1. Data Controller
The controller of personal data processed in connection with the use of the website lewandowski-k.com is Krzysztof Lewandowski, Toruń.
- Email: klewandowski638@gmail.com
- Phone: show phone number
The controller has not appointed a data protection officer. For matters concerning personal data, you may contact the Controller directly.
2. Scope of Data and Processing Purposes
Contact Form
If you use the contact form, the data you provide in the form will be processed: name and surname, email address, optionally phone number, subject, and message content. The data is used to handle your inquiry, provide a response, prepare a cooperation proposal, and conduct further correspondence.
The form also includes a technical anti-spam honeypot field. Its purpose is to limit automated submissions.
Email, Phone, and LinkedIn Contact
If you contact me via email, phone, or LinkedIn, I process the data you voluntarily provide during such communication to handle the matter and conduct correspondence.
Server Logs
When using the website, technical server logs may be recorded, including in particular IP address, date and time of visits, requested resource address, browser information, operating system, and technical errors. Logs are used to maintain security, diagnostics, detect abuse, and ensure proper website operation.
3. Legal Bases for Processing
- Art. 6(1)(a) GDPR – consent, when you check the contact consent box or voluntarily provide data for a specific purpose.
- Art. 6(1)(b) GDPR – steps prior to entering into a contract or performance of a contract, when the inquiry concerns a quotation, offer, or service provision.
- Art. 6(1)(c) GDPR – legal obligations, in particular tax, accounting, or related to asserting rights, if such a situation occurs.
- Art. 6(1)(f) GDPR – the controller's legitimate interest: handling correspondence, securing the website, archiving contact, defense, or assertion of claims.
4. Voluntary Provision of Data
Providing data in the form is voluntary, but data marked as required is necessary to respond to your inquiry. The phone number is optional. Failure to provide required data may prevent the form from being processed.
5. Data Recipients
Data may be transferred to entities that support the operation of the website and communication, in particular hosting providers, email services, technical service providers, and entities authorized to obtain data under legal provisions. Data is not sold or shared with data brokers.
6. Transfer of Data Outside the EEA
The website uses external resources such as Google Fonts and Font Awesome CDN. When downloading these resources, the user's browser may connect to the providers' servers, which may involve transferring technical data such as IP address, also outside the European Economic Area. Such transfers are based on standard contractual clauses (SCC) approved by the European Commission under Art. 46(2)(c) GDPR or on adequacy decisions.
The website also contains links to a LinkedIn profile. The mere placement of a link does not result in data being transferred to LinkedIn by the Controller, but after clicking the link, the user is redirected to an external service that operates according to its own privacy rules.
7. Data Retention Period
- Data from the form and correspondence – for the time necessary to handle the inquiry, and then for a period necessary to secure potential claims, generally no longer than 3 years from the end of correspondence, unless a longer period results from legal provisions or further cooperation.
- Data related to contracts or settlements – for the period required by tax, accounting, and civil law provisions.
- Server logs – for the period necessary for technical and security purposes, usually up to 90 days, unless longer retention is needed to clarify an incident or assert claims.
- sessionStorage – only for the duration of the browser session.
8. User Rights
In connection with the processing of personal data, you have the following rights under GDPR:
- access to data,
- rectification of data,
- erasure of data,
- restriction of processing,
- data portability, where applicable,
- object to processing based on legitimate interest,
- withdraw consent at any time, if processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO): ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
9. Cookies, sessionStorage, and Similar Technologies
The website does not use cookies for marketing or analytical purposes. Google Analytics and advertising pixels are not used.
The website uses sessionStorage exclusively to remember the manual language selection, i.e., the lang_manual key. This data is stored on the user's device only during the current session and is deleted when the browser is closed.
Information about this mechanism is provided in accordance with the Electronic Communications Law, in particular Art. 399 of the Electronic Communications Law (PKE), regarding the storage of information or access to information in the user's terminal device. The mechanism serves only the basic functionality of the website. If analytical, marketing, or other non-essential storage/cookie technologies are implemented in the future, the website will be updated with an appropriate consent mechanism.
10. No Profiling or Automated Decision-Making
User data is not used for automated decision-making, including profiling as defined by GDPR.
11. Security
The Controller applies technical and organizational measures appropriate to the risk, including encrypted HTTPS connection, limitation of collected data scope, spam protection for the form, and basic access control for correspondence and website files.
12. Changes to the Privacy Policy
The privacy policy may be updated in case of changes to the website's functionality, data processing methods, or legal provisions. The current version is always published at lewandowski-k.com/privacy-policy.
13. Privacy Contact
For matters concerning personal data protection, write to klewandowski638@gmail.com or use the contact details provided on the website.