Last updated: March 10, 2026
This policy sets out the rules for processing personal data of users of the website available at https://piotrlitwa.com (the "Website"), as well as persons contacting the Controller, using its services, tools, and receiving the newsletter.
Read this policy to learn who processes your data, for what purpose, on what legal basis, and what your rights are. If you do not accept this document, please stop using the Website.
Every person using the Website remains anonymous until they choose to reveal their identity. The Controller does not process any data without your consent or another legal basis provided by GDPR. Personal data is processed for various purposes — always in accordance with the law.
To ensure the security of your data, the Controller selects technical measures to protect it — including against disclosure to unauthorized persons or processing in violation of the law.
The Controller has not appointed a Data Protection Officer due to not meeting the mandatory criteria. Contact on personal data matters: hello@piotrlitwa.com.
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Delivering the audit report | Consent (form submission) |
| Website URL / GTM ID | Performing the audit | Consent |
| Audit results (score, issues) | Service delivery and improvement | Legitimate interest |
| Language preference | Localization | Legitimate interest |
| Marketing consent | Optional marketing emails | Explicit consent |
| UTM parameters, referrer | Marketing attribution | Legitimate interest |
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Authentication and account management | Contract performance |
| Subscription data | Service delivery | Contract performance |
| Support tickets | Customer support | Contract performance |
| Data | Purpose | Legal basis |
|---|---|---|
| Payment data (card, billing details) | Payment processing (handled by Stripe) | Contract performance |
| Invoice data (name, company, address, tax ID) | Issuing invoices | Legal obligation (tax regulations) |
The Controller does not store credit card data. Payments are handled by Stripe, Inc. — a certified PCI DSS-compliant payment processor. The Controller reserves the right to process invoice data for the purpose of pursuing claims.
When subscribing to the newsletter, the email address is processed — the legal basis is consent. The User may unsubscribe at any time.
When using the contact form, data provided by the User is processed — by default, the email address. The legal basis is preparation and performance of a contract or legitimate interest of the Controller.
During a visit to the Website, statistical data is collected: pages visited, time spent on each, date and time of visit, operating system, browser, location. The legal basis is the Controller's legitimate interest in improving the Website structure and services.
Unless cookie preferences are set otherwise, data may be processed for marketing purposes — this includes browsing history, clicks, etc. The Controller does not profile data.
| Processor | Purpose | Location |
|---|---|---|
| ELMO (CSZPiZ) | Central product, consent and license management system | EU (MyDevil hosting, Poland) |
| Stripe, Inc. | Payment processing | USA (EU data processing, EU SCCs) |
| Brevo (Sendinblue) | Email delivery | EU (France) |
| MyDevil.net | Web hosting, database | EU (Poland) |
| Google LLC | Analytics (GA4), Tag Manager | USA (EU Standard Contractual Clauses) |
Processors based outside the European Union (Stripe, Google) guarantee compliance with standards analogous to GDPR. Data transfers are protected by:
The Controller records and manages User consents through the ELMO system. Types of consent:
You can view and manage your consents at any time through the Client Dashboard.
The Website uses cookies — short text files stored on the User's device. They may be read by the Controller and by third-party systems whose services are used.
You can manage your cookie preferences via the cookie banner displayed on the Website.
Web browsers allow cookies by default. You can change your settings:
Disabling or limiting cookies may cause difficulties in using the Website and limit its functionality.
The Controller processes personal data only for the time necessary to achieve the following purposes:
Retention periods are counted from the end of the year in which data processing began. After these periods, data will be irreversibly deleted or destroyed.
Under the General Data Protection Regulation, you have the following rights:
To exercise these rights, contact us at hello@piotrlitwa.com — within 30 days of receiving the request (for complex requests, the deadline may be extended by another month).
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) — uodo.gov.pl.
The Controller implements appropriate technical and organizational measures to protect personal data:
All content published on the Website is protected by copyright and is the property of the Controller. Any use of Website content without the Controller's permission constitutes a copyright infringement.
The Controller may periodically update this Privacy Policy by publishing new versions on the Website. Material changes may be communicated via email. Continued use of the Website is subject to the Policy in effect at that time.
For matters related to privacy and personal data protection: