Privacy policy.

1. Who is the controller of your data

This policy covers the website operating at naporastudio.com.

The controller of personal data is Radosław Napora, a sole trader operating as Napora Studio Radosław Napora, Gołuchowice 70A, 42-427 Gołuchowice, Poland, VAT ID (NIP) 6492333873.

For any matter concerning personal data, write to: naporastudio@gmail.com

2. What data I collect and why

Contact form. I collect only the data you provide yourself: your name, your email address, optionally a phone number, and the content of your message. I use it to answer your enquiry and, if it comes to that, to prepare a quote. Legal basis: Article 6(1)(b) GDPR (steps taken before entering into a contract) and Article 6(1)(f) GDPR (legitimate interest, namely contact with a person who asked for it). Providing the data is voluntary, but without an email address I have no way to reply.

Server logs. The server records standard technical information: IP address, the date and time of the request, the address of the requested page, browser type, the referring page and information about errors. This serves only to keep the site secure and running. Legal basis: Article 6(1)(f) GDPR.

Statistics and advertising. Analytics and marketing cookies are activated only after your explicit consent, given in the cookie banner. If you do not consent, no data reaches those tools. Legal basis: Article 6(1)(a) GDPR.

3. Hosting

The site is hosted on servers operated by Hostinger, which processes data under a data processing agreement concluded with me. The hosting provider keeps server-level logs, as described in point 2.

4. Who I share data with

Besides the hosting provider, your data may reach the following parties, only to the extent needed for the site to work:

Google Ireland Limited and Google LLC - Google Tag Manager, Google Analytics and Google Ads. They handle visit statistics and remarketing. Activated only after consent is given.

Meta Platforms Ireland Limited - the Facebook Pixel, used to measure the effectiveness of advertising. Activated only after consent is given.

Google LLC - the email service that receives messages sent through the contact form.

I do not sell your data and I do not share it with anyone for purposes other than those described above.

5. Transfers outside the European Union

Google and Meta tools may transfer data to servers in the United States. This happens on the basis of the European Commission's adequacy decision (the EU-U.S. Data Privacy Framework) and standard contractual clauses. If you do not consent to analytics and marketing cookies, none of your data is transferred outside the European Union.

6. How long I keep data

I keep correspondence and contact form data for as long as it takes to handle your enquiry, and if we end up working together, for the period required by tax and accounting law. Server logs are kept in line with the hosting provider's policy. Data in analytics and advertising tools is kept for the cookie lifetimes stated in the banner.

7. Error monitoring

To detect technical faults I run my own instance of GlitchTip, at glitchtip.naporastudio.com. It records information about application errors, including IP address and browser type. That data never leaves my infrastructure and is not passed to third parties. Legal basis: Article 6(1)(f) GDPR.

8. Cookies

The site uses cookies - small text files saved on your device. They fall into three categories:

Necessary. Required for the site to work and to remember your privacy settings. They cannot be switched off.

Analytics. Google Analytics (_ga, _gid, _ga_*). They show me which pages are visited. Activated only with your consent.

Marketing. Facebook Pixel (_fbp, _fbc) and Google Ads (IDE). They measure advertising effectiveness and support remarketing. Activated only with your consent.

You manage these settings in the cookie banner that appears on your first visit. You can also delete or block cookies in your browser's privacy settings - Chrome, Firefox, Safari, Edge and Opera all offer this. Blocking necessary cookies may make the site harder to use.

9. Your rights

You have the right to request access to your data, its rectification, erasure, restriction of processing and portability, and to object to processing based on legitimate interest.

You can withdraw your consent to analytics and marketing cookies at any time by changing your settings in the cookie banner. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

10. Automated decision-making

I do not make decisions about you based solely on automated processing that would produce legal effects for you. Google and Meta advertising tools may profile ad audiences, provided you have consented to them.

11. Changes to this policy

I update this policy whenever the scope of the data I process or the tools I use changes. Last updated: 11 July 2026.