Privacy Policy & Data Protection (GDPR)
Status: Draft Version • Last updated: 11/12/2026
§ 1. Data Controller
The controller of personal data collected through the bliss.software website is:
Company name: [Your Company or Sole Proprietorship Name]
Registered address: [Street and Number, Postal Code, Wrocław, Poland]
Tax ID (NIP): [Tax ID] | REGON: [REGON]
Contact email for privacy matters: [email protected]
§ 2. Purposes and Legal Grounds for Processing
Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) for the following purposes:
Inquiry and Contact Form Handling: Processing name, work email address, and technical challenge description to provide architectural proposals and quotes (Art. 6(1)(b) GDPR).
Calendar Slot Booking (Discovery Calls): Processing contact information via calendar integrations (Calendly / Google Meet) to conduct technical consultations.
Non-Disclosure Agreement (Mutual NDA): Executing and fulfilling bilateral NDA contracts for confidential code and audit data exchange.
Legitimate Interests: Defending against legal claims and analyzing website performance (Art. 6(1)(f) GDPR).
§ 3. Confidentiality of Code and Engineering Data
As a technical advisory and Fractional CTO firm, Bliss Software enforces strict trade secret protection protocols:
Bilateral Mutual NDA signed prior to inspecting any codebase, repository, or database.
Principle of Least Privilege — operating exclusively on dedicated client staging environments and scoped credentials.
§ 4. User Rights Under GDPR
Every data subject has the right to access, rectify, erase ('right to be forgotten'), restrict processing, port data, and object to processing.
Users also hold the right to lodge a complaint with a supervisory authority (President of the Personal Data Protection Office - PUODO).
§ 5. Cookies and Analytics Tools
The bliss.software website strictly employs technically necessary cookies for session management, DDoS prevention, and CSRF protection. We do not engage in intrusive third-party ad profiling without explicit consent.
§ 6. Contact
All questions or requests concerning privacy and data protection should be sent directly to: [email protected] or mailed to the registered office address of the Controller.