Documents
Privacy policy
How I look after your data: what I process, when I switch on Google Analytics and what rights you have. If you have any questions, write to me.
01 Data controller
- The controller of your personal data is Adriana Bękalska, a makeup artist from Giżycko (hereinafter: the Controller).
- For matters relating to personal data, you can write to adrianabekalska@gmail.com or call +48 539 684 566.
- This policy covers the website, contact regarding makeup, booking dates and providing services.
02 What data I process and why
- Enquiries and contact (form, email, phone, text message, Instagram): name, contact details, date, place, type of makeup, number of people and the content of your message. I process this data to reply to your enquiry and prepare a quote (Article 6(1)(b) GDPR, steps taken before entering into a contract, and Article 6(1)(f) GDPR, conducting correspondence).
- The form on the website does not send data to any server. It prepares a message in your email or text messaging app, and the data reaches me only when you send it yourself.
- Booking and providing the service: data from the enquiry and data needed to settle payment for the service (if you pay by bank transfer: name, account number, amount and transfer title). I process this data to book the date and provide the service (Article 6(1)(b) GDPR) and to comply with legal obligations, for example tax obligations (Article 6(1)(c) GDPR).
- Information about allergies, sensitivity or skin conditions that you share before the makeup is used only to provide the service safely, on the basis of your explicit consent (Article 9(2)(a) GDPR).
- I publish photos of the makeup in my portfolio and on social media only with the consent of the person shown (Article 6(1)(a) GDPR). You can withdraw your consent at any time.
- I collect website visit statistics (Google Analytics) only if you consent to this in the cookie banner (Article 6(1)(a) GDPR and the provisions of the Polish Electronic Communications Law). They also include information about clicks on the phone number or email address and about forms sent (only the sending method and the type of makeup, without the content of the message or the data entered in the form).
- I may also process data where necessary to establish, pursue or defend legal claims (Article 6(1)(f) GDPR).
03 Cookies and similar technologies
- The website does not use advertising cookies and does not track you on other websites.
- Necessary: I store your choice from the cookie banner in your browser’s storage (localStorage, key “ab-consent”), so that you are not asked for consent on every visit. Your choice is valid for 12 months, after which the banner appears again.
- Analytics, only with your consent: Google Analytics 4 stores the cookies “_ga” and “_ga_…” (valid for up to 2 years), which make it possible to recognise repeat visits and prepare aggregate statistics, for example the number of visits, the most viewed pages and the number of clicks on the phone number and email address and of forms sent. Google Analytics 4 does not store IP addresses.
- You can change or withdraw your consent at any time using the “Cookie settings” button in the footer of the website. When you withdraw consent, Google Analytics cookies are deleted. You can also delete or block cookies in your browser settings.
04 Who I share data with
- Vercel Inc., which hosts the website on its servers. On every visit, the server records technical information such as the IP address, the date and time and the browser type, to keep the website running and secure (Article 6(1)(f) GDPR).
- Google Ireland Limited and Google LLC: Google Analytics (only with your consent) and the email service I use for correspondence.
- Telecommunications operators, if you contact me by phone or text message, and my bank, if you pay for the service by bank transfer.
- Meta Platforms Ireland Limited, if you write to me on Instagram. In that case Meta is a separate controller in accordance with its own privacy policy.
- Public authorities, if the obligation to share data arises from the law.
05 Transfers outside the European Economic Area
- Vercel and Google may also process data in the United States. This takes place on the basis of a European Commission decision finding an adequate level of data protection (EU-U.S. Data Privacy Framework) or of standard contractual clauses approved by the European Commission.
06 How long I keep data
- Correspondence and enquiry data: for as long as needed to reply and, if no booking follows, no longer than 12 months from the last contact.
- Data related to the booking and the service: for the duration of the service and then until the limitation periods for claims expire. I keep accounting documents for the period required by law.
- Portfolio photos: until consent is withdrawn. Google Analytics data: for the period set in Google Analytics, no longer than 14 months. Your cookie banner choice: 12 months.
07 Your rights
- You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability and to object to processing based on legitimate interest.
- If processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.
- To exercise your rights, write to adrianabekalska@gmail.com.
- You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe that your data is being processed unlawfully.
08 Providing data is voluntary
- Providing data is voluntary, but without it I cannot reply to your enquiry, prepare a quote or book a date.
- I do not make automated decisions and do not profile website visitors.
09 Changes to the privacy policy
- The current version of the privacy policy is always available on this page. I will announce any significant changes on the website.
- This privacy policy applies from 2 October 2026.
- This English version is a translation provided for convenience. In the event of any discrepancy, the Polish version prevails.