Privacy policy

1. Data controller

The data controller is Studio Borkowski, ul. Stefana Żeromskiego 35, 07-417 Ostrołęka, Poland. You can contact the controller at ostroleka@studioborkowski.pl or +48 604 976 901.

2. Data we collect

When you contact us, you may provide the type of commission, your name, mobile number, email address, planned date, chosen package and message. Your name and planned date are optional. We need at least a mobile number or email address in order to reply.

The server may also record basic technical data required for security and the correct operation of the website, including the IP address, date and time of the request, requested URL, browser information and the server response code.

3. Purposes and legal bases for processing

• replying to an enquiry, checking availability, agreeing the scope and preparing a quotation, and taking steps before entering into a contract, under Article 6(1)(b) GDPR;
• handling correspondence and establishing, exercising or defending legal claims, on the basis of the controller’s legitimate interests under Article 6(1)(f) GDPR;
• website security, diagnostics and administration, on the basis of the controller’s legitimate interests under Article 6(1)(f) GDPR.

4. Recipients of data

Data may be shared with providers of website and email hosting, technical maintenance, security and IT systems. Access is limited to what is necessary to provide those services and is governed by appropriate agreements or applicable law.

5. How long we retain data

Enquiry data is retained for as long as needed to reply and discuss a potential commission. If a contract is entered into, data may be retained for the duration of the contract, for periods required by accounting and tax law, and until the limitation periods for possible claims have expired. Technical server data is retained for as long as needed for security and diagnostics.

6. Your rights

To the extent provided by the GDPR, you have the right to access, rectify or erase your data, restrict its processing, receive it in a portable form and object to processing based on legitimate interests. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO).

7. Providing data is voluntary

Providing data is voluntary. Without a mobile number or email address, we cannot reply to your enquiry. We do not use automated decision-making or profiling.

8. Cookies and external services

The current version of the website does not use analytics or advertising tools and does not store non-essential cookies. When you use the enquiry form, the server may create a short-lived, essential technical session used only to protect the form from automated submissions. It expires when the browser session ends. For that reason, the website does not display a consent banner. If analytics, advertising or other non-essential technologies are introduced in the future, this policy will be updated and consent will be requested before they are activated.

The website includes email, SMS and WhatsApp contact links and a link to Google Maps. The interactive Google map is not loaded when you open or scroll through the page. It is loaded only after you intentionally select “Load the interactive map”. At that point, the browser connects to Google Maps and shares technical data required to display the map, such as the IP address and information about the device and browser. Google’s privacy terms then apply.

9. Changes to this policy

This policy may be updated if the website’s functions, form handling or applicable law change. The current date of the document is always shown at the beginning of this page.