Skip to main content

Privacy Policy / Datenschutzerklärung

1. Introduction

This privacy policy explains how we collect, use, and protect your personal data when you visit this website. We are committed to ensuring your privacy is protected in accordance with the General Data Protection Regulation (GDPR / DSGVO) and applicable Polish data protection law (RODO).

2. Data Controller

The data controller responsible for processing your personal data is:

Aleksandra Kowalska
Kraków, Poland
Email: hello@aleksandrakowalska.com

3. Data We Collect

We collect and process the following categories of personal data:

  • Contact form: Project type, preferred dates, location, optional budget, and message content you provide when making an enquiry.
  • Analytics: Anonymized usage data via Google Analytics 4 — collected only after you have given your explicit consent.
  • Server logs: IP address, browser type, referring URL, and pages visited — retained as standard server access logs for security and performance monitoring purposes.

4. Legal Basis (Art. 6 GDPR)

We process your personal data on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR) — for optional analytics cookies and tracking. You may withdraw this consent at any time via the cookie settings banner.
  • Legitimate interest (Art. 6(1)(f) GDPR) — for responding to enquiries submitted through the contact form and for maintaining security of the website.
  • Contract performance (Art. 6(1)(b) GDPR) — for booking-related communications where a contract for services has been entered into or is being negotiated.

5. Google Analytics 4

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

GA4 is used for anonymous traffic analysis to help us understand how visitors interact with this website. GA4 loads only after you have given your consent via the cookie banner. IP addresses are anonymized prior to any processing.

You can opt out of Google Analytics tracking at any time by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

6. reCAPTCHA

Our contact form is protected by Google reCAPTCHA v3 to prevent automated spam submissions. reCAPTCHA is operated by Google LLC and collects hardware and software information (e.g. device and application data) and sends it to Google for analysis. This data processing is subject to the Google Privacy Policy. The legal basis is our legitimate interest in protecting this website from abusive automated access (Art. 6(1)(f) GDPR).

7. Cookies

This website uses the following categories of cookies:

  • Necessary session cookies — required for the website to function correctly. No consent is required for these cookies.
  • Analytics cookies (Google Analytics 4) — used to collect anonymized usage statistics. These cookies are only set after you have given your explicit consent via the cookie banner.

Your cookie consent preference is stored in your browser's localStorage. You may change your preference at any time by clicking the cookie settings link in the footer.

8. Your Rights (Art. 15–22 GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR) — You have the right to request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR) — You have the right to request correction of inaccurate personal data.
  • Right to erasure (Art. 17 GDPR) — You have the right to request deletion of your personal data under certain conditions.
  • Right to restriction of processing (Art. 18 GDPR) — You have the right to request that we restrict the processing of your personal data.
  • Right to data portability (Art. 20 GDPR) — You have the right to receive your personal data in a structured, commonly used format.
  • Right to object (Art. 21 GDPR) — You have the right to object to the processing of your personal data based on legitimate interests.

To exercise any of these rights, please contact us at: hello@aleksandrakowalska.com

You also have the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw.

9. Data Retention

We retain your personal data only for as long as necessary:

  • Contact form data: Deleted after 12 months unless ongoing correspondence or a contractual relationship requires longer retention.
  • Analytics data: Retained per Google's data retention policy, which defaults to 14 months.
  • Server logs: Retained for up to 30 days for security monitoring, then automatically deleted.

10. International Transfers

Some of the third-party services used on this website (including Google Analytics and Google reCAPTCHA) may process personal data outside the European Union or European Economic Area. Where such transfers occur, they are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, as provided for under Art. 46(2)(c) GDPR. Google LLC participates in the EU–U.S. Data Privacy Framework.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. Any significant changes will be communicated via a notice on this website. We encourage you to review this policy periodically.

Last updated: March 2026

Privacy Policy — Aleksandra Kowalska | Aleksandra Kowalska — Film Makeup Artist