1. This Privacy Policy sets out the rules for the processing and protection of Users’ personal data in connection with the use of FLAME STUDIO services and website.

 

2. The Data Controller is Artsemi Ryzhankou (JDG), NIP: 8992950831, ul. marsz. Józefa Piłsudskiego 74/131, 50-020 Wrocław. Contact: e-mail: flame.studio.pl@gmail.com, tel.: 571 369 791.

 

3. The Controller applies organizational and technical measures to ensure data security and compliance with GDPR, the Personal Data Protection Act, and the Act on the Provision of Electronic Services. We use, among others, TLS/SSL encryption, access restrictions, regular backups, and software updates. The website is hosted by an external provider; server logs may include: the requested URL, date and time of the request, IP address, browser information, and error information – solely for technical and security purposes.

 

4. Legal bases for data processing:

a) User consent (Art. 6 sec. 1 lit. a GDPR),

b) necessity for concluding and performing the rental agreement (Art. 6 sec. 1 lit. b),

c) legal obligations of the Controller (Art. 6 sec. 1 lit. c),

d) legitimate interest of the Controller (Art. 6 sec. 1 lit. f) – including pursuing claims and ensuring website security.

 

5. Scope of data: full name/company name, contact details (e-mail, phone number), billing details (NIP, address), booking and payment details. Data provided in forms is processed only for the purpose of handling the inquiry and/or booking.

 

6. Purposes of processing: booking management, performance of the agreement, communication, settlements, complaints, pursuing claims, statistics, and website security.

 

7. Data recipients: entities providing services necessary for the performance of our services, such as payment operator, hosting, and accounting, based on data processing agreements, as well as authorities authorized by law. The recipient of data in relation to payment processing is the payment operator Przelewy24 (PayPro S.A.).

 

8. Storage period: for the duration of the agreement and for the period required by law, for example tax/accounting regulations – generally up to 6 years, and in relation to claims – until the limitation period expires. For example: billing data – up to 6 years; booking data – up to 2 years; marketing data processed on the basis of consent – up to 3 years.

 

9. User rights: the right to access data, rectify data, erase data where there is no basis for further processing, restrict processing, data portability, object to processing, and withdraw consent at any time, without affecting the lawfulness of processing carried out before consent was withdrawn.

 

10. Cookies: The website may use “cookies” for statistical, functional, and security purposes.

 

The User may manage cookies in browser settings; restrictions may affect some website features.

We do not use our own analytical or marketing tools.
However, as part of the website’s operation, cookies from the platform provider (Wix.com Ltd.) may be used solely for technical and security purposes.
The User may manage cookies in the consent banner or browser settings; restrictions may affect the operation of the website.

 

10a. Payment-related cookies

During payment processing through Przelewy24, cookies of the payment operator
Przelewy24 (PayPro S.A.) may be used to handle the payment process, prevent abuse, and ensure security.
The scope and rules of their use follow from the operator’s policies.

 

11. Providing data is voluntary, but necessary to conclude the rental agreement and provide services.

 

12. Data is not sold or transferred to third parties for marketing purposes without separate consent.

 

13. Data is not transferred outside the EEA unless this results from the services of providers, such as cloud tools; in such cases, appropriate safeguards are applied, for example standard contractual clauses.

 

14. Changes to the Policy: technological development, changes in law, or changes in services may result in updates; the current version will be published on the website.

 

15. Complaints: The User has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if they believe that the processing violates the regulations.