Privacy policy
This is a courtesy English translation. In case of any discrepancy, the Polish version of this document is legally binding.
This site does not use cookies and does not track you across websites. I only use privacy-friendly, aggregated visit statistics (no cookies, no identifying of individuals). The only personal data I process is what you enter yourself in the contact or order form.
Data controller
The data controller is Natalia Nitecka, running a business under the name Natalia Nitecka Fotografia, ul. Chojnowska 16 lok. 7, 03-583 Warszawa, NIP 9512262050, REGON 147356036.
For matters concerning personal data, write to: ponitcedozdjecia@gmail.com.
What data I collect and why
Through the form on the site you provide your email address, optionally a phone number, and the content of your message (e.g. the type of session, questions about dates). I use it solely in order to:
- reply to your message and settle the details of the session (legal basis: Art. 6(1)(b) GDPR - steps prior to entering into a contract),
- fulfil your order, e.g. send payment details and the voucher (Art. 6(1)(b) GDPR),
- protect the form against spam and abuse (Art. 6(1)(f) GDPR - the controller’s legitimate interest).
Providing data is voluntary, but without an email address I won’t be able to reply. The site has no accounts, comments or newsletter.
Who I entrust data to
Data from the form goes only to my email inbox. In doing so I use:
- Resend (Resend, Inc.) - technical delivery of emails from the form,
- Google (Gmail) - the mailbox where I keep the correspondence,
- Cloudflare - hosting for the site, protection of the form against bots (Cloudflare Turnstile) and privacy-friendly visit statistics (Cloudflare Web Analytics). As part of the form protection Cloudflare processes, among other things, the IP address and browser signals. Turnstile does not store marketing or tracking cookies; it may, however, store in your browser technical data necessary for verification (e.g. a token in the browser’s local storage). Web Analytics counts visits in an aggregated way, without cookies and without identifying individuals.
These providers may process data outside the European Economic Area - in that case it takes place on the basis of standard contractual clauses or a European Commission decision (Data Privacy Framework).
I do not sell data and I do not share it with anyone for marketing purposes.
How long I keep data
I keep correspondence in my email inbox for as long as it is needed to handle your matter. If you request an invoice, the data provided for it (including your name or company name, address, tax ID) is kept for the period required by tax law - 5 years, counting from the end of the calendar year in which the tax payment deadline fell. Other order-related data is kept until any claims become time-barred. The site does not save form data in any database.
Cookies
The site does not use cookies or similar tracking technologies.
Your rights
You have the right to request access to your data, its rectification, erasure or restriction of processing, as well as the right to data portability. You also have the right to object to processing based on my legitimate interest (Art. 6(1)(f) GDPR - protecting the form against spam and abuse). Just write to ponitcedozdjecia@gmail.com.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
Changes to this policy
This policy may be updated, e.g. when service providers change. The current version is always available at this address.