Privacy Policy

Data controller

The controller of your personal data is Aleksandra Magdziarz (Aleks Zarzycka), Warsaw, Poland, studio@alekszarzycka.com.

Purposes and legal bases

Replying to your email and further correspondence: legitimate interest, that is, replying to messages (Art. 6(1)(f) GDPR), and, when you ask about working together, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Booking a call through the calendar (first name, last name, email address and, if you wish, notes for the call): steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Performing the contract, if you become a client (Art. 6(1)(b) GDPR), and accounting required by tax and accounting law (Art. 6(1)(c) GDPR).
Establishing, pursuing or defending claims: legitimate interest, that is, protecting the controller's rights (Art. 6(1)(f) GDPR).
A message offering services, sent to a business by email or on LinkedIn: legitimate interest, that is, direct marketing of the controller's own services (Art. 6(1)(f) GDPR).
A list of people who do not want to receive such messages: legitimate interest, that is, respecting the objection (Art. 6(1)(f) GDPR).
Server logs (IP address, browser, pages visited, time): legitimate interest, that is, running the website and keeping it secure (Art. 6(1)(f) GDPR).

Data from public sources

If Aleksandra contacted you first, your data comes from public sources about businesses, such as the company website and LinkedIn. This data is: your first and last name, the company name and your business email address.

Recipients of data

Hostinger International Limited (Cyprus): website hosting and email.
Google: Gmail, which is used to handle the studio@alekszarzycka.com mailbox, and Google Calendar, which you use to book a call.
Providers of AI tools that help find information about businesses, organize messages and prepare replies.
LinkedIn: messages sent through LinkedIn.
Public authorities, only where the law requires it.

Transfers outside the EEA

Google, AI tool providers and some of Hostinger's subcontractors may process data outside the European Economic Area, including in the USA. The safeguards are the standard contractual clauses adopted by the European Commission or, for certified providers, the EU-US Data Privacy Framework. You can get information about the safeguards, and a copy of them, by writing to studio@alekszarzycka.com.

Retention period

Emails, inquiries and call bookings: up to 12 months from the last contact.
Data from public sources, if you do not reply: up to 12 months from the last message.
Client data: for the duration of the contract, and then for the period required by tax and accounting law. Correspondence from the time of working together: until the limitation period for claims expires.
The list of people who do not want to receive messages: for as long as needed to respect the objection.
Server logs: for as long as needed to run the website and keep it secure.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on legitimate interest (Art. 6(1)(f) GDPR). An objection to messages offering services needs no reason: just reply "stop" or write to studio@alekszarzycka.com.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, and to data portability for data processed on the basis of a contract. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland.

Other information

Providing your data is voluntary, but without it we cannot reply to your message, book a call or enter into a contract.

Your data is not used for automated decision-making, including profiling.

The website does not store information on your device or read it from your device.