Privacy Policy
Last updated: August 2026

This website, polapavlac.com, is a personal photography portfolio operated by Pola Pavlac.

Data Controller
The Data Controller is:

Pola Pavlac
Warsaw, Poland
Email: pola.pavlac@gmail.com

Personal data is processed in accordance with the General Data Protection Regulation (GDPR).

What data is collected

When you use the contact form or contact me by email, you may provide:

• your name
• your email address
• the content of your message

Providing this information is voluntary, but necessary if you would like to receive a response.
Basic technical information, such as IP address, browser, device and operating system information, may also be processed automatically for the technical operation and security of the website.

Why your data is processed
Personal data submitted through the contact form or email is used only to:

• respond to your message
• conduct correspondence
• maintain the security and proper functioning of the website

The legal basis for this processing is the legitimate interest of the Data Controller under Article 6(1)(f) GDPR.
The website does not use personal data for direct marketing.

Google Analytics
This website uses Google Analytics 4 (GA4) to understand how visitors use the website, including information such as visited pages, approximate location, device type and traffic source.
Google Analytics is activated only after the user gives consent to optional analytics cookies.
The legal basis for this processing is consent under Article 6(1)(a) GDPR.
You can withdraw or change your consent at any time through the cookie consent settings available on the website.

Website platform and service providers
This website is hosted using Adobe Portfolio.
Adobe and its service providers may process technical and personal data where necessary to provide, maintain and secure the website.
Google may process data collected through Google Analytics for the purpose of providing analytics services.
Some data may be processed outside the European Economic Area where appropriate legal safeguards are in place.

Data retention
Contact form submissions and email correspondence are retained only for as long as reasonably necessary to handle the correspondence, normally for no longer than 12 months after the communication has ended, unless a longer retention period is required by law.
Analytics data is retained according to the retention settings configured in Google Analytics.
Technical and security data may be retained by the relevant service providers according to their own policies.

Your rights
Under the GDPR, you may have the right to:

• access your personal data
• correct inaccurate data
• request deletion of your data
• restrict processing
• object to processing
• request data portability where applicable
• withdraw consent at any time where processing is based on consent
• lodge a complaint with the relevant data protection authority

In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).

To exercise your rights, contact:

Cookies
The website uses cookies and similar technologies necessary for its technical operation and security.
Optional analytics cookies used by Google Analytics are activated only after the user gives consent.
You can change or withdraw your cookie consent at any time.

Changes to this policy
This Privacy Policy may be updated if the website, its functionality or applicable legal requirements change.

The current version will always be available on polapavlac.com.