Privacy Policy

The controller of your personal data is Mikołaj Żurkowski. Contact email: kontakt@mikolajzurkowski.pl Phone: +48 792 560 560 I process your personal data in accordance with the General Data Protection Regulation (GDPR) and Polish law.

I collect the following personal data: • Name and surname - for communication and service execution • Email address - for correspondence and sending materials • Phone number - for direct contact regarding orders • Photos from sessions - as part of the photography service Data is collected only when you provide it voluntarily (contact form, inquiry, agreement).

Your personal data is processed for the following purposes: • Execution of the photography service • Responding to inquiries via the contact form • Sending completed materials (photos, galleries) • Settlement and accounting documentation • Archiving for warranty purposes The legal basis for processing is Article 6(1)(b) GDPR (contract execution) and Article 6(1)(f) GDPR (legitimate interest).

Personal data is stored for: • Contract data - for the duration of the contract and 6 years after its completion (limitation period) • Invoice data - 5 years from the end of the tax year • Correspondence - 3 years from the last contact • Photos - according to the contract provisions (typically 2 years) After these periods, data is permanently deleted.

You have the following rights regarding your personal data: • Right of access - you can obtain information about your data • Right to rectification - you can request correction of incorrect data • Right to erasure ("right to be forgotten") - you can request deletion of data • Right to restrict processing • Right to data portability • Right to object to processing • Right to lodge a complaint with the supervisory authority (UODO) To exercise your rights, contact: kontakt@mikolajzurkowski.pl

Your personal data may be shared with: • Hosting service provider - for website operation • Accounting office - for invoice processing • Cloud storage providers - for secure photo archiving Data is not transferred to third countries. I do not sell or rent personal data.

I apply appropriate technical and organizational measures to protect your personal data, including: • SSL encryption of the website • Secure passwords and two-factor authentication • Regular security updates • Limited access to data • Encrypted cloud backups