attacks. I do not have access to that data in a form that identifies anyone, and I do not analyse it.

If you email me

• What I hold: your email address, your name if you give it, and whatever you wrote.
• Why: to reply, and to keep a record of what was agreed. Legal basis: legitimate interest in responding to someone who contacted me, and where relevant, steps taken at your request before entering a contract.
• How long: two years from our last exchange, then deleted. Longer only where accounting law requires it for an actual transaction.
• Who else sees it: my email provider, OVHcloud, based in the European Union. Nobody else. I do not sell, rent, share or publish contact details, and I do not add anyone to a mailing list.

If you use the contact form

The form on the home page is processed by Netlify, the company that hosts this site. Netlify is based in the United States, so submitting the form means your name, email address and message are transferred outside the European Economic Area. The transfer relies on the European Commission's standard contractual clauses, which Netlify incorporates into its terms.

Your submission is stored in my Netlify account and forwarded to my mailbox at OVHcloud. It is kept for the same two years and used only to reply to you.

If you would rather not have your data leave the EEA, do not use the form. Write to contact@provenaccess.com instead — that mailbox is hosted in the European Union and nothing passes through Netlify.

The research published here

The studies on this site are produced by examining the publicly served HTML of website home pages, the same document any visitor's browser receives. No login, no bypassing of any protection, no access to non-public areas. robots.txt is respected.

Where a contact address appears in that data, I keep only organisational addresses — either functional ones such as info@ or reservations@, or ones built from the business's own name. Anything that looks like the address of a named individual is deleted, and the filter is deliberately over-eager: it removes borderline cases rather than keeping them. Roughly a quarter of everything collected was discarded this way. Discarded addresses are not kept anywhere — which is why I cannot give you an exact count of them, only of what remains: 874 organisational addresses across the two cities, none of which appears anywhere on this website.

No business is named in any published report, and no personal data appears in them.

Source of the site lists: OpenStreetMap contributors, under the ODbL licence.

If your organisation appears in data I hold and you would rather it did not, write to me and I will remove it and add the domain to a permanent exclusion list, so it is skipped in future scans. You do not need to give a reason.

Your rights

Under the GDPR you can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, or object to my holding it at all. One email is enough, and I do not ask you to justify the request. If I have anything of yours, it will be gone within thirty days.

You also have the right to complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO).

Changes

If this page changes, the date at the top changes with it. I do not make changes retroactively.