1. Data Controller

The Controller of your personal data is:

Alan Wardulinski, operating under the brand name Skylume Agency, based in Warsaw, Poland.

Contact email: alanwbusiness@gmail.com

For purposes of the General Data Protection Regulation ("GDPR"), the above entity acts as the data controller.

2. Scope of Personal Data Collected

2.1 Data Provided via Contact Form

When you submit an inquiry through the website, the following data may be collected:

• First name

• Email address

• Instagram username

• Information voluntarily included in the message field

Providing this data is voluntary but necessary in order to receive a response.

2.2 Technical Data

When you visit the website, certain technical data may be collected automatically, including:

• IP address

• Browser type and version

• Device type

• Basic website interaction data

The website uses Framer infrastructure and analytics tools that do not rely on marketing tracking technologies.

The Controller does not collect special categories of personal data within the meaning of Article 9 of the GDPR.

3. Purposes of Processing

Personal data is processed for the following purposes:

1. Responding to inquiries submitted via the website.

2. Evaluating potential cooperation and business compatibility.

3. Communicating regarding potential services.

4. Ensuring website security and technical performance.

Personal data is not used for automated decision - making or profiling.

4. Legal Basis for Processing

Personal data is processed on the basis of:

• Article 6(1)(b) GDPR - processing necessary to take steps prior to entering into a contract at the request of the data subject.

• Article 6(1)(f) GDPR - legitimate interest in conducting business communication, evaluating potential partnerships, and maintaining website security.

The legitimate interest pursued by the Controller is the ability to operate and develop professional business activities.

5. Data Retention

Personal data is retained as follows:

• Inquiries that do not result in cooperation are stored for a maximum of 12 months and then deleted.

• If discussions continue, data is retained for the duration of negotiations.

• If a cooperation agreement is concluded, data may be retained for the duration of the cooperation and for the period required by applicable law (including limitation periods for legal claims).

6. Data Recipients

Personal data may be processed by trusted service providers acting on behalf of the Controller, including:

• Website hosting and infrastructure provider (Framer)

• Email service provider

• CRM system provider (if applicable in case of potential cooperation)

Such entities process data only to the extent necessary to provide their services.

7. International Data Transfers

Due to the use of global service providers, personal data may be transferred outside the European Economic Area.

Where such transfers occur, appropriate safeguards are applied in accordance with GDPR, including the use of Standard Contractual Clauses or other legally approved mechanisms.

8. Rights of Data Subjects

Under GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate data

• Request erasure of data

• Restrict processing

• Object to processing

• Request data portability

You also have the right to lodge a complaint with the supervisory authority in Poland:

Urząd Ochrony Danych Osobowych (Polish Data Protection Authority).

Requests regarding personal data may be submitted via email to: [contact email]

9. Voluntary Nature of Data Provision

Providing personal data is voluntary; however, failure to provide necessary data may make it impossible to respond to your inquiry.

10. Changes to This Policy

The Controller reserves the right to update this Privacy Policy at any time. The current version will always be published on the website.