Privacy Policy

1. Data Controller

The Data Controller is Klaudia Miszke, operating under the trade name Vimble Studio, providing web design and development services.

Controller contact details:

• •Email: kontakt@vimblestudio.pl
• •Correspondence address: Zygfryda Kupki 20, 41-800 Zabrze, Poland

2. Scope of Data Collected

2.1 Data provided voluntarily by the user

The only point of personal data collection is the contact form available on the website. We collect exclusively the data that users provide themselves:

2.2 Data collected automatically by the server

The hosting infrastructure (Vercel Inc.) automatically records the following technical data in server logs:

• •IP address of the user's device
• •Date and time of the request
• •Browser type and operating system

This data is collected and stored by Vercel Inc. solely for technical and infrastructure security purposes. The Controller does not process this data for analytical or marketing purposes.

3. Purposes and Legal Bases for Processing

Personal data is processed solely for the following purposes:

Data is not processed for marketing or profiling purposes and is not shared with third parties beyond the cases described in §5.

4. Data Retention Period

Personal data is retained for the period necessary to fulfil the purposes for which it was collected:

• •Enquiries without established cooperation — up to 12 months from the last contact
• •Data related to a concluded agreement — for the duration of the agreement and until the expiry of the limitation period for claims (up to 3 years from the end of cooperation)
• •Upon request for deletion — immediately, no later than 30 days from receipt of the request

Upon expiry of the indicated periods, data is permanently deleted from the Controller's mailbox and all storage media.

5. Recipients of Data — Data Processors

In connection with the technical operation of the website and email communication, data may be processed by the following entities:

Both providers operate under concluded data processing agreements and apply security measures compliant with GDPR. Data is not shared with any other third parties, advertising networks, or data brokers.

6. Rights of the Data Subject

Under the GDPR Regulation (2016/679), you have the following rights:

• •Right of access — you may request information about what personal data we process
• •Right to rectification — you may request correction of inaccurate data
• •Right to erasure — you may request permanent deletion of your data ("right to be forgotten")
• •Right to restriction of processing — you may request a suspension of data processing
• •Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal
• •Right to lodge a complaint — with the President of the Personal Data Protection Office (Poland: uodo.gov.pl) or the supervisory authority in your country of residence

To exercise any of the above rights, please contact us at: kontakt@vimblestudio.pl. A response will be provided without undue delay, within 30 days of receiving the request.

7. Data Security

The Controller implements appropriate technical and organisational measures to protect personal data:

• •Encrypted HTTPS/TLS connection on the website
• •Mailbox access secured with a password and two-factor authentication (2FA)
• •Access to data is held exclusively by the Controller
• •Regular security monitoring of infrastructure by Vercel and OVH

8. Changes to the Privacy Policy

The Controller reserves the right to update this Privacy Policy in the event of changes in applicable law or data processing practices. Users will be notified of any significant changes by updating the date in the document header. We recommend reviewing this Policy periodically.