GastroDDD Privacy Policy

1. Data controller

The controller is Łukasz Kowalski, osoba fizyczna prowadząca działalność nierejestrowaną, adres do korespondencji: ul. Chełmońskiego 8/112, 02-495 Warszawa, e-mail: lukaszwwakowalski88@gmail.com. Contact lukaszwwakowalski88@gmail.com regarding personal data.

2. Data we process

• telephone number and email address
• premises address, problem description, preferred appointment and payment information
• sales-document details where required
• voluntarily uploaded photographs and correspondence
• technical information needed to protect the service against abuse

3. Purposes and legal bases

• handling a request and performing the service — Article 6(1)(b) GDPR
• tax and accounting duties — Article 6(1)(c) GDPR
• security and legal claims — Article 6(1)(f) GDPR
• responding before a contract — Article 6(1)(b) or (f), depending on the contact

4. Recipients

Processors acting on the controller's instructions may receive data: OpenAI for ChatGPT Sites hosting and application storage, and Resend for sending emails. They are used only as necessary to operate the service under data-processing terms. Owner notifications contain no customer photographs, address or contact details and link to the protected panel. Authorised public bodies may receive data where required by law.

5. Transfers outside the EEA

Some infrastructure providers may process data outside the EEA. GDPR-compliant safeguards are then used, such as adequacy decisions or standard contractual clauses.

6. Retention

• requests not resulting in a service and containing no revenue record — up to 12 months
• service and settlement records — for statutory tax periods and the time needed for legal claims
• photographs — until the request is handled, or longer only where necessary for the service record or legal claims

7. Your rights

You may request access and a copy, correction, deletion, restriction and, where applicable, portability or object to processing. Contact the controller and provide the request number; we may verify your identity. We respond without undue delay, normally within one month. You may lodge a complaint with the President of the Polish Personal Data Protection Office.

8. Voluntary data and automation

Providing data is voluntary, but required fields are necessary to handle the request. We do not use automated decision-making or marketing profiling.

9. Device storage

The service stores your language preference and technical data required to install and run the PWA. We currently use no advertising or analytics cookies.