Privacy Policy

Privacy Policy

Data Controller The Data Controller for personal data is Pola Pavlac, the owner and operator of the purely informational and non-commercial portfolio website polapavlac.com. Location: Warsaw, Poland Contact: kontakt@polapavlac.com The Controller processes data in accordance with the General Data Protection Regulation (EU) 2016/679 („GDPR”).

Scope of Collected Data

Data provided voluntarily by the user While using the website, the user may provide the Controller with personal data such as:

• First name
• Last name
• Email address
• The content of the message sent via the contact form or directly to the email address

Providing this data is voluntary, but necessary to receive a response to an inquiry.

Data collected automatically During the use of the website, the following may be collected:

• IP address
• Data regarding the device, browser, and operating system
• Cookies necessary for the website to function
• Statistical cookies (only upon the user’s explicit consent)
• Technical data related to security (server logs, security system records)

Purposes and Legal Grounds for Processing

• Contact via form or email Purpose: Responding to user messages, inquiries, and conducting correspondence. Legal ground: Art. 6(1)(f) GDPR (legitimate interest of the Controller – communication).
• Statistics and analytics Purpose: Website traffic analysis and functionality optimization. Legal ground: Art. 6(1)(a) GDPR (consent).
• Website security Purpose: Ensuring IT system security and preventing abuse. Legal ground: Art. 6(1)(f) GDPR (legitimate interest of the Controller – ensuring service integrity).

Note: The website serves solely as a personal portfolio. The Controller does not conduct commercial activities through the website and does not process data for direct marketing purposes.

Data Recipients Data may be processed by external entities only for the purpose of maintaining the website:

• Entities providing hosting and technical support for the website.
• Analytics service providers (if statistical cookies are active).
• Entities ensuring IT infrastructure security and email support.

Data is not transferred outside the European Economic Area (EEA), unless the use of external tools ensures an adequate level of protection in accordance with European Commission decisions (e.g., EU-US Data Privacy Framework).

Data Retention Period

• Contact form and email correspondence: Up to 12 months after the contact has concluded.
• Technical data and system logs: Up to 12 months.
• Cookies: In accordance with browser settings or until consent is withdrawn.

The Controller will delete the data earlier if the user effectively exercises their right to erasure.

User Rights Under the GDPR, the user has the right to:

• Access their data.
• Rectify their data.
• Erase their data (the „right to be forgotten”).
• Restrict processing.
• Data portability.
• Object to data processing based on legitimate interests.
• Withdraw consent at any time (if processing is based on consent).
• Lodge a complaint with the supervisory authority (in Poland: President of the Personal Data Protection Office – PUODO).

Contact regarding the exercise of rights: kontakt@polapavlac.com

Cookies The website uses cookies to:

• Ensure the proper functioning of the website (necessary cookies).
• Analyze traffic (statistical cookies – only with active consent).

The user can change cookie settings at any time in their browser settings or via the consent management panel available on the website.

Automated Decision-Making The Controller does not use profiling or automated decision-making.

Data Security The Controller implements technical measures to ensure data security, including connection encryption (SSL certificates), system updates, and data access control.

Changes to the Privacy Policy The Privacy Policy may be updated in the event of changes to the website’s functionality or legal regulations.

The current version is always published on the polapavlac.com website.