Privacy Policy
# Privacy Policy — adamziarko.pl
**Effective date:** 13 July 2026
**Version:** 1.0
---
1. General provisions
1. This Privacy Policy ("Policy") describes how personal data, cookies and similar technologies are used in connection with the website available at **https://adamziarko.pl** ("Website").
2. This Policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and the Act of 10 May 2018 on the Protection of Personal Data.
3. The data controller ("Controller") within the meaning of Art. 4(7) GDPR is:
Adam Ziarko
contact: **hello@adamziarko.pl**
4. For data protection enquiries, please contact the Controller at: **hello@adamziarko.pl**.
---
2. Scope and purposes of processing
The Controller processes personal data for the following purposes:
### 1) Handling inquiries via the contact form
- **Data:** names, wedding date, wedding and reception venue, scope of services, Instagram profile address (if provided), information on how you heard about the Controller, email address, message content.
- **Purpose:** responding to your inquiry, preparing an offer, pre-contract correspondence.
- **Legal basis:** Art. 6(1)(b) GDPR (steps prior to entering a contract at the data subject's request) and Art. 6(1)(f) GDPR (legitimate interest of the Controller in handling correspondence).
- **Retention:** until correspondence ends, and thereafter for the limitation period of any potential claims or until an effective objection is raised — no longer than **3 years** from last contact unless a longer period is required by law.
### 2) Sending inquiry confirmation emails
- **Data:** email address, names, basic data from the form.
- **Purpose:** confirming receipt of your message.
- **Legal basis:** Art. 6(1)(f) GDPR (legitimate interest of the Controller in ensuring transparent communication).
### 3) Email correspondence
- **Data:** email address, name and surname (if provided), correspondence content.
- **Purpose:** handling direct emails to **hello@adamziarko.pl**.
- **Legal basis:** Art. 6(1)(f) GDPR.
### 4) Contract performance
- **Data:** identification and contact details, event-related data, billing data — to the extent necessary to perform the contract.
- **Purpose:** entering into and performing film/photography service agreements.
- **Legal basis:** Art. 6(1)(b) GDPR.
- **Retention:** for the duration of the contract and thereafter as required by tax and accounting law (generally **5 years** from the end of the tax year).
### 5) Pursuing and defending against claims
- **Legal basis:** Art. 6(1)(f) GDPR.
- **Retention:** until the limitation period for claims expires.
### 6) Analytics and Website statistics (if implemented)
- The Controller may use analytics tools operating only after the user has consented to analytics cookies.
- **Legal basis:** Art. 6(1)(a) GDPR (consent).
---
3. Voluntary provision of data
1. Providing data in the contact form is **voluntary**, but **necessary** to receive a response to your inquiry.
2. Providing an email address is required for a reply.
---
4. Data recipients
Data may be shared with:
1. **Hosting provider** — mydevil.net (storage of the Website and email).
2. **Email service providers** — to the extent necessary for sending and receiving messages.
3. **Entities authorised under law** — courts and public authorities.
The Controller **does not sell** personal data and **does not transfer** it to third countries outside the European Economic Area unless this is necessary and secured by appropriate legal mechanisms (e.g. standard contractual clauses).
---
5. Your rights
You have the following rights:
1. **Right of access** to data (Art. 15 GDPR).
2. **Right to rectification** of data (Art. 16 GDPR).
3. **Right to erasure** — "right to be forgotten" (Art. 17 GDPR).
4. **Right to restriction of processing** (Art. 18 GDPR).
5. **Right to data portability** (Art. 20 GDPR).
6. **Right to object** to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).
7. **Right to withdraw consent** at any time — without affecting the lawfulness of processing carried out before withdrawal.
8. **Right to lodge a complaint** with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, **uodo.gov.pl**).
To exercise your rights, please contact: **hello@adamziarko.pl**.
---
6. Cookies and similar technologies
1. The Website may use cookies essential for proper operation (e.g. remembering language preference or light/dark mode).
2. Analytics and marketing cookies — if implemented — will be activated only after consent via a cookie banner.
3. You may change cookie settings at any time in your browser or in the Website's preference panel.
---
7. Data security
The Controller applies technical and organisational measures appropriate to the risk of infringement of the rights or freedoms of natural persons, including in particular:
- connection encryption (HTTPS/SSL),
- restricted access to the administrative panel,
- two-factor authentication (2FA),
- regular backups of Website content.
---
8. Automated decision-making
Personal data are **not** used for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
---
9. Changes to this Policy
The Controller reserves the right to amend this Policy. Users will be informed of material changes by publication of a new version on the Website together with its effective date.
---
10. Final provisions
Matters not regulated by this Policy are governed by Polish law and the GDPR.
**Contact:** hello@adamziarko.pl
---
*Informational document. Company registration details (legal name, tax ID, registered address) should be verified before publication.*