Hello!
If you’ve landed here, it’s a sure sign you value your privacy.
I completely understand – that’s why I’ve prepared this document, where you’ll find information in one place about how personal data and cookies (and similar technologies) are used in connection with the operation of the website www.quiettimestudio.com and its associated social media profiles.
We process your personal data primarily for purposes related to your use of our website, including user account management, order handling, complaint resolution, legal and tax obligations, newsletter distribution, claims processing, analytics, statistics, marketing, and other similar matters.
Your personal data is processed for the period necessary to fulfill each specific purpose.
You have the right to access your personal data, request rectification or deletion, restrict processing, object to processing, and request data portability. You also have the right to lodge a complaint with the relevant data protection authority.
Detailed information about how your data is processed can be found in the remainder of this Privacy Policy.
If you have any questions regarding this Privacy Policy, you can contact me at: hello@quiettimestudio.com
This policy is structured in a Q&A format
The choice of format ensures clarity and readability. Below is the table of contents aligned with the questions covered in this policy:
1.Who is the data controller?
2. How can you contact us regarding personal data?
3. What information do we collect about you?
4. How do we obtain your personal data?
5. Are your data secure?
6. For what purposes do we process your personal data?
7. How long do we retain personal data?
8. Who receives your personal data?
9. Do we transfer data to third countries?
10. Do we use profiling or automated decision-making?
11. What rights do you have regarding data processing?
12. What are cookies and how are they used?
13. On what basis do we use cookies?
14. Can you disable cookies?
15. What purposes do we use first-party cookies for?
16. Which third-party cookies are used?
17. Do we track your behavior on the website?
18. Do we serve targeted advertising?
19. How can you manage your privacy?
20. What are server logs?
21. Affiliate Links and Advertising
22. Is there anything else to be aware of?
23. Can this Privacy Policy change in the future?
1. Who is the data controller?
The controller of your personal data is Krzysztof Czechanowski, conducting business as Projekt Odrzański Krzysztof Czechanowski, located at ul. 8 Maja 14/8, 67-100 Nowa Sól, NIP: 9252056223, REGON: 081148550. Whenever the terms “we”, “us”, or “our” are used, they refer to this entity.
2. How can you contact us regarding data protection?
We have determined that appointing a Data Protection Officer is not mandatory in our case. For any inquiries related to personal data protection or privacy, you may contact us at: hello@quiettimestudio.com
3. What information do we collect about you?
There are several purposes. Below is a list of them, along with a more detailed explanation. Depending on the purpose, I may process the following information about you:
- first and last name,
- residential address,
- business address,
- tax identification number (NIP),
- email address,
- phone number,
- data contained in email correspondence,
- details of orders placed in the blog store,
- bank account number,
- IP address,
- approximate location,
- image (profile photo),
- statistics related to received newsletters,
- preferred email client,
- interest in specific legal topics,
- content of comments posted on the blog.
- information about your operating system and web browser,
- pages viewed,
- time spent on the site,
- navigation between specific subpages,
- clicks on specific links,
- the source from which you arrive at the site,
- your age range,
- your gender,
- your approximate location limited to the town or city,
- your interests determined based on online activity.
4: Where do I get your personal data from?
In most cases, you provide it to me yourself. This happens when:
- you place an order in the blog store,
- you subscribe to the newsletter,
- you add a comment on the blog,
- you contact me via email,
- you follow my social media profiles or interact with the content I publish on social media.
Additionally, some information about you may be automatically collected by the tools I use:
Facebook Custom Audiences, including Facebook Pixel, Google Analytics, Facebook Connect, YouTube, Pinterest, and SoundCloud collect Anonymous Information related to your activities within the blog.
5: Are your personal data secure?
I take the security of your personal data very seriously. I have analyzed the risks associated with each data processing activity and implemented appropriate personal data protection and security measures.
I continuously monitor the condition of technical infrastructure, train personnel, review procedures, and introduce necessary improvements.
If you have any questions regarding your personal data, I am available at: hello@quiettimestudio.com
6: For what purposes do I process your personal data?
There are multiple purposes. Below you will find a list of them, followed by a more detailed explanation. Each purpose is accompanied by the appropriate legal basis for data processing:
- ensuring the functioning of the YouTube and SoundCloud players, Facebook and Pinterest widgets, and MailerLite newsletter forms using only Anonymous Information – Article 6(1)(f) GDPR;
- handling orders in the blog store – Article 6(1)(b) GDPR;
- managing the newsletter – Article 6(1)(a) GDPR and Article 6(1)(f) GDPR;
- handling blog comments – Article 6(1)(f) GDPR;
- managing email correspondence – Article 6(1)(f) GDPR;
- handling matters related to the DSA – Article 6(1)(c) GDPR in connection with applicable DSA regulations;
- fulfilling tax and accounting obligations – Article 6(1)(c) GDPR in connection with applicable tax law provisions;
- maintaining an archive for the potential need to establish, pursue or defend legal claims, as well as to provide updates to purchased documents – Article 6(1)(f) GDPR;
- creating Facebook Custom Audiences – Article 6(1)(f) GDPR;
- managing social media profiles – Article 6(1)(f) GDPR;
- conducting analytics and generating statistics using only Anonymous Information – Article 6(1)(f) GDPR;
- conducting direct marketing using only Anonymous Information – Article 6(1)(f) GDPR.
Orders – details
When placing an order, you are required to provide the data necessary for its fulfillment: email address, full name, and billing details.
In addition, the system used to process the order logs your IP address at the time of placing the order.
Each order is stored in the database, which means that along with your personal data associated with the order, information such as the order date and time, order ID, transaction ID, order content, price, payment method and terms, and the date and time of downloading purchased digital content is also recorded.
Data collected in connection with the order is processed for the following purposes:
- fulfilling the contract concluded by placing the order (Article 6(1)(b) GDPR),
- issuing an invoice or receipt (Article 6(1)(c) GDPR in connection with applicable legal provisions regarding invoicing),
- including the invoice in accounting documentation and fulfilling other tax and accounting obligations (Article 6(1)(c) GDPR in connection with applicable legal provisions regarding tax and accounting obligations),
- archiving for the potential need to establish, pursue, or defend legal claims, as well as ensuring updates to purchased documents, which constitutes a legitimate interest pursued by the controller (Article 6(1)(f) GDPR).
Order data is processed for the time necessary to fulfill the order and thereafter until the expiry of the limitation period for claims arising from the concluded contract.
Furthermore, after the expiration of that period, the data may still be stored for archival purposes to ensure the availability of updates to purchased documents.
Please also remember that I am legally obligated to store accounting documentation, which may contain your personal data, for the period required by law.
Newsletter – details
By subscribing to the newsletter, you provide your name and email address. Providing this data is voluntary, but necessary to subscribe to the newsletter.
In addition, the system used to manage the newsletter logs your IP address at the time of subscription, determines your approximate location, identifies the email client you use, and tracks your interactions with the messages sent to you. As a result, I also have access to information about which messages you have opened and which links you have clicked on.
The data you provide when signing up for the newsletter is used to send you the newsletter, and the legal basis for processing this data is your consent (Article 6(1)(a) GDPR) expressed during the subscription process.
As for the processing of information not provided directly by you but collected automatically by the email system, I rely on my legitimate interest (Article 6(1)(f) GDPR) in analyzing subscriber behavior to optimize newsletter performance.
You can unsubscribe from the newsletter at any time by clicking the dedicated link included in each email or by simply contacting me.
Even after unsubscribing, your data will still be stored in the database for the purpose of identifying returning subscribers and for potential legal defense concerning the newsletter, especially to prove your consent to receive the newsletter and the moment you withdrew it. This constitutes my legitimate interest as defined in Article 6(1)(f) GDPR.
At any time, you can modify your subscription data by clicking the appropriate link included in each newsletter message or by contacting me directly.
Comments – details
When submitting a comment, you must provide at least a username that will be associated with your comment (this name may contain personal data, such as your first or last name), as well as your email address. Providing this information is voluntary but necessary to post a comment.
The comment system is powered by WordPress. Your comment, along with any data you make public via your WordPress settings, will be visible on the blog. You can modify or delete your comment at any time.
The legal basis for processing your personal data in the context of the comment system is my legitimate interest (Article 6(1)(f) GDPR), which in this case involves managing and maintaining the comment functionality.
Handling of correspondence – details
When you contact me via email, you naturally provide your personal data contained in the content of the correspondence, in particular your email address and name. Providing this data is voluntary, but necessary in order to initiate contact.
In this case, your data is processed for the purpose of communicating with you, and the legal basis for this processing is my legitimate interest (Article 6(1)(f) GDPR). After the communication ends, the legal basis for further processing is also my legitimate interest, namely the archiving of correspondence in order to be able to demonstrate certain facts in the future (Article 6(1)(f) GDPR).
The content of correspondence may be archived, and I am unable to precisely determine when it will be deleted. You have the right to request the history of the correspondence you have conducted with me (if it has been archived), as well as to request its deletion—unless its archiving is justified due to my overriding interests, for example, defense against potential claims from your side.
Tax and accounting obligations – details
If I issue an invoice to you, it becomes part of the accounting documentation, which must be stored for the period required by applicable law. In this case, your personal data is processed for the purpose of fulfilling my tax and accounting obligations (Article 6(1)(c) GDPR in connection with relevant legal provisions concerning tax and accounting obligations).
Archiving – details
In the descriptions of the individual purposes for processing personal data listed above, I have indicated the respective data retention periods. These periods are often related to the archiving of certain data in order to ensure the possibility of demonstrating specific facts in the future, reconstructing the course of cooperation with a client, previously exchanged correspondence, defense, establishment or pursuit of claims, and updating purchased documents.
In this regard, I rely on my legitimate interest, as referred to in Article 6(1)(f) GDPR.
Custom Audiences – details
Your email address stored in the newsletter database or in the blog shop database may be transmitted to Facebook to create a custom advertising audience using that email address.
When using this function, your email address is hashed before being sent to Facebook in order to create the custom audience.
The email address will be used in the matching process conducted by Facebook.
Facebook does not share the email address with third parties or other advertisers and deletes the address immediately after the matching process is complete.
Facebook has implemented processes and procedures to ensure the confidentiality and security of the transmitted email address and the set of Facebook user identifiers forming the custom audience created using the email address. This includes the use of technical and physical safeguards.
The creation of a Facebook custom audience using your email address is based on my legitimate interest, as referred to in Article 6(1)(f) GDPR.
You may object to the use of your email address for this purpose at any time by contacting me at hello@quiettimestudio.com
Social Media – details
If you follow my profiles on social media platforms or interact with content I publish there, I naturally have access to the data that is publicly available on your social media profile. I process this data solely within the scope of the given social media platform and exclusively for the purpose of operating that platform, which constitutes my legitimate interest as referred to in Article 6(1)(f) GDPR.
Your use of social media platforms is subject to the terms and privacy policies of the administrators of those platforms. These administrators provide electronic services to you independently and separately from me.
I encourage you to use social media mindfully and to protect your privacy within these platforms, particularly by being cautious about the content you make public and managing your privacy settings.
I have prepared a separate Facebook Privacy Policy, which I encourage you to read.
Handling matters related to the DSA – details
As a provider of intermediary services (such as blog comments), I am obliged to comply with the requirements of the Digital Services Act (DSA). This includes receiving and handling reports concerning comments, processing appeals regarding decisions I have made in relation to comments, providing specific information about users upon receiving an order from authorized institutions or authorities, and notifying law enforcement or judicial authorities of any suspected crime that may pose a threat to the life or safety of an individual or individuals in connection with the use of the blog.
For these purposes, I process personal data to the extent necessary to fulfill my legal obligations under the applicable law.
Analytics and Statistics – Details
Advertisements from the Google advertising network (Google AdSense) may be displayed on the website. These ads use cookies and similar technologies to personalize the content of advertisements and measure their effectiveness.
Google may collect information about your device, location, IP address, and browsing history to tailor advertisements to your interests (so-called behavioral advertising).
You can find more information about how Google processes data here: https://policies.google.com/technologies/ads
I conduct analytical and statistical activities using Google Analytics and Facebook Pixel. These tools provide access exclu