Privacy policy

This website collects the data you give us in the contact form or by email, plus aggregated, anonymous visit statistics. We set no cookies. Below is the information required by Article 13 of the GDPR.

1. Data controller

The data controller is Łukasz Piera, running a sole proprietorship registered as ŁUKASZ PIERA, NIP (Polish tax ID) 7272848245, REGON 388245413. Dumpling Software is a brand of this business. Contact: office@dumplingsoftware.com.

2. What data we process, why, and on what legal basis

Contact form and correspondence

The form sends us your email address, your message and whatever you choose to add: company name, project type, timeline and attachments. We use them to reply and to talk about your project. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR). If the message is not about a project, the basis is our legitimate interest in answering correspondence (Article 6(1)(f) GDPR).

Job applications

If you apply for a position (with the form under the job ad or by email), we process the data in the form, your message and attachments, including your CV, for recruitment to that position. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Technical data

The hosting provider logs technical data such as your IP address and browser type. It is used for security and for the site to work properly. Legal basis: the controller's legitimate interest (Article 6(1)(f) GDPR).

The form is protected by Cloudflare Turnstile, which checks that a person is sending the message. For this, Cloudflare processes technical browser data and your IP address. Legal basis: the controller's legitimate interest in preventing spam (Article 6(1)(f) GDPR).

Visit statistics

We use Vercel Web Analytics to see which pages people visit. It uses no cookies. For each page view it records the page address, the referring page, approximate location (country, region, city), operating system, browser and device type. It recognises a visitor only by a hash of the request data, which is discarded after 24 hours, and shows us aggregated numbers only. Legal basis: our legitimate interest in understanding how the website is used (Article 6(1)(f) GDPR).

3. Who processes the data on our behalf

We do not sell data or share it for marketing. Only technical service providers process it on our behalf:

• Vercel Inc.: website hosting, handling the form and visit statistics,
• OVHcloud: the office@dumplingsoftware.com mailbox that receives the form messages,
• Cloudflare, Inc.: spam protection for the form (Turnstile).

4. Transfers outside the EEA

Vercel Inc. and Cloudflare, Inc. are based in the USA, so data may be transferred outside the European Economic Area. This happens on the basis of the mechanisms provided by the GDPR: a European Commission adequacy decision or standard contractual clauses (Articles 45 and 46 GDPR).

5. How long we keep data

• Form messages and correspondence: until the matter is closed, and no longer than the limitation period for possible claims.
• Job applications: until recruitment for that position ends.
• Server logs: for the short period set by the hosting provider's retention policy.

6. Your rights

You have the right to access your data and receive a copy, to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. To use them, write to office@dumplingsoftware.com.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl) if you believe we process your data unlawfully.

7. Do you have to give us data

Giving data is voluntary. Without an email address, however, we cannot reply to your message. We make no automated decisions and do no profiling.

8. Cookies

This website sets no cookies; the visit statistics work without them too.