Privacy Policy

This page is placeholder privacy content, drafted so a GDPR-shaped policy exists in writing. It has not been reviewed by a lawyer and must not be treated as final until the Operator's legal counsel signs off.

1. Data controller

The data controller is the Operator of the perorowisko studio in the Stara Ochota district of Warsaw.

2. What we collect

When you book a session, we collect: your name, email address, and phone number, plus — for paid sessions — the information needed to process payment (handled by a third-party payment processor, which does not pass full card details back to the Operator).

3. Why we collect it

Data is processed to: fulfil your booking and session, contact you about your booking (including reminders and changes), process payment, and meet the Operator's accounting and tax obligations.

4. Legal basis

Processing is based on the performance of a contract with you (Article 6(1)(b) GDPR) and, for tax-related matters, on the Operator's legal obligation (Article 6(1)(c) GDPR).

5. Who we share it with

Data may be shared with payment processors and, where legally required, tax authorities. The Operator does not sell personal data to third parties.

6. How long we keep it

Booking-related data is kept for as long as needed to settle the session, and for the period required by tax and accounting obligations (typically 5 years from the end of the relevant tax year).

7. Your rights

You have the right to access, correct, delete, or restrict processing of your data, to data portability, to object to processing, and to lodge a complaint with Poland's data protection authority (Prezes Urzędu Ochrony Danych Osobowych).

8. Contact

For questions about your personal data, contact the Operator using the contact details provided in the booking system.