Privacy Policy

I. General Information

This policy applies to the website operating at the URL: oristudio.pl

The operator of the site and the Data Controller is: Laura Mielczarek-Rosik, Mokotowska 52, 00-543 Warsaw

Contact email: oristudiowarsaw@gmail.com

The Operator is the Data Controller of the personal data voluntarily provided on the website.

The website processes personal data for the following purposes: a. Running a newsletter b. Handling inquiries via form c. Fulfilling ordered services d. Presenting offers or information

The website collects information about users and their behavior in the following ways: a. Through data voluntarily entered into forms, which are stored in the Operator’s systems. b. Through the use of cookies saved on end-user devices.

II. Selected Data Protection Methods Used by the Operator

Login areas and areas for entering personal data are protected during transmission (SSL certificate). This ensures that data entered on the site is encrypted on the user's device and can only be read on the target server.

III. Hosting

The website is hosted on servers provided by: home.pl

To ensure technical reliability, the hosting provider maintains server logs, which may include: a. Requested resources identified by URL, b. Time of request, c. Time of response, d. Client device name (identified by HTTP protocol), e. Errors that occurred during the HTTP transaction, f. Referrer URL (previous site visited), g. Browser information, h. IP address, i. Diagnostic information related to service order forms, j. Email handling logs.

IV. Your Rights and Additional Data Use Information

In certain situations, the Administrator may share your personal data with other recipients if necessary to perform the contract or meet legal obligations. This includes: a. Hosting providers, b. Postal operators, c. Authorized staff and collaborators using the data to fulfill site-related tasks, d. Marketing service providers.

Your personal data is processed only for as long as necessary for the related purposes or legal obligations (e.g., accounting). Marketing data is processed no longer than 3 years.

You have the right to request: a. Access to your personal data, b. Correction, c. Deletion, d. Restriction of processing, e. Data portability.

You have the right to object to processing based on legitimate interests of the Administrator, including profiling. This objection does not apply if there are overriding legal grounds for processing, especially in connection with claims.

You may lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

Providing personal data is voluntary but necessary for using the website.

You may be subject to automated decision-making, including profiling, for service delivery or direct marketing purposes.

Your data is not transferred outside the EU.

V. Form Information

The website collects information voluntarily provided by users, including personal data.

The site may store connection details (e.g., time, IP address).

In some cases, the site may link form data to the user’s email address. In such cases, the email may appear in the page URL.

Data from forms is processed according to the form’s function (e.g., service requests, inquiries). Each form clearly states its purpose.

VI. Administrator Logins

User activity on the site may be logged. This data is used for site administration purposes.

VII. Key Marketing Techniques

The Operator uses Google Analytics (Google Inc., USA) for statistical analysis. No personal data is shared, only anonymized information. This service uses cookies. Users can manage Google ad preferences at: https://www.google.com/ads/preferences/

The Operator uses remarketing techniques to tailor ads based on user behavior. No personal data is shared with advertisers. This process requires cookies to be enabled.

The Operator uses Facebook Pixel. This allows Facebook (Facebook Inc., USA) to know a user has visited the site. No personal data is shared with Facebook by the Operator. This also relies on cookies.

The Operator uses tools like heatmaps and session recordings to analyze user behavior. This data is anonymized before being transmitted and does not include passwords or personal information.

The Operator may automate interactions, such as sending emails to users after visiting specific pages, if the user has consented to receive commercial messages.

The Operator may use profiling in accordance with data protection laws.

VIII. Cookies Information

The website uses cookies.

Cookies are small text files stored on the user’s device and used for interacting with the site. They usually include the website name, storage duration, and a unique ID.

The site operator places and accesses cookies on user devices.

Cookies are used to: a. Maintain user sessions after login, so the user doesn’t have to log in again on each page, b. Support marketing features described above.

Two types of cookies are used:

• "Session cookies" (temporary, deleted after logout or browser close),

• "Persistent cookies" (stored until manually deleted or expired).

Most browsers allow cookies by default. Users can change browser settings to delete or block cookies. Instructions are available in browser documentation.

Restricting cookies may affect some site functionality.

Cookies may also be used by partners such as Google, Facebook, and Twitter.

IX. Managing Cookies – How to Express or Withdraw Consent

Users who do not want to receive cookies can adjust their browser settings. Disabling essential cookies may hinder or block website functionality.

Instructions for managing cookies are available for the following browsers: Edge Internet Explorer Chrome Safari Firefox Opera

Mobile devices: Android Safari (iOS) Windows Phone