Privacy Policy
1. Who controls your data
The controller of your personal data is Sebastian Śliwiński, running the interior design practice Sebastian Śliwiński Studio, based in Warsaw, Poland (the “Studio”, “we”). For any matter concerning personal data write to kontakt@sssliwinski.com or call +48 669 353 007. We have not appointed a data protection officer.
This policy explains what data we collect through sssliwinski.com, through contact forms in our Facebook and Instagram ads, and during design projects; why we collect it; who we share it with; and what rights you have. It is based on the GDPR (Regulation 2016/679) and Polish data protection and electronic communications law.
2. Where your data comes from
- Website contact form — name, e-mail address, subject and message.
- Contact forms in Facebook and Instagram ads (Meta instant forms) — full name, phone number, e-mail address and your answers about the planned project (type of interior, floor area, timing, location).
- E-mail, phone, social media messages — whatever you share with us in correspondence.
- Design projects — data needed for a quote, contract, design documentation and invoicing (e.g. property address, billing details).
- Cookies and similar technologies — information about how you use the website (section 8).
3. Why we process data and on what legal basis
| Purpose | Legal basis (Art. 6(1) GDPR) | Retention |
|---|---|---|
| Answering your enquiry, free consultation, preparing a quote | (b) steps prior to a contract at your request; (f) our legitimate interest in handling correspondence | up to 12 months after the last contact if no project follows |
| Contacting you by phone or e-mail about a request submitted through a Facebook or Instagram ad | (a) your consent given in the form (also required by Polish electronic communications law) | until you withdraw consent, no longer than 12 months after submission |
| Concluding and performing a contract for interior design, author’s supervision or 3D visualisation | (b) performance of a contract | duration of the contract |
| Invoicing, tax and accounting obligations | (c) legal obligation | 5 years from the end of the tax year in which the document was issued |
| Establishing, exercising or defending legal claims | (f) our legitimate interest | until limitation periods expire (as a rule 6 years after the project ends) |
| News about the Studio’s services (newsletter) — only with your separate consent | (a) consent | until consent is withdrawn |
| Website statistics and measuring ad performance | (a) cookie consent given in the banner | see section 8 |
| Showing completed projects in our portfolio (interior photographs) | (a) consent or contractual terms | until consent is withdrawn or as agreed in the contract |
4. Contact forms on Facebook and Instagram
We run ads on Meta platforms (Facebook, Instagram) in which you can leave your details in an instant form to book a free consultation or receive a quote. The form is pre-filled with data from your Meta profile — you can edit it before submitting. Submitted data is delivered to us (to our mailbox and lead spreadsheet) and is also stored by Meta for 90 days after submission. We use it only for the purpose you submitted it for: to call or write back, arrange a consultation and prepare a quote. We do not pass it to other companies for marketing purposes.
How Meta Platforms Ireland Ltd. processes data is described in Meta’s Privacy Policy. You can withdraw your consent to be contacted at any time by writing to kontakt@sssliwinski.com.
5. Who we share data with
We use providers who process data on our behalf under data processing agreements or GDPR-compliant terms:
- zenbox sp. z o.o. (Poland) — website and e-mail hosting;
- Meta Platforms Ireland Ltd. (Ireland) — Facebook, Instagram, instant forms and the Meta Pixel; data may be transferred to the USA under the European Commission’s EU-U.S. Data Privacy Framework decision;
- Google Ireland Ltd. (Ireland) — Google Analytics, Google Search Console, Google mail and spreadsheets, Google Fonts; data may be transferred to the USA under the EU-U.S. Data Privacy Framework;
- CookieYes Ltd. (United Kingdom — covered by an adequacy decision) — cookie consent management;
- Celonis s.r.o. — Make.com (Czech Republic) — automatic delivery of Meta form submissions to our mailbox and spreadsheet;
- our accounting office and providers of design software and document-signing tools — to the extent needed for contracts and invoicing.
Data may be disclosed to public authorities (e.g. tax authorities) only where required by law. We do not sell personal data.
6. Your rights
You have the right to: access your data and obtain a copy; rectification; erasure; restriction of processing; data portability (where processing is based on consent or a contract); object to processing based on our legitimate interest, including direct marketing; withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights write to kontakt@sssliwinski.com. We reply within one month at the latest. If you believe we process your data unlawfully, you can lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your country.
7. Is providing data mandatory
Providing data is voluntary, but without it we cannot answer your enquiry, arrange a consultation or conclude a contract. Billing details are required by tax law.
8. Cookies and similar technologies
The website uses cookies and similar technologies. On your first visit a banner lets you accept or reject all categories other than strictly necessary; you can change your choice at any time using the cookie settings button displayed by the banner. Non-essential cookies are set only after your consent.
| Category | Purpose | Examples | Duration |
|---|---|---|---|
| Strictly necessary | Website operation, remembering your language version and your cookie choice | pll_language, cookieyes-consent | up to 12 months |
| Analytics (with consent) | Visit statistics: which pages are viewed and where visitors come from — Google Analytics 4 | _ga, _ga_* | up to 2 years |
| Marketing (with consent) | Measuring ad performance and showing the Studio’s ads on Facebook and Instagram to people who visited the website — Meta Pixel | _fbp, _fbc | up to 90 days |
You can also block or delete cookies in your browser settings. Personalised ads can be managed in your Meta ad preferences, and Google Analytics can be disabled with the browser add-on.
9. Our social media profiles
We run profiles on Facebook, Instagram, Behance and LinkedIn. When you follow a profile, react to content or message us, we process your public profile data and the content of your message in order to reply and run the profile (basis: our legitimate interest). Statistics for Facebook and Instagram profiles are generated by Meta as a joint controller — see Meta’s Page Insights addendum.
10. Automated decisions and profiling
We do not make decisions about you based solely on automated processing that would produce legal effects. Ads on Meta and Google platforms are targeted to audiences based on those tools’ settings and only to the extent you consented to in the cookie banner.
11. Security
The website runs over an encrypted connection (HTTPS). Only people who need to process data have access to it, using individual accounts and two-factor authentication. We make regular backups.
12. Changes to this policy
We may update this policy when the law or the tools we use change. The current version is always available on this page and the effective date is shown at the top.