Privacy Policy & RODO Information

Last updated: 22 July 2026

This Privacy Policy explains how personal data is processed when you use www.askie01.com and the applications and services available through it.

The website and its associated applications are operated as a personal portfolio and software demonstration project.
The project is intended to demonstrate software engineering, backend development, microservices architecture, authentication, and related technologies.

Despite its non-commercial and educational nature, the project may process personal data provided by users when they create and use an account.
This Privacy Policy explains what data may be processed and how it is handled.

1. Data Controller

The controller of personal data processed through this website and its applications is:

Adam Pawłowski
Contact email: askie01.solutions@gmail.com

For questions regarding the processing of personal data or to exercise your rights, you can contact the controller using the email address above.

2. Personal Data We Process

Depending on how you use the application, we may process the following categories of personal data:

• First name
• Last name
• Email address
• User account and authentication information
• Email verification status
• Information associated with your user account
• Technical and security information generated when using the application
• Information contained in application logs, where applicable
• Service-specific data and content you provide or create when using our services, such as recipes, images, workout information, and other information relevant to the specific service

Passwords are not intentionally stored in plain text.
Authentication credentials are processed using the authentication infrastructure of the application, and passwords are stored using appropriate cryptographic hashing mechanisms.

You should never use a password on this application that you also use for important personal or professional accounts.

3. Purposes of Processing

Personal data may be processed for the following purposes:

• Account Management

  To create, maintain, and manage your user account and provide the functionality of the application.

  
  
• Authentication and security

  To authenticate users, protect accounts, prevent unauthorized access, and maintain the security of the application.

  
  
• Email verification

  Your email address may be used to send an email verification message and to confirm ownership of the email address associated with your account.

  
  
• Operation and maintenance

  Technical information and application logs may be processed to monitor application health, diagnose errors, troubleshoot technical issues, and maintain the availability and security of the services.

  
  
• Development and demonstration

  The application is maintained as a personal software engineering and portfolio project.
  Data processing may be necessary to provide and demonstrate the functionality of the application.

4. Legal Basis for Processing

Depending on the specific processing activity, personal data may be processed on the following legal bases under Article 6 of the GDPR (RODO):

• Article 6(1)(b) – processing necessary for the performance of a contract or for taking steps at the user's request before entering into a contract, where applicable to the provision of account functionality.

  
  

• Article 6(1)(f) – processing necessary for the purposes of legitimate interests pursued by the controller, such as maintaining application security, preventing abuse, troubleshooting, and protecting the integrity of the service.

  
  

• Article 6(1)(a) – consent, where processing is specifically based on the user's consent.

Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Where Your Data Is Stored

The application is hosted on infrastructure used by the controller to operate the project.

• Application databases used to store account and profile information
• Authentication and identity management systems used to manage user accounts and authentication
• Temporary or cached data used to provide application functionality
• Email verification data used to manage the email verification process
• Technical logs generated by application and infrastructure components

The application infrastructure may include services such as MySQL, Redis, Keycloak, Kafka, and application logging and monitoring systems.

Not every component necessarily stores personal data permanently.
The actual data stored by each component depends on the application's current configuration and functionality.

6. Email Communication

If you create an account requiring email verification, your email address may be used to send transactional messages related to your account, such as email verification messages.

These emails are intended solely to operate the account functionality of the application and are not intended to be used for marketing purposes.

The application may use a dedicated email service or SMTP provider to deliver these messages.
Where an external email provider is used, the provider may process the necessary data required to deliver the email.

7. Data Recipients and Third-Party Providers

Personal data may be accessible to or processed by service providers that are necessary to operate the application.

Depending on the infrastructure currently used by the project, these may include:

• Hosting and server infrastructure providers
• Email delivery or SMTP providers
• Infrastructure and security service providers
• Other technical service providers required to operate the application

Such providers may process personal data only to the extent necessary to provide their respective services.

The application does not sell personal data and does not intentionally use personal data for third-party advertising.

8. Data Retention

Personal data is retained only for as long as it is necessary for the purposes described in this Privacy Policy.

In general:

• Account and profile data may be retained while your account remains active

  
  

• Email verification data may be retained only for the period necessary to complete the verification process and for a limited period thereafter for security and technical purposes

  
  

• Technical and security logs may be retained for a limited period necessary for security monitoring, troubleshooting, and maintaining the application

  
  

• Data associated with deleted accounts will be deleted or anonymized where technically and legally appropriate, subject to any data that must be retained for legitimate security, legal, or technical reasons

Specific retention periods may vary depending on the type and purpose of the data processing.

9. Account Deletion

You may request deletion of your account and associated personal data by contacting the controller at: askie01.solutions@gmail.com

Upon receiving a valid deletion request, the controller will delete or anonymize personal data associated with the account where there is no legal or legitimate reason to retain it.

Certain technical records, backups, security logs, or other information may remain for a limited period where necessary for security, legal obligations, or legitimate technical purposes.

10. Your Rights Under GDPR (RODO)

Subject to the conditions and limitations provided by applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request portability of your personal data, where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the relevant data protection supervisory authority.

In Poland, you may lodge a complaint with the President of the Personal Data Protection Office (UODO).

To exercise your rights, please contact: askie01.solutions@gmail.com

The controller may need to verify the identity of the person making a request before taking action.

11. Cookies and Local Storage

The application may use technically necessary cookies or browser storage mechanisms required to provide authentication, maintain sessions, and ensure the proper operation and security of the application.

Where cookies or similar technologies are used for purposes beyond what is technically necessary, additional information and, where required, consent mechanisms may be provided.

12. Application Logs and Security

The application may generate technical logs containing information necessary to maintain and secure the service.

Depending on the application configuration, logs may include information such as:

• IP addresses
• Request timestamps
• Requested endpoints
• HTTP status codes
• Error information
• Technical identifiers associated with requests or sessions

Logs are used for operational, debugging, security, and troubleshooting purposes and are not intended to be used for advertising or user profiling.

Appropriate technical and organizational measures are used to protect personal data against unauthorized access, loss, alteration, or disclosure.
These measures may include access controls, encrypted connections, authentication mechanisms, password hashing, and other security measures appropriate to the nature of the data and the risks involved.

13. Data Security

Reasonable technical and organizational measures are implemented to protect personal data processed by the application.

However, no internet-connected system can guarantee absolute security.
Users should therefore avoid submitting sensitive or unnecessary personal information to the application.

In accordance with applicable data protection requirements, personal data breaches will be handled and reported to the relevant authorities and affected individuals where legally required.

14. Children's Data

The application is not specifically directed at children.

If you are under the age required to provide valid consent under applicable law, you should not create an account or provide personal data where parental or guardian authorization is required.

15. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time if the application's functionality, infrastructure, or data processing practices change.

The latest version will always be made available on this page.

Last updated: 22 July 2026