Privacy policy

This Privacy Policy sets out the rules governing the processing of personal data and the use of cookies and similar technologies in connection with the use of the Lada Moment Studio website.

1. Data Controller

The controller of personal data is:

Lada Moment Studio
Piotr Pawlak
ul. Sąsiedzka 74A/27
93-330 Łódź
Poland

Tax ID (NIP): 7712759937
REGON: 361889577

Phone: 609 064 849
E-mail: info@ladamoment.com

For matters related to personal data protection, you may contact the Controller using the e-mail address, telephone number or postal address indicated above.

2. What Data May Be Processed

In connection with the use of the website, the following data may be processed in particular:

  • data voluntarily provided through the contact form,
  • first name and surname,
  • e-mail address,
  • telephone number,
  • content of the submitted message,
  • IP address,
  • data concerning the device, browser and operating system,
  • data concerning the manner in which the website is used,
  • information about pages visited,
  • information about the source of traffic,
  • date and time of the visit,
  • information about interactions with the website,
  • online identifiers,
  • cookie identifiers and identifiers used by similar technologies,
  • data concerning reactions to advertisements and campaign effectiveness,
  • other technical data generated while using the website.

The actual scope of data processed depends on how the website is used, which functionalities are used and which consents have been granted by the user.

3. Purposes and Legal Bases for Data Processing

Personal data may be processed for the following purposes:

Handling enquiries and the contact form

Data provided through the contact form, by e-mail or by telephone may be used for the purpose of:

  • responding to enquiries,
  • preparing and presenting an offer,
  • conducting correspondence,
  • taking steps prior to entering into a contract,
  • entering into and performing a contract.

The legal basis for processing may be Article 6(1)(b) of the GDPR – taking steps prior to entering into a contract or performing a contract – or Article 6(1)(f) of the GDPR – the Controller’s legitimate interest in conducting communication and handling enquiries.

Ensuring proper and secure operation of the website

Technical data may be processed for the purpose of:

  • ensuring the proper functioning of the website,
  • maintaining security,
  • diagnosing errors,
  • preventing abuse and attacks,
  • making backups,
  • administering the website.

The legal basis is the Controller’s legitimate interest pursuant to Article 6(1)(f) of the GDPR.

Analytics and statistics

After obtaining the appropriate consent, data may be used for:

  • analysing how the website is used,
  • creating statistics,
  • measuring the number of users and visits,
  • determining traffic sources,
  • analysing the effectiveness of individual pages and content,
  • improving the functionality and usability of the website.

Advertising and marketing

After obtaining the required consent, data may be used for:

  • measuring advertising effectiveness,
  • conversion tracking,
  • running advertising campaigns,
  • remarketing,
  • creating audience groups,
  • tailoring marketing communications,
  • personalising advertisements, where the user has consented to this,
  • analysing the effectiveness of marketing activities across different channels.

4. Contact Form

The website allows users to send messages via a contact form.

Providing data is voluntary. However, failure to provide data enabling contact may make it impossible for the Controller to respond.

Data provided in the form will only be used to the extent necessary to handle the enquiry, prepare an offer, maintain further contact, or carry out activities related to entering into or performing a contract.

The data may also be processed by technical service providers used by the Controller, such as hosting providers, e-mail service providers, form system providers or IT service providers.

5. Cookies and Similar Technologies

The website uses or may use cookies and other technologies that enable information to be stored on or accessed from the user’s device.

These technologies may be used in particular for:

  • ensuring the operation of the website,
  • maintaining security,
  • remembering user settings,
  • conducting statistics and analytics,
  • analysing how the website is used,
  • measuring the effectiveness of advertising campaigns,
  • carrying out marketing and remarketing activities,
  • tailoring advertisements and content.

6. Types of Cookies Used

Necessary cookies

Necessary cookies are required for the proper functioning of the website, ensuring its security or providing functionalities requested by the user.

Functional cookies

These may allow certain user settings and preferences to be remembered.

Analytics cookies

These enable analysis of how the website is used and the creation of statistics that help improve the website.

Advertising and marketing cookies

These may be used, among other things, to measure advertising effectiveness, attribute conversions, conduct remarketing, create audience groups and personalise advertisements.

Cookies and similar technologies that are not necessary for the proper functioning of the website are used in accordance with the choices made by the user in the consent management mechanism.

7. Consent Management

When visiting the website for the first time, the user may be asked to specify their preferences regarding the use of cookies and similar technologies.

The user may in particular:

  • accept all categories,
  • reject technologies that are not necessary,
  • select individual categories.

Refusal to consent to analytics or marketing cookies should not prevent the use of the website’s basic functions.

The user may change their preferences or withdraw previously granted consent at any time using the consent management mechanism available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

8. External Service and Technology Providers

The Controller uses or may in the future use services provided by external technology providers that are necessary for operating, securing, analysing, developing and promoting the website and the Controller’s business.

Data related to the use of the website may, to the extent resulting from the configuration of particular services and the user’s consents, be transferred or made available, among others, to:

  • hosting and server service providers,
  • e-mail service providers,
  • IT infrastructure providers,
  • contact form system providers,
  • entities providing website administration and technical support services,
  • analytics and statistics service providers,
  • advertising technology providers,
  • advertising platform operators,
  • providers of conversion measurement tools,
  • remarketing service providers,
  • social media platform operators,
  • providers of tools used to manage consents and cookies,
  • providers of security, anti-spam and anti-abuse services,
  • entities providing legal, accounting or IT services.

Such providers may include entities offering services under the brands Google, Meta (Facebook and Instagram) and other providers of online, analytics, advertising and marketing technologies used by the Controller.

The scope of data transferred to individual providers depends on the type of service, its configuration and the user’s decisions regarding cookies and similar technologies.

The Controller does not transfer data to external providers to a broader extent than necessary to achieve the relevant purposes, taking into account the operation of individual services and technologies.

9. Analytics, Advertising and Social Media Tools

The website may use solutions provided by external suppliers for purposes including:

  • creating statistics,
  • analysing website traffic,
  • analysing user behaviour,
  • determining traffic sources,
  • measuring conversions,
  • running advertising campaigns,
  • remarketing,
  • creating audience groups,
  • integration with social media,
  • measuring the effectiveness of promotional activities.

These may include technologies offered by Google, Meta and other providers of analytics, advertising, social media and marketing services.

Where the use of a given technology requires the user’s consent, it will be activated in accordance with the preferences selected by the user.

Depending on the nature of the service used, external providers may act as processors acting on behalf of the Controller, independent data controllers or, where this results from the nature of a specific service, joint controllers.

The rules governing the processing of data by a particular provider may additionally be set out in that provider’s own privacy policy and terms of service.

10. Social Media

The Controller may operate profiles on social media platforms, including Facebook, Instagram and other services.

Where the user contacts the Controller through such platforms, the user’s data may also be processed by the operator of the relevant platform in accordance with that operator’s rules.

The website may also contain links, embedded elements, pixels, tags or other technologies originating from social media platforms.

Where such technologies are used for analytics or marketing purposes and require consent, they will be used in accordance with the user’s cookie preferences.

11. Transfers of Data Outside the European Economic Area

Some service providers used by the Controller may have registered offices, servers or infrastructure located outside the European Economic Area.

As a result, data may be transferred to third countries.

In such cases, data transfers are carried out in accordance with the requirements of the GDPR, in particular on the basis of:

  • a European Commission adequacy decision,
  • appropriate mechanisms provided for under European Union law,
  • Standard Contractual Clauses,
  • other legally permitted safeguards.

The scope and legal basis of the transfer depend on the particular provider and the legal mechanisms currently in force.

12. Server Logs

When using the website, information about certain events may be automatically recorded in server logs.

This may include in particular:

  • IP address,
  • date and time of connection,
  • address of the requested resource,
  • information about the browser,
  • information about the operating system,
  • information concerning errors.

Logs are used primarily for website administration, maintaining security, diagnosing errors and preventing abuse.

13. Data Retention Period

Data is stored for a period appropriate to the purpose for which it was collected.

In particular:

  • data related to an enquiry – for the period necessary to handle the enquiry and for the time required to protect against potential claims,
  • data related to a contract – for the duration of the contract and for the period required by law or connected with limitation periods for claims,
  • data processed on the basis of consent – until consent is withdrawn or the purpose of processing ends earlier,
  • technical data – for a period justified by security and website administration requirements,
  • data related to cookies and technologies of external providers – for the period resulting from the settings of a given technology and the preferences selected by the user.

Individual external providers may apply their own data retention periods in accordance with the rules governing their services.

14. Rights of the Data Subject

To the extent provided for by applicable law, a data subject has the right to:

  • access their data,
  • obtain a copy of their data,
  • rectify their data,
  • erase their data,
  • restrict processing,
  • data portability,
  • object to processing,
  • withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

To exercise these rights, please contact the Controller at:

info@ladamoment.com

15. Right to Lodge a Complaint

If a user believes that their data is being processed unlawfully, they have the right to lodge a complaint with the competent supervisory authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

16. Profiling

In connection with the use of analytics, marketing and advertising tools, user data may be used to create audience groups, analyse interests or tailor advertisements.

Such activities may be carried out by the Controller or by external technology providers, depending on the nature of the service used.

Where profiling requires the user’s consent, it will be carried out only in accordance with the consent granted.

The Controller does not make decisions concerning users that produce legal effects or similarly significantly affect them solely by automated means, unless the Controller clearly informs users of such processing in the future in accordance with applicable law.

17. Security

The Controller applies technical and organisational measures appropriate to the nature of the data processed and the associated risks.

The website uses or should use, among other things, encrypted HTTPS connections, up-to-date software and mechanisms protecting access to IT systems.

18. Changes to Services Used

The scope of tools and external providers used on the website may change as the website and the Controller’s business develop.

The Controller may implement new technical, analytics, advertising, marketing, social media or security-related solutions, provided that they are used in accordance with applicable law and, where required, after obtaining the appropriate user consent.

In the event of a material change in the manner in which personal data is processed, this Privacy Policy will be updated accordingly.

19. Links to Other Services

The website may contain links to websites and services operated by other entities.

Once the user leaves the website and visits an external service, the rules governing data processing are determined by the owner or operator of that external service.

The Controller is not responsible for the privacy policies or practices of independent third-party services.

20. Changes to the Privacy Policy

The Controller may periodically update this Privacy Policy, in particular in the event of changes to:

  • applicable law,
  • the way the website operates,
  • tools used,
  • external service providers,
  • the scope of services provided,
  • methods of processing personal data.

The current version of the Privacy Policy is published on the Lada Moment Studio website.