Privacy policy

Contact and service provider

Andrii Danchuk · Warszawa

Services are provided as działalność nierejestrowana (unregistered activity).

Contact form · Website contact

The website form is a non-binding enquiry. The contact details and agreed terms are provided before a distance order is concluded.

Data and purpose

Andrii Danchuk is the data controller. I process your name, phone or email/Telegram, language, problem description, device model and order details. Pickup/return addresses are only needed for transport. These details are used to reply, quote and perform agreed work (GDPR Article 6(1)(b)), meet accounting and tax obligations (c), and handle complaints and defend claims (f — legitimate interest).

Contact details and a description are needed to reply. Billing details are needed to issue a document. I do not need your passport number. Private files are only accessed where necessary and expressly agreed for the work.

Photos and correspondence

Optional condition and work photos are agreed separately at intake and serve private documentation. Original conversations you provide are used to establish agreed terms and handle disputes based on legitimate interest. Portfolio photos are published only with separate voluntary consent (GDPR Article 6(1)(a)) and my individual approval, without visible personal details. Refusing consent does not affect the service. You can withdraw photo consent through the contact above or your order page; withdrawal does not change the lawfulness of earlier processing.

Retention

Enquiries that do not become orders: up to 12 months after the last contact. Completed order records, agreed terms and private photos: normally up to 3 years after completion; longer only for an ongoing dispute or legal requirement. Sales documents and expense evidence: until tax limitation expires, usually 5 years after the end of the year in which tax payment was due (for 2026 PIT, normally through the end of 2032). Portfolio: until consent is withdrawn or the publication removed. Erasure requests are assessed against required retention periods; tax records are not deleted early.

Recipients and security

Data is stored on the server serving duxalife.com. The hosting provider may have technical access; authorities or an accounting adviser receive only necessary data where justified. A request notification goes to my private Telegram bot. If you choose Telegram, communication also follows Telegram’s rules; that service may process data outside the EEA under its policy. You can choose phone or email for further communication. I do not sell data, send newsletters or profile you.

Private order, receipt and report links are not indexed or listed publicly. Anyone with such a link can open it, so treat it as confidential. Pickup addresses, private conversations and billing data are not published openly. Session cookies are only used for secure panel login. Technical logs support website security.

Your rights

You can request access, correction, erasure or restriction, portability where applicable, object to processing based on legitimate interest and withdraw consent. Use the contact above. I normally respond within one month and will notify you within that period of any justified extension. You can complain to the Polish supervisory authority, Prezes UODO (uodo.gov.pl).