Privacy policy
Introduction
I respect your privacy. Below I explain what personal data I process when you use fimografika.pl or contact me, why I do it and what rights you have. The information required by the GDPR can be found in sections 1–6. The Polish version of this policy is the binding one.
1. Data controller
The controller of your personal data is Filip Morawski, running a business under the name FIMOGRAFIKA Filip Morawski, ul. Jarzębinowa 73, 52-200 Karwiany, Poland, tax ID (NIP): 8992688830 (hereinafter: the “Controller”).
For matters concerning personal data you can contact me by email: fimografika@gmail.com, by phone: +48 606 794 816 or by post at the address above.
This policy applies to the website available at fimografika.pl (hereinafter: the “Website”).
2. What data I process, for what purpose and on what legal basis (GDPR)
I process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Polish Personal Data Protection Act.
- Contact form – name, email address and, optionally, phone number, company name, type of service and message. Purpose: replying to your enquiry and preparing a quote. Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Email and phone contact – the data you provide yourself. Purpose: correspondence. Legal basis: the Controller's legitimate interest, i.e. replying to messages (Art. 6(1)(f) GDPR).
- Performance of a contract – data necessary to carry out the project and issue an invoice. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and tax and accounting obligations (Art. 6(1)(c) GDPR).
- Establishing or defending claims – in the event of a dispute. Legal basis: the Controller's legitimate interest (Art. 6(1)(f) GDPR).
- Technical data – IP address, date and time of the visit and browser type, recorded automatically in server logs. Purpose: security and proper operation of the Website, including protecting the form against spam. Legal basis: the Controller's legitimate interest (Art. 6(1)(f) GDPR).
Providing data is voluntary, but without your email address and name I won't be able to reply to a message sent via the form.
3. How long I keep data
- Form messages and correspondence – until the conversation ends, and if no cooperation follows, no longer than 12 months after the last contact.
- Contract-related data – for the limitation period of claims; data in accounting documents – for 5 years from the end of the tax year, as required by tax law.
- Data processed on the basis of consent – until consent is withdrawn.
- Server logs – for the period set by the hosting provider. The IP address hash used to limit the number of form submissions is kept for only a few minutes.
4. Who I share data with
I do not sell or share your data for marketing purposes. Data may only be passed to entities that help me run the Website and my business:
- the hosting and server email provider – JDM (jdm.pl), whose servers run the Website and send form messages,
- Google Ireland Ltd. – the provider of the Gmail mailbox that receives form messages,
- an accounting office – with regard to accounting documents,
- public authorities – where required by law.
5. Transfers outside the European Economic Area
Using Google services may involve transferring data to the USA. Google LLC participates in the EU-U.S. Data Privacy Framework, and transfers take place on the basis of the European Commission's adequacy decision and standard contractual clauses.
6. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy,
- rectification (correction) of your data,
- erasure of your data (the “right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time – without affecting the lawfulness of processing before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe the processing breaches the law.
To exercise your rights, write to fimografika@gmail.com. I will reply without undue delay and no later than within one month.
Your data is not used for automated decision-making or profiling.
7. Cookies and similar technologies
The Website does not set its own cookies and does not use analytics or advertising tools. That's why there is no cookie consent banner – it isn't needed.
If I add statistics tools in the future (e.g. Google Analytics), I will update this policy and ask for your consent before enabling them.
You can change your cookie settings in your browser at any time.
8. Data security
- The connection to the Website is encrypted (SSL certificate, address starting with https://).
- The form is protected against automated spam without any third-party tracking tools.
- The Website loads its typefaces, scripts and images from its own server – while browsing, you don't connect to any third-party providers' servers (e.g. Google Fonts).
- Only the Controller has access to the data.
9. Changes to this policy
This policy may be updated, e.g. after changes in the law or when new Website features are added. The current version is always available on this page. Last updated: 27 October 2026.
