Pursuant to Regulation (EU) 2016/679 (GDPR)
1. Data Controller
The Data Controller of personal data is:
Lushano Perera
Website: https://www.lushanoperera.com
Contact email: me@lushanoperera.com
2. Types of Data Processed
a) Data voluntarily provided by the user
The website does not include contact forms or comment systems.
Users may contact the Data Controller exclusively via email links (mailto:).
In this case, the data provided (e.g. email address and message content) will be processed solely for the purpose of responding to the request.
b) Browsing data
During normal browsing, the website may automatically collect certain technical data, such as:
- IP address
- browser type
- operating system
- date and time of the visit
- pages visited
These data are not used to directly identify the user.
3. Purposes of Processing
Personal data are processed for the following purposes:
- responding to requests sent voluntarily via email
- analyzing website usage statistics
- ensuring website security and proper operation
- complying with legal obligations
4. Legal Basis for Processing
The processing of personal data is based on:
- user consent (email contact, analytics cookies)
- legitimate interest of the Data Controller (security and proper functioning of the website)
- legal obligations
5. Google Analytics
The website uses Google Analytics, a web analytics service provided by Google Ireland Limited, to collect aggregated statistical information about website usage.
Service characteristics:
- IP address anonymization is enabled
- analytics cookies are installed only with user consent
- the collected data do not allow direct user identification
- data may be transferred to countries outside the EU (e.g. the United States) in accordance with GDPR safeguards
6. Google Fonts
The website uses Google Fonts, a font visualization service provided by Google Ireland Limited.
When visiting the pages, the user’s browser may load fonts directly from Google’s servers, resulting in the transmission of technical data such as the IP address.
Legal basis: user consent.
7. Hosting and Infrastructure
The website is hosted using the following services:
- Frontend: Vercel
- Backend: Cloudways
These providers may process technical data (e.g. IP address, system logs) to the extent necessary to ensure service operation and security.
Processing is carried out in compliance with GDPR and applicable Data Processing Agreements (DPAs).
8. Data Retention
- data provided via email are retained for the time necessary to handle the request
- statistical data are retained in accordance with Google Analytics policies
- cookies have a variable duration (see Cookie Policy)
9. Data Subject Rights
Users have the right to:
- access their personal data
- request rectification or erasure
- restrict or object to processing
- withdraw consent at any time
- lodge a complaint with the competent Data Protection Authority
Requests may be sent to the Data Controller’s contact email address.
Cookie Policy
10. What are cookies
Cookies are small text files that websites send to the user’s browser, where they are stored and then retransmitted during subsequent visits.
11. Types of cookies used
a) Technical (necessary) cookies
These cookies are essential for the proper functioning of the website.
They do not require user consent.
b) Analytics cookies
Used to collect anonymous statistical information on website usage (Google Analytics).
They are installed only with user consent.
c) Third-party cookies
The website uses third-party services that may install cookies or collect technical data, including:
- Google Analytics
- Google Fonts
- Vercel
- Cloudways
12. Consent management
Upon first access, users may:
- accept analytics cookies
- refuse analytics cookies
- modify their preferences at any time
13. How to disable cookies
Users can manage or disable cookies directly through their browser settings.
14. Changes to this policy
This Privacy & Cookie Policy may be subject to changes or updates.
Users are encouraged to review it periodically.