Privacy policy and cookies

In this document you will find the rules for the processing of personal data and the use of cookies in connection with the use of the website karolinakara.com

The administrator of the website is Karolina Kara, who conducts business activity under the name "KAROLINA KARA", Matejki 4e/15, 72-600 Świnoujście, VAT ID: PL8551566227, REGON: 366321048.

If you have any doubts related to the privacy policy, you can contact me at any time by sending a message to the address studio@karolinakara.com

Short version - the most important information

  1. By placing an order, adding a comment, subscribing to the newsletter, or simply contacting me, you provide me with your personal data, and I guarantee you that your data will remain confidential, secure and will not be disclosed to any third parties without your express consent.
  2. I entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data.
  3. I use Google Analytics analytical tools that collect information about your visits to the site, such as the subpages you have viewed, the time you spent on the site, or the transitions between the individual subpages. For this purpose, Google LLC cookies for the Google Analytics service are used. As part of Google Analytics, I collect demographic and interest data. As part of cookie settings, you can decide whether you consent to the collection of such data about you or not.
  4. I provide the opportunity to use social features such as sharing content on social networking sites and subscribing to a social profile. Using these functions may involve the use of cookies from social networking site administrators such as Facebook, Instagram, Twitter, Google+, LinkedIn.
  5. I use my own cookies for the proper functioning of the website.

If the above information is not enough for you, below you will find further details.

Personal data

The administrator of your personal data within the meaning of the provisions on the protection of personal data is Karolina Kara, conducting business activity under the name "KAROLINA KARA", ul Matejki 4e/15, 72-600 Świnoujście, NIP: 8551566227, REGON: 366321048.

The purposes, legal basis and period of personal data processing are indicated separately in relation to each purpose of data processing (see description of individual purposes of personal data processing below).

Permissions. The GDPR grants you the following potential rights related to the processing of your personal data:

  1. the right to access personal data,
  2. the right to rectify personal data,
  3. the right to delete personal data,
  4. the right to limit the processing of personal data,
  5. the right to object to the processing of personal data,
  6. the right to transfer data,
  7. the right to lodge a complaint with a supervisory authority,
  8. the right to withdraw consent to the processing of personal data if you have given such consent.

The above-mentioned rights are not absolute and you will not be entitled to all the processing of your personal data. For your convenience, I have made an effort to indicate your rights as part of the description of individual personal data processing operations.

I would like to emphasize that you always have one of the rights indicated above - if you consider that I have violated the provisions on the protection of personal data when processing your personal data, you have the opportunity to lodge a complaint with the supervisory body (the President of the Office for Personal Data Protection).

You can always ask me to provide you with information about what data I have about you and for what purposes I process it. Just send a message to the address studio@karolinakara.com. However, I have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The e-mail address provided above can also be used if you have any questions related to the processing of your personal data.

Security. I guarantee the confidentiality of all personal data provided to me. I ensure that all security measures and personal data protection required by the provisions on personal data protection are taken. Personal data is collected with due diligence and adequately protected against access by unauthorized persons.

Data recipients. Your data may be processed by my subcontractors, i.e. entities whose services I use when processing data and providing services to you.

  1. Smarthost Sp. z o.o. ul. Partyzantów 1, 42-217 Częstochowa – to store personal data on the server,
  2. UAB “MailerLite”, Paupio st. 46, LT-11341 Vilnius, Lithuania – in order to use the MailerLite mailing system, which processes the data of newsletter subscribers,
  3. Infakt Sp. z o. o., ul. Kącik 4, 30-549 Kraków – in order to use the invoicing and accounting program, which processes the data of persons for whom an invoice is issued, visible on invoices

All entities entrusted with the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.

Purposes and processing activities

Orders. When placing an order, you must provide the data necessary to complete the order, such as your name, billing address and email address. Providing data is voluntary, but necessary to place an order.

The data provided to me in connection with the order is processed for the purpose of completing the order, issuing an invoice, including the invoice in my accounting records and for archival and statistical purposes.

Data on orders will be processed for the time necessary to complete the order, and then until the expiry of the limitation period for claims under the contract. In addition, after this deadline, the data can still be processed by me for statistical purposes. Also remember that I have an obligation to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.

Newsletter. If you want to subscribe to the newsletter, you must give me your email address via the newsletter subscription form. Providing data is voluntary, but necessary to subscribe to the newsletter.

The data provided to me when subscribing to the newsletter are used to send you the newsletter, and the legal basis for their processing is your consent expressed when subscribing to the newsletter.

The data will be processed for the duration of the newsletter, unless you unsubscribe earlier, which will delete your data from the database.

You can correct your data saved in the newsletter database at any time, as well as request their removal by unsubscribing from the newsletter. You also have the right to transfer data.

Comments. If you want to add a comment on your blog, you must complete the form and provide your email address and name. Providing data is voluntary, but necessary to add a comment.

The data will be processed for the duration of comments on the blog, unless you request removal of the comment in advance, which will delete your data from the database.

E-mail contact. By contacting me via e-mail, including sending an inquiry via the contact form, you naturally give me your e-mail address as the sender's address. In addition, you can also include other personal data in the content of the message. Providing data is voluntary, but necessary to make contact.

In this case, your data is processed in order to contact you, and the basis for processing is your consent resulting from initiating contact with me. The legal basis for post-contact processing is the legitimate purpose of archiving correspondence for internal purposes.

The content of correspondence may be archived and I cannot clearly determine when it will be deleted. You have the right to request the history of correspondence with you (if it has been archived), as well as to request its removal, unless archiving is justified due to my overriding interests, e.g. defense against potential claims on your part.

Cookies and other tracking technologies

My website, like almost all other websites, uses cookies.

Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by my ICT system (own cookies) or the ICT system of third parties (third party cookies).

Some of the cookies I use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow me to recognize your browser the next time you visit the site (persistent cookies).

See more details below.

Consent to cookies. During the first visit to the website, you are shown information on the use of cookies. Thanks to a special tool you have the ability to manage cookies from the page. In addition, you can always change your cookie settings from your browser or delete cookies at all. Browsers manage cookie settings in different ways. In the auxiliary menu of the web browser you will find explanations about changing cookie settings. Remember that disabling or limiting the use of cookies may cause difficulties in using my pages, as well as many other websites that use cookies.

Own cookies. I use my own cookies to ensure that the website works properly.

Third party cookies. My website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of this type of cookies is described below.

Google Analytics. I use Google Analytics provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. I carry out activities in this area, based on my legitimate interest, consisting of creating statistics and analyzing them in order to optimize my websites.

Google Analytics automatically collects information about your use of my site. The information collected in this way is usually transmitted to a Google server in the United States and stored there.

Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it joined the EU-US-Privacy Shield program to ensure an adequate level of protection of personal data required by European regulations. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies that have a Privacy Shield certificate.

You can prevent the collection of data collected by cookies regarding your use of my website by Google, as well as the processing of this data by Google by installing the browser plug-in located at the following address: https://tools.google.com/dlpage/gaoptout.

If you are interested in the details related to data processing within Google Analytics, I encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.

Social Tools. My websites use plugins and other social tools provided by social networking sites such as Facebook, Twitter, Instagram, Google, LinkedIN.

By displaying my website containing such a plugin, your browser will establish a direct connection to the servers of the administrators of social networking sites (service providers). The content of the plugin is transmitted by the respective service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has viewed my website, even if you do not have a profile with a given service provider or are not currently logged in to it. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to my site to your profile on the given social networking site.

If you use a given plug-in, e.g. by clicking on the "Like" or "Share" button, the relevant information will also be sent directly to the server of the given service provider and stored there.

In addition, this information will be published on the respective social network and will appear to people added as your contacts. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the possibility of making settings to protect your privacy are described in the privacy policy of individual service providers.

If you do not want social networking sites to match the data collected during visits to my website directly to your profile on a given website, then before visiting my website you must log out of this website. You can also completely prevent the plugins from loading on the page by using the appropriate extensions for your browser, e.g. script blocking.

Server logs

Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server's logs.

Logs include, among others Your IP address, server date and time, information about the web browser and operating system you are using. Logs are saved and stored on the server.

The data saved in the server logs are not associated with specific people using the site and are not used by me to identify you.

Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except persons authorized to administer the server.