Privacy policy

Data controller

The controller of your personal data is Natalia Guz, the author of nataliaguz.pl. For any matter concerning your data, write to the e-mail address above.

What I collect and why

Commission form: your name, e-mail address, phone number (if you give it), preferred contact channel, a description of your idea and a reference photo if you attach one. I use them solely to answer your enquiry, prepare a quote and agree the details of the commission (Art. 6(1)(b) GDPR - steps prior to entering into a contract).

I keep the correspondence for the duration of the conversation and the commission, and for up to 3 years afterwards in case of claims (Art. 6(1)(f) GDPR).

Cookies and visit statistics

The site sets no statistics cookies until you agree in the banner. After consent I run Google Analytics 4 (Google Ireland Ltd.), which counts visits, traffic sources and button clicks, and Microsoft Clarity (Microsoft Ireland Operations Ltd.), which shows anonymous click maps and session recordings without personal data. The data serve statistics and measuring where visitors come from only (Art. 6(1)(a) GDPR).

You can change your choice at any time with the “Cookie settings” button in the footer. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Regardless of consent, the form may be protected by Cloudflare Turnstile, which checks that a human is sending it. It is not used for tracking.

Who processes the data

Only the companies that run the site have access to the data: Netlify (hosting), Resend (delivering form messages to my mailbox), Google (statistics and mailbox), Microsoft (Clarity) and Cloudflare (form protection). Some of them operate outside the European Economic Area; transfers rely on the European Commission’s standard contractual clauses.

I do not sell data and never pass it on for marketing purposes.

Reference photos and likeness

By sending a photo for a portrait you confirm that you are entitled to use it and that the people in it agree to its use. The photo serves only for the quote and the painting; I do not publish it without separate consent.

Your rights

You have the right to access your data, to rectify or erase it, to restrict processing, to data portability and to object to processing. An e-mail is enough. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

Changes to this policy

If the tools or the scope of collected data change, I will update this page and the date at the top.