Privacy policy
Last updated: 31 October 2026.
Data controller
The controller of your personal data is Wiktoria Dzidek. Contact for data protection matters: [email protected].
What data we collect
Collaboration form: name, e-mail address, brand name, website and social media profiles, project description, budget, deadlines, links and any attachments you upload. E-mails you send me directly. Feedback about our collaboration (name, role, text), if you provide it.
Purpose and legal basis
Replying to your enquiry, preparing an offer and carrying out the collaboration (Art. 6(1)(b) GDPR). Correspondence, settlements and defence against claims (Art. 6(1)(f) GDPR, legitimate interest). Issuing and keeping accounting documents (Art. 6(1)(c) GDPR). Publishing your feedback on the site - only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Recipients
Data is processed by service providers I use: hosting and site infrastructure, database and file storage (Supabase), e-mail delivery (Resend) and e-mail (Google). Data is not sold. Some providers may process data outside the European Economic Area (e.g. in the USA) under standard contractual clauses or a European Commission adequacy decision.
How long we keep data
Enquiries and correspondence - for as long as needed to reply and for any collaboration, then until deleted (on your request or when no longer needed). For an actual collaboration - for its duration and the following limitation period. Accounting documents - for the period required by law. Feedback - until consent is withdrawn.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. You can also withdraw consent. Write to [email protected]. You may lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl). Providing data in the form is voluntary, but needed to reply to your enquiry.
Visit statistics
I count visits with my own simple tool, without cookies and without third-party analytics services. When a page is viewed, I record: the page address, the site the visit came from (e.g. Instagram, Google), the country derived from the IP address, the device type (phone, computer, tablet) and a one-day, one-way identifier computed from the IP address and browser. The IP address is not stored, and the identifier cannot be traced back to it or used to link visits across days. This data is used only to see how many people visit the site and where they come from (Art. 6(1)(f) GDPR, legitimate interest) and is deleted after 13 months.
Cookies and third-party content
The site does not use cookies for advertising, analytics or tracking. It only stores an essential cookie with your chosen language. Portfolio projects may embed videos from YouTube, TikTok or Instagram. Once displayed, those services may load their own resources and set their own cookies, according to their privacy policies.