§1. General Provisions

This Privacy and Cookies Policy describes the rules for processing personal data and the use of cookies and other technologies when using the website monikaseroka.com, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§2. Definitions

The controller of personal data is Monika Seroka, email: hello@monikaseroka.com. "Website" means the internet service available at monikaseroka.com. "User" means any person using the Website. "Terminal device" means the device used by the User to access the Website, such as a computer, smartphone, or tablet.

§3. Scope, Purposes, and Legal Basis for Processing

Personal data is processed for the purpose of handling inquiries submitted via the contact form or by email. The provision of data is voluntary but necessary to provide a response or conduct further correspondence. The legal basis for processing is Article 6(1)(b) of the GDPR, and in the scope of legal obligations, Article 6(1)(c) of the GDPR. We process data voluntarily provided by the User, such as name, surname, email address, phone number, and the content of correspondence. Technical data, such as IP address or browser type, may also be collected. When using the Website, the server automatically saves information sent by the browser, such as the IP address, browser type, operating system, or connection time. This data is used for server administration, ensuring security and optimizing the Website's operation, and is not associated with specific individuals.

For the purpose of analysing website traffic and optimising its operation, we use Google Analytics 4 (GA4), which collects anonymous and pseudonymised information about User activity, such as visited subpages, time spent on the website, entry source, or device type. The legal basis for processing this data is the User's consent (Article 6(1)(a) of the GDPR), expressed by accepting analytical cookies.

§4. Recipients and Data Transfer

Data may be transferred to the email software provider, hosting provider, and relevant public authorities if required by applicable law. The use of Google Analytics 4 (GA4), Google Fonts, Google Maps, and Google reCAPTCHA services, as described in detail in §5, may involve the transfer of data, such as the IP address, to third countries. Google applies safeguards compliant with the GDPR, including standard contractual clauses.

§5. Cookies and External Services

The Website uses cookies necessary for its proper operation and – after obtaining the User's consent – analytical cookies used by Google Analytics 4 (GA4) to create statistics and analyses that help improve the website's functionality. These files may collect, among other things, information about how the Website is used, visited subpages, time spent on the site, device type, browser, approximate location, and IP address (shortened/anonymised before saving). Data collected by GA4 is not combined by the Controller with other information that could directly identify the User. You can withdraw your consent to analytical cookies at any time using your browser settings or the cookie management panel on the Website.

The Website also uses the Google Maps service, which enables the display of maps and may process the user's IP address, the Google Fonts service, which ensures the correct display of content and fonts, also by processing the IP address, and the Google reCAPTCHA service, which is used to protect the contact form from spam and abuse. This mechanism may analyse user behaviour (e.g. mouse movements, IP address, time spent on the page, browser data) to assess whether the user is human. This data is transferred to Google and processed in accordance with Google's Privacy Policy and the reCAPTCHA Terms of Service. The legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), which consists of ensuring website security and protection against automated abuse.

Details regarding data processing by Google are available in the Google Privacy Policy, Google Fonts Terms of Service, Google Maps Terms of Service, and reCAPTCHA Terms of Service.

§6. Retention Period and User Rights

Data is processed for the period necessary to fulfil the purpose for which it was collected, and then deleted or anonymised, unless legal provisions require a longer retention period. The data subject has the right to access their data, rectify it, request its erasure, restrict its processing, transfer it, object to its processing, and file a complaint with the President of the Personal Data Protection Office. In the case of data processing based on consent, the right to withdraw it at any time exists without affecting the lawfulness of processing carried out before the withdrawal of consent. The provision of data is voluntary but necessary for the fulfilment of the purposes mentioned above.

§7. Final Provisions

In matters not regulated by this Policy, the provisions of the GDPR and other relevant legal provisions shall apply. This Policy applies only to the Website monikaseroka.com. Links leading to other websites, including those placed in the form of social media buttons, are subject to the privacy principles established by their owners. Questions related to this Privacy Policy should be directed to: hello@monikaseroka.com