SpecOpsLab Privacy Policy
This is a translation. In case of discrepancies the Polish version prevails. Version: 1.0 · date: 19.10.2026
1. Controller
The controller of personal data is Damian Łukasiewicz, conducting business under the name Silent Hero Damian Łukasiewicz, ul. Miedziana 18/3, 53-441 Wrocław, Polska, NIP (Tax ID) 5562442970 (hereinafter: the “Controller”). Contact on personal data matters: [email protected].
2. General principle: we collect as little as possible
- The Website does not require registration or the creation of an account.
- The free calculator computes the result in your browser. The results you enter are not sent to the Controller unless you start a purchase.
- The Website does not use cookies for tracking or advertising. We collect visit statistics using Cloudflare Web Analytics, which does not store cookies and does not identify users.
3. What data, for what purpose and on what legal basis
| Situation | Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|---|
| Browsing the Website | IP address, browser type, time of visit (Cloudflare technical logs); anonymised statistics | operation and security of the Website, statistics | Article 6(1)(f) – legitimate interest (security, protection against abuse) | according to Cloudflare’s retention policy; statistics are aggregated |
| Starting a purchase | results entered in the calculator, selected variant, language, country determined from the IP address, time and content of the consent given | preparing the report, determining whether sales are available in the given country | Article 6(1)(b) – conclusion and performance of a contract | up to 24 hours; the data is then deleted automatically |
| After payment | content of the report (contains your results) | delivery of the report via a link | Article 6(1)(b) | 30 days, after which the report is deleted automatically |
| Report package | package code, list of units for which it was used, time of consent | fulfilment of the package | Article 6(1)(b) | 180 days from purchase |
| Payment | e-mail address, first name and surname, payment data, country | payment, sending the report and the confirmation | Article 6(1)(b); for accounting data Article 6(1)(c) – legal obligation | billing data for the period required by tax law (as a rule, 5 years from the end of the tax year) |
| Complaints and disputes | correspondence, purchase data | handling complaints, defence against claims | Article 6(1)(b), (c) and (f) | until the limitation periods for claims expire |
We treat fitness test results as data that is sensitive for you, even if they are not data concerning health within the meaning of the GDPR. For this reason we store them for a short time and do not use them for any other purposes, in particular for profiling or marketing.
4. Recipients of data
We entrust data only to providers needed for the operation of the Website:
- Cloudflare, Inc. – hosting, storage of reports, statistics (processor).
- Stripe Payments Europe, Ltd. (Ireland) – payment processing. Stripe also processes payment data as an independent controller, under its own privacy policy: https://stripe.com/privacy.
- Resend (Plus Five Five, Inc.) – sending e-mails with the report and the confirmation of consent (processor).
- The accounting office serving the Controller – with regard to accounting documents.
Data may be disclosed to public authorities where required by law.
5. Transfers of data outside the EEA
Some providers (Cloudflare, Resend, in some cases Stripe) have their registered office or infrastructure in the USA. Transfers take place on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the Commission. A copy of the safeguards can be obtained by writing to [email protected].
6. Your rights
You have the right to: access your data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. We accept requests at [email protected].
You also have the right to lodge a complaint with the Prezes Urzędu Ochrony Danych Osobowych (President of the Polish Personal Data Protection Office) (ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl) or with the supervisory authority in the EU Member State in which you live.
Providing data is voluntary, but without an e-mail address and payment data a report cannot be purchased.
7. Automated decisions
The report is generated automatically by comparing your results with published standards. This does not produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). We do not profile users.
8. Cookies and similar technologies
The Website does not set its own cookies. The Stripe payment page (checkout.stripe.com) may use cookies necessary for payment and fraud prevention – under Stripe’s policy.
9. Changes
We inform about changes to the Privacy Policy on the Website. This Policy is effective from 19.10.2026.