Effective date: 21.11.2025

1. General Provisions

This Privacy Policy sets forth the principles for processing and protecting personal data provided by Users in connection with their use of the website available at https://gadawska.com/.

I am committed to the privacy of my Users. Personal data collected via the website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Personal Data Controller

The Controller of your personal data is: Flow Agnieszka Gadawska NIP (Tax ID): 6751775621 REGON (National Business Registry Number): 524008674.

You can contact me regarding the processing of your data by writing to the e-mail address: agnieszka@gadawska.com.

3. What data do I collect and for what purpose?

I process your data only for specific, legitimate purposes:

• Contact Form / E-mail Contact
  • Purpose: To respond to your inquiry submitted via the form on the website or directly via e-mail.
  • Scope of data: Name, surname, e-mail address, and potentially other data you voluntarily provide in the message content.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller consisting of handling correspondence) or Art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract).
    Providing data in the contact form is voluntary but necessary to receive a response.
• Statistics and Analysis (Google Analytics 4)
  • Purpose: Analysis of website traffic, visitation statistics, and improvement of website functionality.
  • Scope of data: Anonymous data regarding how the website is used (e.g., time spent on the site, approximate location, device type).
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller) and your consent for cookies (see section 7).

4. Data Recipients

Your data may be transferred to entities that support me in operating the website (so-called data processors). These are:

• Hosting Provider: The company hosting my server (the server is located in Poland).
• Google Ireland Limited: Provider of Google Analytics 4 and Google Tag Manager services.

In the case of using Google services, data may be transferred to a limited extent outside the European Economic Area (EEA), specifically to the USA. Google ensures an appropriate level of data protection, inter alia, by applying Standard Contractual Clauses approved by the European Commission. Google participates in the certification under the EU–US Data Privacy Framework.

5. Data Retention Period

Your data will be stored only as long as necessary:

• Data from the contact form: For the period necessary to handle the inquiry, and subsequently for the limitation period of potential claims (usually up to 3 years).
• Analytical data: Until consent for cookies is withdrawn or they are deleted from the browser, but no longer than provided for by Google Analytics settings (standard retention is up to 14 months).

6. Your Rights

In connection with the processing of your personal data, you have the following rights:

• Right of access to data.
• Right to rectification of data.
• Right to erasure of data ("right to be forgotten").
• Right to restriction of processing.
• Right to object to processing.
• Right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you consider that the processing violates GDPR regulations.

To exercise the above rights, please contact me via e-mail.

7. Cookies and Analytical Tools

The website https://gadawska.com/ uses cookies. These are small text files stored on your device.

Tools used:

• Google Tag Manager (GTM): A tool used to manage scripts on the website. It does not collect personal data itself but triggers other tags (e.g., Google Analytics).
• Google Analytics 4 (GA4): An analytical tool provided by Google. GA4 collects information about user behavior on the website to create reports and improve the service. Within GA4, IP addresses are anonymized.

Managing Cookies:

During your first visit to the website, a banner informing you about cookies is displayed. You have the option to consent to their use or reject them. You can withdraw your consent for cookies at any time by changing your browser settings or clicking on the cookie settings available on the website.

8. Server Logs

Using the website involves sending requests to the server where the website is stored. Each request is recorded in the server logs (including IP address, date and time, browser information, and operating system). This data is not associated with specific persons using the website and is used solely for administrative and technical purposes. Legal basis: Art. 6(1)(f) GDPR – legitimate interest of the controller consisting of ensuring the security and proper functioning of the website.

9. Security

I apply appropriate technical and organizational measures to ensure the protection of processed data, including an SSL certificate that encrypts the connection between your browser and my server.