Privacy Policy

Last updated: 16 August 2026.

1. General provisions

This policy describes how the personal data of people using the website and contacting the Controller is processed. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection law.

2. What data we collect and how

We only collect data that you provide voluntarily through the contact form:

• full name,
• email address,
• optionally: company name, phone number,
• the content of your message and the selected service.

We do not profile users and do not make decisions based solely on automated processing.

3. Purposes and legal bases for processing

• Responding to your enquiry and staying in contact — Art. 6(1)(b) GDPR (steps toward entering into a contract) and Art. 6(1)(f) GDPR (the Controller’s legitimate interest in handling correspondence).
• Establishing, pursuing or defending claims — Art. 6(1)(f) GDPR.

4. Recipients and processors

Data may be entrusted to trusted providers, only to the extent necessary to handle your enquiry:

• Cloudflare, Inc. — hosting of the website and processing of the form (Cloudflare Pages). Processing takes place on edge infrastructure within the European Union for traffic from Poland. The provider is based in the USA; transfers are safeguarded by Standard Contractual Clauses (SCCs).
• Sendinblue SAS (Brevo), based in France — delivery of the email from the form (transactional email). Data is processed on servers within the European Union.
• Google Ireland Ltd. / Google LLC (Gmail) — the Controller’s mailbox, which receives the content of your enquiry.

5. Transfers outside the EEA

As a rule, we process data within the European Economic Area. To the extent that service providers have links with entities outside the EEA (e.g. the USA), transfers are safeguarded by the mechanisms provided for in the GDPR, in particular Standard Contractual Clauses (SCCs).

6. Retention period

We keep correspondence data for as long as necessary to respond and hold discussions, and then until any claims become time-barred or until you effectively object. If the contact does not lead to cooperation, we delete the data promptly after the correspondence ends.

7. Your rights

You have the right to:

• access your data and obtain a copy,
• rectify (correct) your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise your rights, write to: lukelubins@gmail.com.

8. Voluntary nature of providing data

Providing data is voluntary but necessary to respond to an enquiry sent through the form.

9. Cookies and browser storage

The website does not use cookies for marketing or analytics purposes and does not use tracking tools. We only use technical browser storage (localStorage) to remember your chosen colour theme (light/dark) — this data stays on your device and is not transmitted to us.

10. Changes to this policy

This policy may be updated. We publish the new version on this page together with the date of the update.

For any data protection matters, contact the Controller: lukelubins@gmail.com.