Privacy Policy - JobEval

Last updated: May 11, 2026

1. Administrator (Data Controller)

Your personal data is processed by Patryk Skołaś, a sole proprietor operating under the registered firm name FCG Development Patryk Skołaś, ul. Tymienieckiego 25c/109, 90-350 Łódź, Poland, NIP 8951999616. For any privacy matters, contact us at contact@jobeval.eu.

2. What data we collect

From the contact form and lead form: first name, last name, company name, work email, optional phone number, message, and (where applicable) plan interest. Providing this data is voluntary but necessary to respond to your inquiry or present an offer.

Automatically collected when you visit:

Cloudflare (CDN and hosting): IP address in edge logs, country derived from IP, user-agent, request timestamps - with short retention per Cloudflare's policy.
Umami (self-hosted analytics in the EU): hashed session identifier (derived from IP + user-agent, daily-rotated - the raw IP address is not stored), country, browser and OS type, referrer, visited page. No cookies, no profiling.

3. Purposes and lawful basis

To respond to your inquiry - GDPR Art. 6(1)(b) (steps prior to a possible contract).
To protect our service from spam and abuse (Cloudflare Turnstile, rate limiting) - GDPR Art. 6(1)(f) (legitimate interest in service security).
Visit analytics without profiling and without storing the raw IP address (sessions identified via a daily-rotated hash) - GDPR Art. 6(1)(f) (legitimate interest in understanding traffic).

4. Recipients (sub-processors)

Cloudflare, Inc. - hosting (Cloudflare Pages), edge functions (Workers), Turnstile bot protection.
Resend, Inc. - transactional email delivery for messages sent from our forms.
Umami Analytics - self-hosted on our own infrastructure in the EU; cookieless; not an external processor.

We do not sell, rent, or share your data with marketing or advertising partners.

5. Transfers outside the EEA

Cloudflare and Resend are US companies. The transfer of your data to either is covered by the EU–US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCC) Module 2. Otherwise, we do not transfer your data outside the European Economic Area.

6. Retention

Inquiry emails: up to 24 months from the last contact, then deleted.
Cloudflare access logs: per Cloudflare's current retention policy for our plan (up to 30 days).
Umami analytics data: up to 12 months.

7. Your rights

You have the right to:

access your data;
request rectification of inaccurate data;
request erasure ("right to be forgotten");
request restriction of processing;
request data portability;
object to processing based on legitimate interest.

To exercise any of these rights, write to contact@jobeval.eu. You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl.

We do not make decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.

8. Cookies

This site uses one functional first-party cookie:

locale - remembers your language preference (en / pl); expires after 1 year.

We do not use analytics cookies, marketing cookies, or any third-party cookies. Because we use only a strictly functional cookie, no consent banner is required under the ePrivacy Directive or Polish law implementing it.

9. Changes to this policy

This policy may be updated. The date of the last update is shown at the top of the page.