Szostak Atelier respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, contact us, or inquire about our products and services.
We process personal data in accordance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR).
2. Data Controller
The controller of your personal data is:
WITOLD SZOSTAK ul. Zygmunta Augusta 5/2 31-504 Kraków Poland
Email: contact@szostakatelier.com
For any questions regarding the processing of your personal data, you may contact us using the email address above.
3. Information We Collect
We may collect the following categories of personal data:
Information provided directly by you
When you contact us through our website or by email, we may collect:
Name
Email address
Product of interest
Message content
Any additional information you voluntarily provide
If you proceed with an order or commission, we may also collect information necessary to prepare and fulfill the agreement, including billing and delivery details.
Website usage information
We use Framer Analytics to collect aggregated information about website traffic and usage, including:
Pages visited
Approximate geographic location
Device and browser information
Traffic sources
Session and engagement information
Framer Analytics operates without analytics cookies and is designed to provide privacy-friendly website statistics.
Certain technical information, such as IP addresses, may also be processed by our website hosting provider to operate and protect the website.
4. Purpose and Legal Basis of Processing
We process personal data for the following purposes:
Responding to inquiries and preparing offers
To respond to questions about our products, provide quotations, and discuss potential orders.
Legal basis: Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract, or Article 6(1)(f) GDPR, where processing is necessary for our legitimate interest in handling general business correspondence.
Fulfilling orders and commissions
To manage orders, communicate with customers, arrange production and delivery, and fulfill contractual obligations.
Legal basis: Article 6(1)(b) GDPR.
Complying with legal obligations
To maintain records required by accounting, tax, and other applicable laws.
Legal basis: Article 6(1)(c) GDPR.
Website analytics
To understand how visitors use our website and improve its performance, content, and usability through privacy-friendly, cookieless analytics provided by Framer.
Legal basis: Article 6(1)(f) GDPR — our legitimate interest in understanding website usage and improving our services.
Website operation and security
To maintain the website, ensure its technical functionality, and protect it against misuse.
Legal basis: Article 6(1)(f) GDPR — our legitimate interest in operating and securing our website.
5. Website Analytics and Cookies
We use Framer Analytics to understand how visitors interact with our website and to improve its content, performance, and usability.
Framer Analytics operates without analytics cookies and provides aggregated website statistics without tracking individual visitors across websites.
Our website may use strictly necessary technologies to ensure its proper functioning and security. These do not require consent where they meet applicable legal requirements.
6. Data Sharing and Service Providers
We do not sell your personal data.
We may share personal data with trusted service providers where necessary to operate our website, communicate with customers, and provide our services.
These may include:
Framer — website hosting and related website services.
Google Workspace — business email and communication services.
We may also share information with professional advisers, accounting service providers, or other parties where necessary to fulfill contractual or legal obligations.
Service providers are required to process personal data in accordance with applicable data protection laws and relevant contractual obligations.
7. International Data Transfers
Some of our service providers operate internationally and may process personal data outside the European Economic Area (EEA).
Where personal data is transferred to countries outside the EEA, we rely on applicable legal transfer mechanisms, such as adequacy decisions or appropriate contractual safeguards, including Standard Contractual Clauses where relevant.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal obligations.
Inquiries and correspondence
Personal data related to inquiries is retained for the period necessary to handle the correspondence and any resulting business relationship. Where appropriate, it may be retained for longer to establish, exercise, or defend legal claims.
Orders and contractual documentation
Data relating to completed orders and transactions is retained for the periods required by applicable accounting, tax, and other legal obligations, or for the period necessary to establish, exercise, or defend legal claims.
Analytics data
Website analytics data is processed through Framer Analytics in accordance with its applicable data retention practices.
[Confirm the configured GA4 data retention period before publication.]
9. Your Rights
Under the GDPR, you have the right, where applicable, to:
Access your personal data
Request correction of inaccurate or incomplete information
Request deletion of your personal data
Request restriction of processing
Object to processing based on legitimate interests
Request data portability
Withdraw your consent at any time
Lodge a complaint with a supervisory authority
You may exercise your rights by contacting us at:
contact@szostakatelier.com
You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO).
10. Providing Personal Data
Providing personal data through our contact form is voluntary.
However, certain information, such as your email address and the content of your inquiry, is necessary for us to respond.
Additional information may be required if you decide to place an order or enter into an agreement with us.
11. Automated Decision-Making
We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects concerning individuals.
12. Data Security
We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, alteration, or destruction.
Access to personal data is limited to persons and service providers who require it for legitimate business purposes.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices.
The latest version will always be available on this page, together with the date of the most recent update.
14. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact:
WITOLD SZOSTAK ul. Zygmunta Augusta 5/2 31-504 Kraków Poland