Privacy policy

1. Data controller

The data controller is Sławomir Borkowski, conducting business under the name Sławomir Borkowski STUDIO BORKOWSKI, Polish tax ID (NIP) 7581016979, REGON 550422904, ul. Stefana Żeromskiego 35, 07-417 Ostrołęka, Poland. You can contact the controller at ostroleka@studioborkowski.pl or +48 604 976 901.

2. Data we collect

When you contact us, you may provide the type of commission, your name, mobile number, email address, planned date, chosen package and message. Your name and planned date are optional. We need at least a mobile number or email address in order to reply.

The server may also record basic technical data required for security and the correct operation of the website, including the IP address, date and time of the request, requested URL, browser information and the server response code.

When the enquiry form is submitted, a partially masked connection IP address is included in the enquiry email. Using the full address available to the server at the time of the connection, the server may locally derive and include an estimated country, region, city and accuracy radius. This is only an approximation of the network connection’s location, not the person’s precise location or address. The result may be incomplete or inaccurate, especially when a VPN, proxy server, mobile network or shared connection is used.

3. Purposes and legal bases for processing

• replying to an enquiry, checking availability, agreeing the scope and preparing a quotation, and taking steps before entering into a contract, under Article 6(1)(b) GDPR;
• handling correspondence and establishing, exercising or defending legal claims, on the basis of the controller’s legitimate interests under Article 6(1)(f) GDPR;
• protecting the form and correspondence against abuse, assessing the technical source of an enquiry, and website security, diagnostics and administration, on the basis of the controller’s legitimate interests under Article 6(1)(f) GDPR.

4. Recipients of data

Data may be shared with providers of website and email hosting, technical maintenance, security and IT systems. Access is limited to what is necessary to provide those services and is governed by appropriate agreements or applicable law.

5. How long we retain data

Enquiry data is retained for as long as needed to reply and discuss a potential commission. If a contract is entered into, data may be retained for the duration of the contract, for periods required by accounting and tax law, and until the limitation periods for possible claims have expired. The partially masked IP address and estimated location data included in the enquiry email are retained with that correspondence for the periods described above. Other technical server data is retained for as long as needed for security and diagnostics.

6. Your rights

To the extent provided by the GDPR, you have the right to access, rectify or erase your data, restrict its processing, receive it in a portable form and object to processing based on legitimate interests. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO).

7. Providing data is voluntary

Providing data is voluntary. Without a mobile number or email address, we cannot reply to your enquiry. We do not use automated decision-making or profiling.

8. Cookies and external services

The current version of the website does not use analytics or advertising tools and does not store non-essential cookies. When you use the enquiry form, the server may create a short-lived, essential technical session used only to protect the form from automated submissions. It expires when the browser session ends. For that reason, the website does not display a consent banner. If analytics, advertising or other non-essential technologies are introduced in the future, this policy will be updated and consent will be requested before they are activated.

The estimated IP location is determined on the server using a local copy of the MaxMind GeoLite2 City database. For this lookup, the IP address is not sent to MaxMind or any other external geolocation API.

The form uses Cloudflare Turnstile to distinguish legitimate enquiries from automated spam. When the form is submitted, the browser connects to Cloudflare, which may process technical security signals such as the IP address and information about the device and browser. Turnstile does not receive the contents of the form fields. For details, see the Cloudflare Privacy Policy.

The website includes email, SMS and WhatsApp contact links and a link to Google Maps. The interactive Google map is not loaded when you open or scroll through the page. It is loaded only after you intentionally select “Load the interactive map”. At that point, the browser connects to Google Maps and shares technical data required to display the map, such as the IP address and information about the device and browser. Google’s privacy terms then apply.

9. Changes to this policy

This policy may be updated if the website’s functions, form handling or applicable law change. The current date of the document is always shown at the beginning of this page.