PL / EN

Privacy policy & cookies

Effective from: 21.11.2025

General provisions

This Privacy Policy sets out the rules for processing and protecting personal data provided by Users in connection with the use of the website available at gadawska.com.

I care about the privacy of my Users. Personal data collected through the website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

Data controller

The controller of your personal data is: Flow Agnieszka Gadawska, NIP: 6751775621, REGON: 524008674.

You can contact me regarding the processing of your data by writing to: agnieszka@gadawska.com.

What data do I collect and why?

I process your data only for specific, legitimate purposes:

Email contact Purpose

To respond to your inquiry sent directly via email.

Scope of data

First name, last name, email address, and any other data you voluntarily provide in your message.

Legal basis

Art. 6(1)(f) GDPR (legitimate interest of the controller in handling correspondence) or Art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract).

Providing data is voluntary but necessary for me to respond.

Statistics and analysis (Google Analytics 4) Purpose

Website traffic analysis, visit statistics, improving site functionality.

Scope of data

Anonymous data about how the site is used (e.g. time spent on the site, approximate location, device type).

Legal basis

Art. 6(1)(f) GDPR (legitimate interest of the controller) and your consent to cookies (see section 07).

Data recipients

Your data may be shared with entities that support me in running the website (data processors):

Hosting providerThe company that maintains the server (server located in Poland).

Google Ireland LimitedProvider of Google Analytics 4 and Google Tag Manager services.

When using Google services, data may be transferred to a limited extent outside the European Economic Area (EEA), particularly to the USA. Google ensures an adequate level of data protection through, among other things, standard contractual clauses approved by the European Commission. Google holds certification under the EU–US Data Privacy Framework.

Data retention period

Your data will be stored only as long as necessary:

Email contactFor the period necessary to handle the inquiry, then for the limitation period of potential claims (typically up to 3 years).

Analytics dataUntil you withdraw cookie consent or delete them from your browser, but no longer than 14 months (Google Analytics settings).

Your rights

In connection with the processing of your personal data, you have the following rights:

Right of access to data
Right to rectification
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to object to processing
Right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe processing violates GDPR

To exercise these rights, contact me by email: agnieszka@gadawska.com.

Cookies and analytics tools

The website gadawska.com uses cookies — small text files stored on your device.

Tools used:

Google Tag Manager (GTM)

A tool for managing scripts on the website. It does not collect personal data itself but triggers other tags (e.g. Google Analytics).

Google Analytics 4 (GA4)

An analytics tool provided by Google. It collects information about user behavior on the site for reporting and site improvement. IP addresses are anonymized.

Managing cookies: On your first visit, a cookie banner is displayed. You can accept or reject cookies. You can withdraw consent at any time by changing your browser settings or clicking the cookie settings available on the site.

Server logs

Using the website involves sending requests to the server hosting the site. Each request is recorded in server logs (including IP address, date and time, browser and OS information).

This data is not linked to specific individuals and is used solely for administrative and technical purposes. Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller in ensuring the security and proper operation of the website.

Security

I apply appropriate technical and organizational measures to protect processed data, including an SSL certificate that encrypts the connection between your browser and my server.