Privacy Policy

1.1 The controller of personal data collected through the website https://lukaszfijal.dev/ (hereinafter: the “Website”) is Łukasz Fijał (hereinafter: the “Controller”).

1.2 The Website serves as the Controller's professional portfolio.

1.3 All matters related to personal data processing may be addressed to the Controller by email: blackleafsoftware@gmail.com.

1.4 The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the “GDPR”).

2.1 Personal data submitted via the contact form is processed for the purpose of responding to the inquiry and conducting further correspondence relating to the matter described in the message. The legal basis is the Controller's legitimate interest in handling correspondence directed to the Controller through the Website (Art. 6(1)(f) GDPR).

2.2 Where the message relates to a request for a quote or a potential collaboration, data may be processed for the purpose of taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).

2.3 Personal data contained in correspondence may also be processed for the purpose of establishing, asserting, or defending against potential claims, which constitutes the Controller's legitimate interest (Art. 6(1)(f) GDPR).

3.1 Through the contact form, the Controller processes the following data: full name, email address, topic of inquiry, and message content. Providing a company or project name and additional information is optional.

3.2 Providing a full name and email address is necessary to handle the inquiry. Without these details, it is not possible to send a reply.

4.1 Personal data processed in connection with the contact form is retained for the period necessary to handle the correspondence and resolve the matter — as a rule, no longer than 12 months from the date of the last contact.

4.2 Where a collaboration is established, data is retained for the duration of the contract and subsequently for the period within which related claims may become time-barred.

4.3 Data processed on the basis of the Controller's legitimate interest is retained until that interest ceases or an effective objection is raised.

5.1 To ensure the proper functioning of the Website, the Controller engages external service providers who may process personal data as processors, on the basis of data processing agreements concluded with the Controller.

5.2 Recipients of personal data include in particular: • Vercel Inc. — Website hosting provider; • Cloudflare, Inc. (Turnstile service) — provider of automated spam protection for the contact form; • Resend, Inc. — provider of the email notification delivery service; • Google LLC (Gmail) — provider of the email inbox to which contact form messages are delivered.

5.3 Personal data may be disclosed to public authorities or other authorised entities exclusively in cases provided for by applicable law.

6.1 Due to the use of the services listed in section 5.2, personal data may be transferred to third countries, in particular to the United States of America.

6.2 Data transfers are carried out with appropriate safeguards as required by the GDPR — on the basis of the European Commission's adequacy decision under the EU-US Data Privacy Framework (for entities participating in that programme), or on the basis of Standard Contractual Clauses adopted by the European Commission pursuant to Art. 46 GDPR.

7.1 The data subject has the following rights: a) the right of access to personal data and to obtain a copy thereof (Art. 15 GDPR); b) the right to rectification of inaccurate data (Art. 16 GDPR); c) the right to erasure of data (Art. 17 GDPR); d) the right to restriction of processing (Art. 18 GDPR); e) the right to data portability (Art. 20 GDPR) — to the extent that data is processed on the basis of consent or for the performance of a contract by automated means; f) the right to object to processing based on the Controller's legitimate interest (Art. 21 GDPR); g) the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

7.2 To exercise the above rights, please contact the Controller at the address indicated in section 1.3.

8.1 The Website does not use analytics, marketing, or advertising cookies. No tools such as Google Analytics, Google Ads, Meta Pixel, or LinkedIn Insight Tag have been implemented on the Website. No cookie consent banner is displayed on the Website.

8.2 The contact form uses Cloudflare Turnstile to protect against automated spam. This service may use necessary cookies or similar technologies required to verify the user. These are technical cookies necessary for the form to function correctly.

8.3 Users may manage cookies through their browser settings. Blocking technical cookies may prevent the contact form from functioning correctly.

9.1 Personal data of Website users is not subject to automated decision-making, including profiling, within the meaning of Art. 22 GDPR.