Below I explain what data I collect through this site, why and on what basis, how long I keep it, and what rights you have.
01Data Controller
The controller of your personal data is Karolina Szostek, conducting business activity under the name Karolina Szostek, with its registered seat at Złotowska 104/4, 71-793 Szczecin, Poland, Tax ID (NIP) 5213923694. For any matters concerning personal data, you can reach me at: karolina@szostek.co.
02What data I collect
Through the form on this website I collect: first name, last name, email address, company name, and the content of your message. If you include additional information in your message, I process that data as well – which is why I recommend sharing only what is needed to discuss a potential collaboration.
While you use the website, my hosting provider and analytics tool may automatically record technical data (e.g. IP address, browser data, cookie identifiers, server logs) to the extent described in section 10.
03Purpose and legal basis of processing
I process the data from your form in order to:
- respond to your inquiry and carry on correspondence – based on my legitimate interest in handling contact (Article 6(1)(f) GDPR);
- take steps to enter into a contract at your request when you reach out about collaboration (Article 6(1)(b) GDPR);
- if a collaboration begins – perform the contract and fulfil legal obligations, including tax and accounting ones (Article 6(1)(b) and (c) GDPR);
- establish, pursue, or defend against any claims – based on my legitimate interest (Article 6(1)(f) GDPR).
Data collected by the analytics tool is processed based on your consent given through the cookie banner (Article 6(1)(a) GDPR).
I do not use data from the form to send marketing or a newsletter without your separate consent.
04How long I keep data
Data from inquiries that do not lead to a collaboration is kept for the time needed to handle the matter, and afterwards until any claims become time-barred or until you raise an effective objection. If a collaboration begins, I keep the data for the duration of the contract and for the periods required by law (including tax records – 5 years counted from the end of the year in which the tax payment deadline fell). Analytics data is kept for the period set in the GA4 configuration or until consent is withdrawn.
05Data recipients
Your data may be processed by trusted service providers acting on my behalf under data processing agreements:
- Webflow, Inc. – provider of the hosting and software the website runs on;
- Google (Google Workspace) – handling of email correspondence;
- Google (Google Analytics 4) – website traffic analytics.
Data may also be disclosed to entities authorised under applicable law.
06Transfers outside the European Economic Area
I use tools from providers based in the USA (including Webflow and Google). Transfers of data outside the EEA take place on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework) and Standard Contractual Clauses (SCC), which ensure an adequate level of protection for your data.
07Your rights
You have the right to: access your data and obtain a copy of it, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. For data processed on the basis of consent (analytics), you have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, write to: karolina@szostek.co.
You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
08Voluntary provision of data
Providing your data is voluntary but necessary for me to respond to your inquiry and discuss a potential collaboration.
09Profiling
Your data is not used for automated decision-making or profiling.
10Cookies
The website uses cookies necessary for it to function properly, which do not require your consent.
With your consent, the website also uses Google Analytics 4 (GA4) analytics cookies, which help me understand how visitors use the site (e.g. which pages are viewed, where traffic comes from). These cookies are not installed until you give consent through the cookie banner. You can withdraw your consent or change its scope at any time in the cookie settings on the website.
11Changes to the policy
This policy may be updated. The current version is always available on this page, with the date of the last update shown at the top of the document.
12Contact
For matters concerning the protection of personal data, write to: karolina@szostek.co.