Privacy policy
Last updated: 2026-08-04
The controller of your personal data is Nina Ornatkiewicz, whose studio is in Warsaw. For anything concerning your data, write to nina@ornatkiewicz.com.
What we collect
- Whatever you send us yourself by writing to nina@ornatkiewicz.com — your email address, name and the contents of your message.
- Technical data the server records automatically: IP address, browser type, date and time of the visit.
- Analytics data (Google Analytics 4, Meta Pixel) — only if you agree in the banner. Until you do, neither script is loaded at all.
Why, and on what legal basis
- Answering your message and agreeing the details of a commission — Article 6(1)(b) GDPR (steps prior to a contract) and (f) (legitimate interest in replying to people who write).
- Keeping the site secure and working — Article 6(1)(f) GDPR.
- Analytics and measuring marketing — Article 6(1)(a) GDPR, your consent, which you can withdraw at any time.
Who else sees it
We use services that process data on our behalf:
- Vercel Inc. — hosting and server logs.
- Our email provider — handling correspondence.
- Google Ireland Limited — Google Analytics 4, after your consent.
- Meta Platforms Ireland Limited — Meta Pixel, after your consent.
Transfers outside the EEA
Some of those companies also process data outside the European Economic Area. That happens under the Standard Contractual Clauses approved by the European Commission and the Data Privacy Framework.
How long we keep it
- Correspondence: for as long as the matter takes, and up to 3 years afterwards (the limitation period for claims).
- Server logs: up to 12 months.
- Analytics cookies: for their stated lifetime, no longer than 24 months — unless you withdraw consent sooner.
Your rights
You have the right to access your data, to correct it, to have it erased or its processing restricted, to object to processing based on legitimate interest, and to data portability. You can withdraw consent to analytics at any time; that does not affect the lawfulness of anything done before you did.
If you believe we are handling your data unlawfully, you can complain to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Cookies
You can change your choice at any time with the “Cookies” link in the footer, and you can block cookies in your browser settings.
- Necessary: remembering your choice in the consent banner, and the admin panel session. These need no consent — the site does not work properly without them.
- Analytics and marketing: Google Analytics 4 and Meta Pixel. They load only after you agree.
Automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that would have legal effects for you.
Changes
If any of this changes, we update this page and the date at the top.