Privacy Policy marcinkrokowski.com
1. general provisions
- This Privacy Policy governs the collection, processing and protection of personal data of users of the marcinkrokowski.com website (hereinafter referred to as the “Website”).
- The administrator of the personal data is Marcin Krokowski Event Photography, NIP: 1251493897, based at: Pl. Józefa Hallera 5/14a, 03-464 Warsaw.
- Administrator Contact:
- e-mail: ko*****@*************ki.com
- phone: +48 501 650 433
- The data is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 (RODO) and applicable Polish regulations.
- Use of the Site constitutes acceptance of this Privacy Policy.
2. what data I collect and in what situations
| Type of data | Situation / source of acquisition | Purpose of collection |
|---|---|---|
| Name, e-mail, phone number | Contact form / quote request / correspondence | Response to inquiry, business contact |
| Address (physical, locality) | When needed for travel / contract / invoice | Logistics, issuance of documents |
| Administrative data (e.g., invoice data) | Customer orders images / purchase of service | Service delivery, billing |
| IP address, browser specifications, operating system, device data | Server logs, site analytics | Traffic monitoring, service optimization |
| Cookies and tracking technologies | Cookie mechanisms / tags / analytics / marketing | Personalization, statistics, marketing |
| Data transferred by files (e.g., briefs, contracts, photos of locations) | Customer sends files / materials | Preparation for order / contract execution |
| Pic-Time gallery data (logins, email addresses of gallery customers, access to images) | When a customer attends the gallery, logs in or enters through a secure link | Allowing customer access to their gallery |
3. purposes of processing and legal basis
| Purpose of processing | Legal basis |
|---|---|
| Customer contact / response to inquiries | legitimate interest of the Administrator |
| Implementation of photography service, delivery of photos | contract performance / service contract |
| Issuance of invoices/billing | legal obligation |
| Marketing / affiliations | user consent |
| Traffic analysis, statistics, site optimization | legitimate interest of the Administrator |
| Content personalization | user consent |
4. entities receiving data / transferring data
- The data may be shared with entities supporting the operations of the Service, such as:
- hosting providers,
- analytical tools,
- Pic-Time platform as a data processor (for photo galleries),
- Payment service providers (if used).
- Pic-Time acts as a processor and stores photographic content according to your instructions (by contract).
- If data is transferred outside the European Economic Area (e.g. Pic-Time servers in the US or Australia), safeguards (e.g. standard contractual clauses) are applied.
- The administrator does not sell users’ personal data to other entities for marketing purposes without their express consent.
5. data retention period
- Contact / inquiry data: kept for the period necessary for case handling or cooperation or until consent is withdrawn.
- Customer data (invoices, billing): Up to 5 years (in accordance with tax obligations).
- Analytics data / server logs: 24 months.
- Pic-Time gallery data (customer logins, emails, access data): For the duration of the gallery’s activity or until the end of the cooperation / closure of the gallery (according to the contract).
- After the indicated periods, the data will be deleted or anonymized, unless there are circumstances that justify longer storage (e.g., claims, disputes).
5a. Review and flexible clause
The Administrator reserves the right to periodically review the datasets – at least once a year – in order to assess which data are no longer needed for the purposes for which they were collected and to delete or anonymize them, unless the law dictates their continued storage or further processing is necessary to protect against claims.
In the event that the data may be needed to defend against claims or exercise rights, the Administrator may extend its storage beyond the standard retention period, only to the extent necessary for these purposes.
6. cookies and tracking technologies
- The website uses cookies and related technologies (tags, web beacons).
- Types of cookies used: – Necessary (for the operation of the site) – Analytical / statistical (e.g. Google Analytics) – Marketing / advertising (only if you choose in the future).
- For Pic-Time galleries, attendees may be asked to provide an email address before entering the gallery (“Request Email Before Entering” feature).
- Galleries can be marked as private, accessible only to invited individuals, or with an access code.
- The user can manage the consent to cookies through the cookie banner or browser settings.
- Disabling some cookies may limit functionality (statistics, gallery login, etc.).
7 Security measures
The administrator uses technical and organizational measures, including:
- HTTPS protocol (encryption of data transmission),
- Regular updates to the system and plug-ins,
- Access control, strong passwords, privilege restriction,
- making backups,
- Restricting access to data to authorized persons only,
- For Pic-Time galleries: use available security features (passwords, link access, private galleries), according to the Pic-Time documentation.
- Pic-Time applies infrastructure security: encryption “in motion and at rest,” security policies, restricted access.
8. user rights
The user has rights:
- access to their data and receive a copy,
- data rectification,
- Deletion of data (right to be forgotten),
- processing restrictions,
- object to processing (especially for marketing or analytical purposes),
- Data portability (if technically possible),
- revoke consent (if processing is based on consent) – revocation does not affect the legality of actions prior to revocation,
- lodge a complaint to the supervisory authority (in Poland: the President of the Office for Personal Data Protection).
To exercise your rights, you may contact the Administrator using the data provided in Section 1.
In the context of Pic-Time galleries: a gallery customer has the right to request deletion / restriction of data related to his access to the gallery.
9. changes to the Privacy Policy
- The Administrator reserves the right to make changes to the Privacy Policy (e.g. as a result of legislation, technological changes or expansion of functionality).
- Users will be informed of significant changes by a message on the Service or, if possible, by e-mail.
- The new version of the Policy enters into force on the date of publication or on the date specified in the Announcement (unless otherwise specified in the Announcement).
- If any provision of this Policy is found to be invalid or unenforceable, the remaining provisions shall remain in effect; the Administrator shall apply the nearest acceptable solution consistent with the law and the spirit of this Policy.
