Privacy policy

1. Who controls your data

The controller of personal data is Katarzyna Dadek, running a business under the name Lervana Katarzyna Dadek, ul. Sucha 129E, 65-001 Zielona Góra, Poland, tax ID (NIP) 9291826961, REGON 364744684. Anavrel is a brand of that company.

Contact in matters of personal data: contact@anavrel.com.

2. What data I process and why

Contact form

• Data: name, e-mail address, the content of the message.

• Purpose: answering the message and further correspondence on the same matter.

• Legal basis: the legitimate interest of the controller, which is handling enquiries (Article 6(1)(f) GDPR). If the message concerns an offer or working together, the basis is also steps taken before entering into a contract (Article 6(1)(b) GDPR).

• How long: for the time of the correspondence and 12 months after it ends. If the correspondence leads to a contract, until claims become time-barred and the periods set by tax law run out.

Giving the data is voluntary, but without an e-mail address I cannot reply.

Protecting the form against spam

The form is protected by Cloudflare Turnstile. When the form is sent, Cloudflare receives the IP address and technical data of the browser to assess whether the form is being sent by a person. The basis is the legitimate interest of the controller, which is protection against abuse (Article 6(1)(f) GDPR).

Server logs

The server records the IP address, the date and time of the request, the page address and browser data. The logs serve security and the diagnosing of errors (Article 6(1)(f) GDPR) and are kept for 90 days.

Visit statistics

The site counts visits with Matomo, which runs on the servers of the hosting provider in Poland. Matomo records the IP address, the pages viewed, what was done on them (opening the site of an app, sending the contact form, switching the language), the address of the page the visit came from, and browser and device data. It sets no cookies and does not follow visitors across other sites. The basis is the legitimate interest of the controller, which is knowing how the site is used and improving it (Article 6(1)(f) GDPR). The data is kept for 365 days.

3. Who receives the data

The data may reach entities that process it on my behalf:

• ADMIN.NET.PL Tomasz Rzepka Arkadiusz Nowara S.C., based in Tarnów, Poland (the MyDevil.net brand): hosting of the site and of e-mail, visit statistics,

• Cloudflare, Inc. (protecting the form against spam).

I do not sell data and do not share it for marketing purposes.

4. Transfers outside the European Economic Area

Cloudflare, Inc. is based in the United States. The data is transferred on the basis of the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) and standard contractual clauses. The hosting and e-mail servers are located in Poland.

5. Your rights

You have the right to:

• access your data and receive a copy of it,

• have your data corrected,

• have your data erased,

• have the processing restricted,

• object to processing based on legitimate interest,

• data portability, to the extent the data is processed on the basis of a contract.

To use these rights, write to contact@anavrel.com. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).

6. Profiling

I make no automated decisions and do not profile users.

7. Cookies and browser storage

The site uses no advertising tools, and its visit statistics (Matomo) work without cookies. It stores in the browser only the settings it needs to work: the chosen theme (light or dark) and language. They need no consent, because they are necessary to provide the service, and they can be removed in the browser settings.

The fonts are served from the same server as the site, with no connections to outside servers.

8. Links to other sites

The site links to Anavrel apps at separate addresses and to outside services (LinkedIn, GitHub). Each of them has its own privacy policy.

9. Changes to this policy

The current version of the policy is always available on this page, with the date from which it is in force.