Who is responsible for your data
The controllers are the partners operating as PIXELMEAL S.C. D.MARCZEWSKI, K. MARCZEWSKI, ul. Wolności 8/10, 46-300 Olesno, Poland, tax ID (NIP) 5761545164, REGON 160222720.
For privacy enquiries, email [email protected], call +48 697 093 448 or write to the postal address above.
What we use and why
- Enquiries and quotations: your email address and message, plus a name, company name or phone number only if you provide them. We rely on Article 6(1)(b) GDPR for steps requested before entering into a contract, or Article 6(1)(f) for our legitimate interest in handling other correspondence.
- Website operation and security: server logs may contain technical request data, including an IP address, time, requested page, browser information and errors. We rely on Article 6(1)(f) to maintain availability, diagnose faults and prevent abuse.
- Form protection: a session token, form start time and a hashed IP address used to limit attempts. The anti-abuse record contains no message content. The basis is our legitimate security interest, Article 6(1)(f).
- Spam verification: Google reCAPTCHA v3 assesses the risk of an automated message attempt. We run it only after you select “Send message” on a correctly completed form. We use it for our legitimate interest in protecting the form against spam and abuse, Article 6(1)(f) GDPR.
- Optional statistics: after you agree, Google Analytics 4 receives cookie identifiers and usage data, such as page views, device type and approximate location. The basis is consent, Article 6(1)(a) GDPR, together with the Polish Electronic Communications Law rules on device access.
- Recording choices: the cookie preference and its date are kept locally in your browser. Your acknowledgment of reading this policy, its version and the submission time are included in the form email, to document how the enquiry was handled, under Article 6(1)(f).
We do not need special-category data, such as health information, or identity-document numbers. Please leave these out of your message. Acknowledging this policy is not marketing consent. This form does not subscribe you to a newsletter.
Where your data goes
The website and email run on a dedicated server within OVHcloud infrastructure, administered by PIXELMEAL. We also keep backups on local infrastructure under our control. Correspondence is accessible to people authorised to handle it. Technical, legal or accounting providers may receive data where needed for a particular matter, as may authorities legally entitled to receive it.
Adobe Fonts supplies the website’s typefaces. Your browser contacts Adobe servers to fetch them, sharing its IP address and information about the page and font project. According to Adobe’s Fonts information (new tab), the font-delivery service does not use cookies and does not store the IP address received to deliver fonts. Our basis is our legitimate interest in consistent, readable presentation, Article 6(1)(f) GDPR.
Google Analytics 4 receives statistics only after analytics is enabled. We do not send form fields or form-submission events to analytics; the analytics tag is not run on pages containing a form. We remove query parameters and the # fragment from page addresses, and reduce referring addresses to their origin. Google signals and advertising personalisation are disabled in our website code.
Google reCAPTCHA v3 is an external form-protection service. The browser connects through recaptcha.net; Google may process an IP address, browser and device information, and interaction signals needed to assess spam risk. Our server sends a verification token without adding the optional IP address. Our integration does not send reCAPTCHA the form fields, including message content or contact details. See Google’s Privacy Policy (new tab) and Google’s Terms of Service (new tab). reCAPTCHA operates independently of the optional analytics choice.
Google and Adobe may process data outside the European Economic Area, including in the USA. Their information explains transfer safeguards, including adequacy decisions and standard contractual clauses depending on the recipient and transfer: Google’s transfer information (new tab) and Adobe’s privacy policy (new tab). You can also contact us for information on safeguards and how to obtain a copy.
How long we keep data
- Correspondence: for as long as needed to resolve the matter. Where it documents a business relationship or is needed for legal claims, the applicable statutory period or limitation period also applies. The matter and any continuing work determine the duration.
- Security logs: for the period justified by diagnosis, website protection and incident investigation, depending on the event and the need to preserve evidence.
- Form session: token data is valid for up to 30 minutes. The local attempt limiter uses a 10-minute window; expired records are cleaned up on subsequent form activity. These records are not used for analytics or profiling.
- Browser settings: your cookie choice is valid for 180 days. The reduced-animation preference remains until changed or browser data is cleared. Analytics cookies are set to expire within 180 days of creation, without renewal on every visit.
- reCAPTCHA: the verification token is single-use and valid for up to two minutes. Google’s policy describes its data-retention periods. Expiry of a token or cookie does not automatically erase data previously collected by Google.
- Statistics: retention in Google Analytics depends on the service settings and report type. Expiring a cookie does not automatically delete data previously collected by Google. Contact us about your data or a request for deletion.
- Backups: data may remain until the backup is replaced in the backup cycle. Backups support recovery and continuity rather than routine use of deleted correspondence.
Your rights and choices
Subject to the conditions in the GDPR, you can request access, correction, erasure or restriction of your personal data. Data portability may apply to automated processing based on consent or a contract. You can object to processing based on legitimate interests on grounds relating to your particular situation.
You can withdraw analytics consent at any time using . Withdrawing is as accessible as giving consent and does not affect the lawfulness of earlier processing. Rejecting analytics does not restrict access to this website or our contact options.
Email requests to [email protected]. We may ask for information necessary to verify your identity securely. You can also complain to the President of the Polish Personal Data Protection Office (new tab) or the competent supervisory authority in the country where you live, work or consider an infringement occurred.
Voluntary information and external services
Providing data is voluntary. We need an email address and message to handle a form enquiry; without these, we cannot use this contact method. A name, company name and phone number are optional. You can also email us directly or call.
Spam assessment may prevent a form submission. If reCAPTCHA is blocked, unavailable or rejects an attempt, your message stays in the form and you can contact us directly by email or phone. Reading the website alone does not run reCAPTCHA.
We do not make decisions about you with legal or similarly significant effects solely through automated processing. Describing our AI services does not mean that website messages are sent to AI tools.
Instagram and Facebook links lead to external services. Clicking opens the platform, which processes data under its own rules. We do not embed their tracking widgets or Meta Pixel. See our cookie policy for browser storage details.
The Google Maps link opens an external map service when selected; no map is embedded on this site. Google applies its own privacy rules there.
A question about your data?
[email protected]