Edyta Środa

01 · Controller

Who is responsible for the data?

The controller of personal data connected with the operation of this website is Edyta Środa. For matters concerning privacy and data processing, you can write to kontakt@edytasroda.pl.

This policy applies to visitors to the website and to people who contact Edyta about a concert, recording, project, artistic tutoring or another form of collaboration.

02 · Scope of data

What information may be processed?

Correspondence may contain a first name and surname, email address, telephone number, the name of an institution and other information voluntarily provided in the message. If an enquiry concerns an artistic consultation, this may also include scores, recordings or a description of musical work sent by the correspondent. Providing data is voluntary, but without contact details it will not be possible to reply, and without the data needed to prepare or perform a contract it may not be possible to begin or carry out the collaboration.

The server hosting the website may automatically record standard technical data such as the IP address, date and time of the connection, browser type, operating system and the requested website address. This data is used for security, diagnostics and the proper operation of the website.

03 · Purpose and legal basis

Why is the data used?

• to reply to a message and continue correspondence;
• to prepare an offer, agree a collaboration or take steps before entering into a contract;
• to perform a concluded contract and the obligations arising from it;
• to ensure the security of the website and to establish, pursue or defend possible claims;
• to fulfil obligations arising from the law, particularly tax and accounting obligations.

The respective legal bases for processing are: taking steps at the request of the data subject prior to entering into a contract or the performance of a contract, the controller’s legitimate interests and a legal obligation — in accordance with Article 6(1)(b), (f) and (c) of the GDPR.

04 · Retention period

How long does the data remain necessary?

Data from correspondence is retained for as long as necessary to reply, conduct discussions and carry out the agreed collaboration. It may subsequently be retained for the period required by law or necessary for protection against claims.

Technical server logs are retained for the period resulting from the hosting provider’s settings and security policies. Data that is no longer necessary and is not subject to a further retention obligation is deleted.

05 · Recipients

Who may have access to the data?

Access may be granted only to entities necessary for handling the website and correspondence, in particular providers of hosting, email and IT support, and, when performing a contract, also accounting or legal services. Data may be disclosed to public authorities if required by law.

The data is not sold, used for advertising profiling or automated decision-making, or transferred to other entities for marketing purposes.

06 · Cookies and external services

The current version of the website does not require a cookie banner

The website does not currently use analytics, advertising, tracking pixels or other cookies that require consent. An ordinary link to an external service does not activate that service’s tools on this website; the external service’s rules begin to apply only after the user follows the link to the external address.

If embedded YouTube players, visitor statistics, a form or other external tools are introduced in the future, the policy will be supplemented before they are launched, and a consent mechanism will be added if required.