Privacy policy

1. Data controller

The controller of your personal data is Dubel Studio (company registration details: to be added), e-mail: [email protected]. Contact us at this address for anything related to personal data.

2. What data we process

Contact form: your name, company name, phone number, the selected service and the message — whatever you type in yourself.

Technical data: a truncated (hashed) IP address, country, site language and the page the form was sent from. These are used to protect the form from spam and abuse.

Visit source: where you came from (e.g. search, social media, an ad), campaign parameters (UTM), the ad click identifier (gclid, fbclid) and the first page you visited. We attach them to your request to learn which channels work. Clicks on the WhatsApp, phone and e-mail buttons are counted in aggregate, without data that could identify you.

3. Purposes and legal bases

Replying to your request, preparing a quote and scheduling a shoot — Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract).

Protecting the form from bots, preventing abuse and basic visit statistics — Art. 6(1)(f) GDPR (our legitimate interest).

Providing data is voluntary, but without a name and phone number we cannot reply to your request.

4. How long we keep data

Form requests are kept for up to 12 months from the last contact. If we start working together, data is kept for the duration of the cooperation and for the period required by law (e.g. tax and accounting rules).

5. Recipients of data

The website, the form and the request database run on the infrastructure of Cloudflare, Inc. (USA), which provides hosting, the database and bot protection (Cloudflare Turnstile). Transfers outside the EEA rely on the European Commission adequacy decision for the EU-US Data Privacy Framework and standard contractual clauses.

If you message us on WhatsApp, your data (phone number, conversation content) is also processed by WhatsApp Ireland Ltd. under its own privacy policy.

We do not sell data and do not share it with other companies for marketing purposes.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. To exercise these rights write to [email protected].

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw).

7. Cookies and tracking

The website uses no advertising or analytics cookies and shows no cookie banner. The visit source is kept only in the browser session storage (sessionStorage), which is cleared when you close the tab. Cloudflare Turnstile may store strictly necessary technical data in your browser solely to check that a human is sending the form.

8. Changes to this policy

We may update this policy, for example when we add new tools. The current version is always available at this address and the date of the last change is shown at the top of the page.