Privacy policy
How piwowarpawel.com handles technical traffic data, email enquiries and privacy requests.
Last updated:
Who is responsible
I am Paweł Piwowar, the owner of piwowarpawel.com and the controller of personal data processed for this website and correspondence with me. Use the email contact below for privacy questions or requests.
What data is involved
When you visit, Cloudflare handles technical request data such as your IP address, requested URL, request time, browser information, response status and security events. This happens even without a visitor-analytics script. I may access traffic summaries and security events in its dashboard.
If you email me, I receive your address, message, any name or signature you include and any attachments. Providing this information is voluntary, but I need a return address to reply. Please send only what is relevant to your enquiry.
The site has no accounts, newsletter or contact-submission form. Fonts, images and the CV are served with the website. Revealing my contact details does not send your details to me.
Why I process it
Delivering the site, troubleshooting and protecting it against abuse serve my legitimate interest in running a reliable, secure portfolio: Article 6(1)(f) GDPR. The same basis applies to responding to general correspondence and, where necessary, establishing or defending legal claims.
If your enquiry concerns steps towards a contract at your request, Article 6(1)(b) GDPR may apply. Handling legal data-protection obligations is based on Article 6(1)(c).
I do not use your data for advertising profiles or decisions with legal or similarly significant effects. Cloudflare protection may automatically challenge or block suspicious requests.
Who handles it and where
Cloudflare, Inc. provides hosting, content delivery, DNS and traffic protection. Request data is handled on its global network; this setup does not restrict processing or log storage to Poland or the EEA. Cloudflare processes relevant customer data under its data-processing terms and describes international-transfer safeguards, including adequacy mechanisms and Standard Contractual Clauses.
Yahoo provides my email mailbox. Correspondence is stored in that service and may also be held on the devices I use to handle it. Yahoo describes processing outside the EEA and the safeguards it uses. Your own mail provider also handles messages you send.
LinkedIn, Adobe Portfolio, Steam and other external destinations have their own policies after you follow their links. They are links, not embedded social feeds. Azure DevOps stores source code and builds the static site; visitor requests are not sent to it by the website. There is no website visitor database or HomeLab log collector connected to this site.
How long data stays
I keep correspondence while it is needed to answer, follow up on the subject and, where relevant, meet legal obligations or establish or defend claims. I then delete it or remove identifying details. The period depends on the purpose and any applicable legal time limits.
Technical-data retention depends on the Cloudflare service, plan and security settings. I do not maintain a separate exported archive of visitor logs. Provider retention and backup cycles also apply to their systems; there is no single retention period for all technical data.
Your rights
Depending on the circumstances, you can request access, correction, deletion or restriction of your data and object to processing based on legitimate interests. Data portability applies where the GDPR conditions are met. Use the email contact on this page; I may need information to identify the relevant data and verify the request.
You can lodge a complaint with a supervisory authority, including the President of the Personal Data Protection Office (UODO) in Poland.
Changes to this policy
This describes the current website. I will review it before adding analytics, a form, embedded services or new uses of visitor data. The date above identifies this version.