Privacy policy

Data controller

The data controller is Studio2 Łukasz Szulim, ul. Fabryczna 2/38, 00-446 Warsaw, Poland, tax ID (NIP) 526-254-58-61. For matters concerning personal data, write to biuro@studio2agency.pl or call +48 501 680 680.

Data from the contact form

In the form you give your full name, e-mail address and message and, if you wish, your company, phone number and project scope. We use this data to answer your enquiry and talk about working together.

The legal basis is your consent (Article 6(1)(a) GDPR) and, where the enquiry concerns entering into a contract, steps taken at your request before signing it (Article 6(1)(b) GDPR). Providing data is voluntary, but the form cannot be sent without the fields marked as required. You can withdraw consent at any time by writing to the address above. Withdrawal does not affect the lawfulness of what we did before.

How long we keep data

The site does not store enquiries in its own database. An enquiry reaches the biuro@studio2agency.pl mailbox as an e-mail. We keep it for as long as needed to handle it and, if we do not end up working together, for no longer than 12 months from the last contact. We keep documents related to a signed contract for the period required by law.

To limit abuse, the server keeps a hash of the sender's IP address and the number of enquiries sent for one hour.

Who receives data

We use companies that provide technical services for us:

• Cloudflare: website server, domain handling and visit counting,
• Resend: sending messages from the form,
• SEOHOST: e-mail,
• jsDelivr: delivery of the site's scripts, which means your browser connects to this service and shares your IP address with it.

Some of these companies operate globally or are based in the USA, so data may leave the European Economic Area. This happens under mechanisms provided for in the GDPR, such as a European Commission adequacy decision or standard contractual clauses.

Links to Facebook, Instagram and LinkedIn lead to services with their own privacy rules.

Cookies, browser storage and analytics

The site does not store cookies and does not use marketing tools. Your browser's storage keeps a note that the cookie message has been closed and that the intro animation has already been shown in this session. If we start using tools that require consent, we will update this page and ask for your consent.

We count visits with Cloudflare Web Analytics. It shows us aggregate data, such as the number of visits and the most-read pages. Your browser connects to a Cloudflare server for this. According to Cloudflare, the tool does not use cookies or browser storage and does not recognise visitors by IP address or browser data. The legal basis is our legitimate interest in checking how the site works (Article 6(1)(f) GDPR).

Your rights

You have the right to access your data, to have it corrected, erased or restricted, to data portability, to withdraw consent and to object to processing based on legitimate interest. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

We do not make automated decisions about you and we do not profile you based on form data.