What happens to your data.
This site has no form, sets no cookies and does not track visitors. I only process data once you write or call me, and only to reply and, if we go ahead, to deliver the project.
Who is responsible.
The data controller is Łukasz Cysewski, Gdynia, Poland. For anything related to your data, write to kontakt@lukaszcysewski.me. The registered business address and tax identification number will appear here once the business is entered in the Polish register.
What data, and where it comes from.
I process only what you give me yourself in an e-mail or a phone call: your name, company name, e-mail address, phone number and the content of your message. The site collects nothing on its own and has no contact form.
Why, and on what legal basis.
Replying to your enquiry and preparing an estimate: Article 6(1)(b) GDPR, steps taken at your request before entering into a contract.
Entering into and performing the contract: Article 6(1)(b) GDPR.
Invoicing, accounting and tax obligations: Article 6(1)(c) GDPR, a legal obligation.
Business contact, correspondence archive, and establishing, exercising or defending legal claims: Article 6(1)(f) GDPR, my legitimate interest.
Running and securing the site: Article 6(1)(f) GDPR. My hosting provider's servers log the IP address, the time of the request and the browser type. The logs serve maintenance and security only; the provider keeps them, not me. Aggregate visit statistics rest on the same basis.
For how long.
Correspondence that did not lead to a contract is kept until the conversation ends and for one year after the last message. Data connected with a contract is kept for the duration of the contract, then for the limitation period of claims and for the period required by tax law, which is five years from the end of the year in which the tax obligation arose.
Who else has access.
The providers I use to run the site and e-mail: Cloudflare, Inc. (website hosting and e-mail routing), Google LLC (mailbox) and Brevo, Sendinblue SAS (outgoing e-mail). If we sign a contract, invoicing data goes to the firm that handles my accounting. Some of these providers process data outside the European Economic Area, in the United States, under the European Commission's EU-US Data Privacy Framework decision or standard contractual clauses.
Your rights.
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on my legitimate interest. An e-mail is enough. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). Providing your data is voluntary, but without an e-mail address or phone number I will not be able to reply.
This site and your device.
The site stores no cookies or other data on your device and loads no advertising scripts. Visit statistics are collected by Cloudflare Web Analytics, which according to the provider's documentation uses no cookies or identifiers and does not track visitors across sites; I only see aggregate numbers. There is no profiling and no automated decision-making.
Reporting security issues.
If you find a vulnerability in this site or in a system I run for someone, write to kontakt@lukaszcysewski.me. I usually reply within 24 hours and tell you what happens next.
Good-faith reports are treated as help, not as an attack: I take no legal steps over them, as long as they stay within what is needed to demonstrate the problem. Please do not download other people's data, do not modify or delete content, do not run load or denial-of-service tests, and do not disclose the issue publicly before it is fixed. The technical contact is also in security.txt.
Hosting client websites.
If your website or application runs on my server, I process its users' data only on your instructions, as a data processor, under a data processing agreement pursuant to Article 28 GDPR. The agreement also names the sub-processors, for example the server and backup provider.
The names and trademarks I mention on this site belong to their owners. I use them only to say what I work with, and I do not imply any partnership or certification. The fonts are licensed under the SIL Open Font License 1.1. The photos, icons and the site's code are mine.
Last updated: 14 September 2026. Changes are published on this page.