Privacy Policy

Privacy Policy of the website: studiokrukowscybisaga.pl

1. Definitions

Administrator – Maja Bisaga, conducting business under the name Studio Krukowscy-Bisaga, Maja Bisaga, based in Poznań, ul. Szamarzewskiego 36/12, 60-532 Poznań, registered in the Central Register and Information on Economic Activity, NIP: 7812056247, REGON: 526252875

RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Service – service operated by the Administrator at: studiokrukowscybisaga.pl

User – Any individual visiting the Service or using one or more of the services or functionalities described in the Privacy Policy.

2. Data processing

In connection with the User’s use of the Service, the Administrator collects data to the extent necessary to provide the specific services. Below are detailed principles and purposes for the processing of personal data collected during the User’s use of the Service.

3. Purposes and legal bases for data processing

Personal data of all Users using the Service (including IP addresses or other identifiers and information collected via cookies) are processed by the Administrator:

• for the purpose of providing electronic services related to making content available to Users collected on the Service— in this case, the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) of the GDPR);

• for analytical and statistical purposes—in this case, the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) related to conducting analyses of User activity and preferences in order to improve the functionalities and services provided;

• for the purpose of sending commercial information—the legal basis for processing is the User’s consent (Article 6(1)(a) of the GDPR);

• for the purpose of establishing, pursuing, or defending against claims— the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) related to protecting their rights;

The User’s activity on the Service, including their personal data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and actions related to the IT system used by the Administrator to provide services). The information collected in the logs is primarily processed for purposes related to providing services. The Administrator also processes this information for technical, administrative purposes, to ensure the security of the IT system, and to manage the system, as well as for analytical and statistical purposes— in this respect, the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR). The Administrator may make automated decisions based on the data provided by the User, for remarketing and profiling purposes. In this regard, the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), but the User has the right to object to the processing of their data for these purposes.

4. Newsletter 

The User can give consent to receive marketing and commercial messages in the registration form on the service by providing their email address and selecting the appropriate checkbox.

The agreement for the provision of the Newsletter service is concluded by sending the consent mentioned above. Email addresses provided to the Administrator in connection with the performance of the Newsletter service agreement will only be entrusted to the entity handling the newsletter.

The agreement for using the Newsletter service is concluded for an indefinite period.

The User has the right to terminate the agreement for using the Newsletter service with immediate effect, at any time of their choosing, by clicking the appropriate button located in the footer of each newsletter.

5. Period of personal data processing

The period for which the Administrator processes personal data depends on the type of service provided and the purpose of processing. As a general rule, data is processed for the duration of the service or order fulfillment, until the consent given is withdrawn or a valid objection to data processing is raised, in cases where the legal basis for data processing is the legitimate interest of the Administrator.

The period for processing data may be extended if processing is necessary for establishing, pursuing, or defending against potential claims. After this period, data will only be retained if required by law. After the processing period has expired, data is irreversibly deleted or anonymized.

6. Cookies

The Administrator’s Service uses cookies. Failure to change the settings on the User’s end is equivalent to consenting to their use. Cookies are small text files stored on a computer, phone, tablet, or other device of the User. They can be read by the Administrator as well as by systems belonging to other entities whose services are used (such as Google). Cookies typically contain the name of the website from which they originate, the duration of their storage on the end device, and a unique number. More information about cookies can be found at www.allaboutcookies.org.

Cookies used on the Service do not store personal data or other information collected from the User. The Service uses cookies to identify the browser session, which enables the use of the Service’s features. The use of cookies does not allow for the retrieval of any personal or address data of the User, nor any confidential information from their computer.

Cookies are used for the following purposes: ensuring the security of services and preventing fraud, enhancing website performance, recording visits for marketing and statistical purposes, utilizing social media features, and supporting website personalization (e.g., saving language settings). Cookies may also be used and placed by partners collaborating with the Administrator, in which case they are subject to the cookie policies or privacy policies of the entities placing them.

The Administrator reserves the right to use Google Tag Manager for marketing purposes. This involves the use of Google cookies, such as Google Ads codes.

The scope and purpose of data collection, as well as the methods for contacting and exercising rights or making privacy settings, are described in the privacy policies of the respective service providers.

By default, web browsers generally allow the use of cookies on the device. The Administrator informs that you can change your browser settings to either completely block automatic handling of cookies or to request notifications each time cookies are placed on your device.

For instructions on using Google Chrome, please refer to the following link: https://support.google.com/chrome/answer/95647?hl=en.

For instructions on using Mozilla Firefox, please refer to the following link – https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

For instructions on using Safari, please refer to the following link – https://support.apple.com/kb/ph21411?locale=pl_PL

For instructions on using Microsoft Edge, please refer to the following link – https://docs.microsoft.com/en-us/microsoft-edge/devtools-guide/debugger/cookies

The Administrator feels obligated to inform you that disabling or restricting cookies may lead to difficulties in using the website and limit its functionality.

7. Processing of User Data

Within the EEA:

Within the Service, the User’s data is processed by entities collaborating with the Administrator, which, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, are required to adhere to privacy standards similar to those outlined in the Privacy Policy.

• for the newsletter tool
• For Hotjar Ltd (in connection with the use of the Hotjar tool) (headquarters address: Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta). The collected data allows for examining how visitors interact with various elements of the website, from tracking cursor movements to analyzing clicks and scrolling. More information about the privacy standards of the tool is available at https://www.hotjar.com/legal/policies/privacy/ 

Outside the EEA:

Since some entities collaborating with the Administrator are based outside the European Union and are therefore considered ‘third countries’ under GDPR, the Administrator ensures that data is transferred to entities in the United States that use standard contractual clauses.

• For Google Inc. (in connection with the use of Google Analytics, Google Ads, Google Tag Manager) (headquarters address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The collected data does not allow for the identification of any specific individual. More information about the privacy standards of the tool is available at www.google.com/intl/pl/policies/privacy/partners/. Additionally, you can opt-out of Google Analytics tracking by using the following link: https://tools.google.com/dlpage/gaoptout.
• For Facebook Inc. (headquarters address: Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA) – The collected data generally does not allow for the identification of any specific individual. More information about the privacy standards of the tool is available at https://www.facebook.com/about/privacy.
• For Adobe (in connection with the use of Adobe Launch) (headquarters address: Adobe, 345 Park Avenue, San Jose, CA 95110-2704). More information about the privacy standards of the tool is available at https://www.adobe.com/privacy/policy.html.

Thus, the above companies guarantee compliance with privacy standards similar to those set by the Regulation, and the Administrator’s use of their technologies for processing personal data is lawful.

8. User Rights

The User has the right to:

1. access to their data and the request for correction,
2. deletion of data,
3. restriction of processing,
4. the right to data portability,,
5. the right to object to the processing of data,
6. the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw

To the extent that the User’s data is processed based on consent, it can be withdrawn at any time by contacting the Administrator.

The User has the right to object to the processing of data for marketing purposes if the processing is based on the legitimate interest of the Administrator. Additionally, the User can object for reasons related to their particular situation in other cases where the legal basis for data processing is the legitimate interest of the Administrator (e.g., for analytical and statistical purposes).

9. Data Recipients

In connection with the provision of services, personal data will be disclosed to external entities, including, in particular, providers responsible for managing IT systems, marketing agencies (for marketing services), and entities affiliated with the Administrator.

With the User’s consent, their data may also be shared with other entities or the Administrator’s partners for their own purposes, including marketing purposes.

The Administrator reserves the right to disclose certain information about the User to relevant authorities or third parties that request such information, based on an appropriate legal basis and in accordance with applicable law.

10. Contact

Contact with the Administrator can be made via email at studio@studiokrukowscybisaga.pl or in writing to the Administrator’s headquarters address.

11. Changes to the Privacy Policy

The Policy is regularly reviewed and updated as necessary. The current version of the Policy was adopted and is effective from July 18, 2024.