Privacy
How we handle photography enquiries and how to contact the data controller.
Who is responsible for your data
The data controller is DOTACJE DLA BIESZCZAD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Brzegi Dolne 88A, 38-700 Ustrzyki Dolne, Poland. Its company registration number (KRS) is 0001037747 and its tax identification number (NIP) is 6891238142. To discuss your enquiry or your data, email utsmaciejwoch@gmail.com or write to the company at this address.
When you make an enquiry
We use your email address and message, along with your name and any details you choose to give us. If you ask for a quote on your own behalf for a shoot, a business commission or an image licence, we use this information to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). For general questions and enquiries on behalf of an organisation, our legal basis is our legitimate interest in replying and corresponding with you (Article 6(1)(f) GDPR).
Form fields
The form requires your full name, email address and message. Providing these details is voluntary, but they are required to submit the form. If you open it from a gallery, the message may include the selected series identifier. You can also email us directly.
Who handles your message
People authorised by the company deal with correspondence. The form sends messages through the OVHcloud email service to a Google Gmail inbox. OVHcloud also hosts the website and form. Depending on the service, data may be processed outside the European Economic Area. Google identifies adequacy decisions and standard contractual clauses among its transfer mechanisms. Contact the company for details of the safeguards that apply to your correspondence and how to obtain a copy.
How long we keep your data
We keep correspondence for as long as we need to deal with your enquiry. If we work together, we keep the relevant details for the duration of the contract. Where correspondence is needed to establish, exercise or defend a specific legal claim, we retain it until the relevant limitation period expires or the dispute is resolved. Our legal basis for protecting legal claims is our legitimate interest (Article 6(1)(f) GDPR).
Protecting the form
To prevent spam and duplicate submissions, the form uses request identifiers and keyed hashes of the connection address and message details. We rely on our legitimate interest in keeping this contact channel safe and reliable (Article 6(1)(f) GDPR). The rate limit lasts one hour and duplicate detection covers seven days. The application clears expired entries when it next processes a submission.
Your rights
You can ask to access your data, obtain a copy and have errors corrected. Subject to the conditions in the GDPR, you can also request erasure, restriction of processing or portability of data you provided that is processed automatically on a contractual basis. Where we rely on legitimate interests, you can object on grounds relating to your particular situation. You can lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority.
Analytics and social links
This version uses no cookies, analytics or embedded social feeds. Following a profile link takes you to another service, where that service's own privacy rules apply.
Automated decisions
We do not use contact form data for profiling or automated decisions that produce legal effects.