Privacy Policy

1. Data Controller

The controller of your personal data is:
Pawel Dziergas
operating a sole proprietorship under the business name: Pawel Dziergas Fotografia
address: Poland, Grochowskiego 13/103, 05-500 Piaseczno
Tax Identification Number (NIP): 547-188-22-32
REGON: 540071648
email: pawel@paweldziergas.com

In this Privacy Policy, I refer to myself as the "Controller."

2. Contact Regarding Personal Data

If you have any questions regarding the processing of your personal data, you can contact me at: pawel@paweldziergas.com

3. What Personal Data I Process

In connection with running this website and providing photography services, I may process personal data provided through email communication, phone conversations, contract arrangements, invoicing, or cooperation related to a photo session.

This may include, in particular:

• your first and last name,
• email address,
• phone number,
• data required for a contract or invoice,
• information related to the organization and delivery of a photo session,
• your image captured in photographs,
• information included in correspondence,
• technical data related to your use of the website.

This website is used to present my portfolio and information about my photography services. The website does not include a contact form, booking system, online store, online payments, newsletter, or user accounts.

4. Purposes and Legal Bases for Processing Personal Data

I process personal data for the following purposes:

Communication and Handling Inquiries

If you contact me by email, phone, or through another available channel, I process the data you provide in order to reply to your message, discuss the scope of cooperation, prepare an offer, or agree on the details of a photo session. The legal basis for this processing is my legitimate interest in conducting correspondence and handling inquiries, pursuant to Article 6(1)(f) of the GDPR.

Preparing and Performing a Contract

If our cooperation leads to entering into a contract or requires agreeing on its terms, I process the data necessary to prepare, conclude, and perform that contract. The legal basis for this processing is Article 6(1)(b) of the GDPR.

Accounting, Invoicing, and Tax Obligations

I process data included in invoices, bills, contracts, and accounting documents in order to comply with tax, accounting, and settlement obligations. The legal basis for this processing is Article 6(1)(c) of the GDPR.

Establishing, Exercising, or Defending Legal Claims

Personal data may also be processed in order to protect my legal interests, including establishing, exercising, or defending claims related to my business activity. The legal basis for this processing is Article 6(1)(f) of the GDPR.

Portfolio Publication and Image Use

I publish photographs created as part of my photography work on this website. Photographs are published based on the consent of the person shown in the photograph, contractual provisions, cooperation arrangements, or another appropriate basis depending on the nature of the session and the intended use of the photographs.

In the case of publishing a person's image, the legal basis for processing may be consent under Article 6(1)(a) of the GDPR, performance of a contract under Article 6(1)(b) of the GDPR, or the Controller's legitimate interest under Article 6(1)(f) of the GDPR, depending on the specific circumstances.

Internal Database of Clients and Collaborators

I may store data of clients, models, and collaborators in an internal contact database in order to maintain contact, document previous cooperation, plan future activities, and organize my work efficiently. The legal basis for this processing is my legitimate interest, pursuant to Article 6(1)(f) of the GDPR.

Website Statistics

I use analytics tools to understand how visitors use the website and which content is useful to them. For this purpose, I may use Google Analytics 4 and AWStats server statistics provided as part of the hosting service.

Google Analytics 4 operates based on the user's consent to analytical cookies. The legal basis for processing personal data in this respect is Article 6(1)(a) of the GDPR.

AWStats server statistics are generated from server logs and are used for technical traffic analysis, website security, error diagnostics, and basic visit statistics. The legal basis for this processing is the Controller's legitimate interest, pursuant to Article 6(1)(f) of the GDPR.

5. How Long I Store Personal Data

I store personal data for as long as necessary to fulfill the purpose for which it was collected.

• Data from correspondence is stored for the duration of the communication and then for the period necessary to protect against potential claims or document agreed arrangements.
• Data related to contracts, invoices, and accounting documentation is stored for the period required under applicable tax and accounting laws.
• Data related to the performance of a contract is stored for the duration of the cooperation and then for the limitation period for potential claims.
• Data stored in the internal database of clients and collaborators is kept for as long as the contact remains useful for my business activity, unless the person objects earlier or requests deletion of the data and further storage is no longer necessary.
• Photographs published in the portfolio may be displayed for the period during which I conduct my photography business, until consent is withdrawn, the basis for publication expires, or the material is removed from the portfolio.
• Data collected through Google Analytics 4 is stored in accordance with the settings of Google Analytics.
• Technical data included in server logs is stored according to the rules applied by the hosting provider.

6. Recipients of Personal Data

Personal data may be shared with entities that support me in running the website and conducting my photography business. These may include, in particular:

• hosting provider: dhosting.pl,
• email service provider: ProtonMail / Proton,
• cloud service provider: Apple iCloud,
• analytics providers, including Google Analytics 4,
• entities providing accounting, tax, or legal services,
• entities providing technical, IT, or administrative services.

Personal data is shared only to the extent necessary for a specific purpose.

7. Transfers of Personal Data Outside the European Economic Area

Some tools I use may involve the transfer of personal data outside the European Economic Area, in particular when services are provided by global technology providers such as Google or Apple.

In such cases, personal data is transferred based on mechanisms provided under the GDPR, in particular adequacy decisions, standard contractual clauses, or other appropriate safeguards.

Proton is a service provider based in Switzerland. Switzerland is recognized by the European Commission as providing an adequate level of protection for personal data.

8. Data Security

I use technical and organizational measures designed to protect personal data against loss, accidental alteration, unauthorized access, or use inconsistent with the purpose of processing. Data related to clients, contracts, invoices, and cooperation is stored in a secured cloud environment. Access to data is limited to persons and entities that need it to perform specific tasks.

9. Your Rights

You have the right to:

• access your personal data,
• receive a copy of your personal data,
• rectify your personal data,
• request deletion of your personal data,
• request restriction of processing,
• data portability,
• object to the processing of your personal data,
• withdraw consent, where processing is based on consent.

Withdrawal of consent applies going forward and does not affect the lawfulness of processing carried out before consent was withdrawn. To exercise your rights, you can contact me at: pawel@paweldziergas.com

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the GDPR.

Personal Data Protection Office
ul. Stawki 2
00-193 Warsaw
Poland
www.uodo.gov.pl

11. Cookies and Analytics Tools

Information about cookies, Google Analytics 4, and AWStats is available in a separate Cookie Policy available on the website.

12. Changes to This Privacy Policy

This Privacy Policy may be updated, especially if the way the website operates, the tools used, service providers, or applicable laws change. The current version of this Privacy Policy is always available on the website.