Privacy policy

Data controller

The controller of personal data processed in connection with lovistu.com is the author of the solo music project Lovistu. For any matter concerning your personal data, write to: [email protected]. The controller’s full identifying details are available on request to any data subject.

What data I process, and why

Server logs. When you visit the site, the server infrastructure may automatically record standard technical details of the request: IP address, date and time, requested URL, and browser and system type. I use these solely to keep the site secure and stable and to diagnose errors. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR). Logs are not combined with other data or used to identify visitors.

Email correspondence. If you write to [email protected], I process your email address, the sender name and the content of your message — in order to reply and carry on the correspondence. Legal basis: legitimate interest (Art. 6(1)(f) GDPR), and where the correspondence is aimed at collaboration — steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).

That is all. The site has no forms, no user accounts, no newsletter and no comment system.

Cookies and tracking

The site does not use cookies, contains no analytics or marketing tools, and does not track visitors. Fonts are served from this domain (no Google Fonts). That is why there is no cookie banner here — there is nothing to consent to.

Who I entrust data to

I use trusted technical providers who may come into contact with the data described above:

• site hosting — a server in an Oracle data centre (London region, United Kingdom),
• Cloudflare, Inc. — DNS, protection and proxying of site traffic, and routing of incoming mail to [email protected],
• Google (Gmail) — the mailbox where messages sent to [email protected] arrive.

These providers process data only to the extent needed to deliver their services.

Transfers outside the EEA

The site’s server is located in the United Kingdom — a country covered by a European Commission adequacy decision. Cloudflare and Google are US companies: transfers to them rely on the EU–U.S. Data Privacy Framework and standard contractual clauses.

How long I keep the data

Technical server logs are kept briefly and deleted or overwritten automatically — for no longer than 90 days. Email correspondence is kept for as long as needed to handle the matter you write about, and afterwards for the period required by potential claims or legal obligations.

Your rights

You have the right to: access your data and obtain a copy of it, have it rectified or erased, restrict its processing, data portability, and object to processing based on legitimate interest. To exercise these rights, write to [email protected].

You also have the right to lodge a complaint with a supervisory authority — in Poland this is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl); in other EU countries, your local data protection authority.

Providing data is voluntary. I make no decisions based solely on automated processing and do not profile visitors.

Links to other sites

The site contains, or will contain, links to external services (e.g. Spotify, Apple Music, YouTube). Once you follow them, those services’ own privacy policies apply — I encourage you to read them.

Changes to this policy

If the site gains new features (such as a newsletter), this policy will be updated before they go live. The date of the latest update is always shown at the top.