Legal
Privacy Policy
1. Data controller
The controller of your personal data is Marcin Zygmunt, conducting business under the company name mzygmunt Marcin Zygmunt, Przyłęk 112, 36-107 Przyłęk, NIP: 8172023385.
Contact regarding data protection: kontakt@mzygmunt.com, tel. +48 697 112 943.
2. Purposes, legal bases and period of processing
• Replying to a message (contact form, e-mail, telephone). Data: name, e-mail address, telephone number (if provided), content of the message. Legal basis: Art. 6(1)(f) GDPR (legitimate interest – handling of correspondence), and when the inquiry concerns the conclusion of a contract – Art. 6(1)(b) GDPR. Period: until the correspondence is concluded, and then for up to 12 months for defense against potential claims.
• Preparation of an offer and performance of a service contract. Data: contact details, company details, data necessary for the performance of the order. Legal basis: Art. 6(1)(b) GDPR. Period: the duration of the contract.
• Settlements, accounting and tax obligations. Data: identification data and data on invoices. Legal basis: Art. 6(1)(c) GDPR (legal obligation). Period: 5 years from the end of the tax year in which the tax liability arose.
• Establishment, exercise or defense of claims. Legal basis: Art. 6(1)(f) GDPR. Period: until the expiry of the limitation period for claims.
• Statistics and website traffic analysis (Google Analytics 4, Framer Analytics). Data: online identifiers, IP address in truncated form, data about the device, browser and visited subpages. Legal basis: Art. 6(1)(a) GDPR (consent). Period: in accordance with the lifetime of cookies (see Cookies Policy) and data storage settings in the analytical tool.
• Measuring advertisement effectiveness and remarketing (Google Ads), in the case of running advertising campaigns. Data: online identifiers, website activity. Legal basis: Art. 6(1)(a) GDPR (consent). Period: in accordance with the lifetime of cookies.
• Ensuring security and proper operation of the website (server logs). Data: IP address, date and time, address of the requested resource, browser data. Legal basis: Art. 6(1)(f) GDPR. Period: in accordance with the hosting provider's settings.
Providing data in the contact form is voluntary, but necessary to provide a reply. Consent to analytical and advertising cookies is voluntary and can be withdrawn at any time.
3. Data recipients
Data may be entrusted or shared, only to the extent necessary, with entities whose services we use:
• Framer B.V. – provider of the platform on which the website runs (hosting, forms, statistics),
• Google Ireland Limited / Google LLC – analytical and advertising tools (Google Analytics 4, Google Tag Manager, Google Ads),
• e-mail and accounting services provider – to the extent necessary to handle correspondence and settlements,
• public authorities, if required by law.
Data is not sold.
4. Transfer of data outside the European Economic Area
Some providers (in particular, Google LLC) may process data outside the European Economic Area, including in the United States. The transfer takes place on the basis of an adequacy decision by the European Commission (Data Privacy Framework – for certified entities) or standard contractual clauses approved by the European Commission. A copy of the safeguards can be obtained by contacting the administrator.
5. Rights of the data subjects
You have the right to:
• access your data and obtain a copy of it,
• rectify your data,
• erase your data ("the right to be forgotten"),
• restrict processing,
• data portability (where processing is based on consent or a contract and is carried out by automated means),
• object to processing based on a legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with a supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
To exercise these rights, write to kontakt@mzygmunt.com.
6. Cookies and consent management
The website uses cookies and similar technologies. Details, including a list of them and how to change settings, are described in the Cookie Policy. Consent for analytical and advertising cookies can be changed or withdrawn at any time in the cookie banner settings and in your browser settings.
7. Automated decision-making
The data is not used for automated decision-making that produces legal effects, nor for profiling within the meaning of Article 22 of the GDPR.
8. Links to other websites
The website contains links to external services (including Instagram, LinkedIn, Behance, Fab). The data processing rules on these services are defined by their own privacy policies; the website administrator accepts no responsibility for them.
9. Changes to the policy
The policy may be updated, e.g. due to changes in regulations or website functions. The current version is always available on this page, and the date of the last update is at the beginning of it.