Privacy policy

Last updated: 5 October 2026

This policy explains how the Facet studio processes the personal data of site visitors and people who write to us, in accordance with Regulation (EU) 2016/679 (GDPR). In short: the site has no analytics, advertising or cookies — we receive data only in server logs when you use the chat assistant, and when you write or call us.

1. Who is the controller

The controller of your personal data is Kostiantyn Buch, ul. Czarnomorska 17, 02-758 Warszawa, Polska (full details on the Owner information page). For all data protection matters, write to facetstudio.eu@gmail.com. We have not appointed a data protection officer, as we are not required to.

2. What data we process and why

Visiting the site (server logs)

• Data: IP address, date and time of the request, requested page address, response status, browser and device type (user agent), and the page you came from.
• Purpose: delivering the site to you, keeping it secure and detecting abuse.
• Legal basis: legitimate interest in running and securing the site (Art. 6(1)(f) GDPR).
• Retention: [DAYS] days, after which logs are deleted or anonymised.

Email, phone and messenger correspondence

• Data: your name, contact details, the content of your message and any other information you send us.
• Purpose: answering your inquiry and, if you wish, preparing an offer or contract.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); in other cases, legitimate interest in communicating with people who write to us (Art. 6(1)(f)).
• Retention: for the duration of the correspondence and then until possible claims become time-barred (in Poland, generally three years, counted to the end of the calendar year).

Website orders and contracts

• Data: contact and billing details (name, company name, address, tax ID) and information needed to perform the contract.
• Purpose: performing the contract, invoicing, keeping accounting records, and establishing or defending legal claims.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR), obligations under tax and accounting law (Art. 6(1)(c)), legitimate interest in defending against claims (Art. 6(1)(f)).
• Retention: for the term of the contract; accounting and tax records for the period required by law (in Poland, generally 5 years from the end of the calendar year in which the tax liability arose).

Browser local storage

Your language choice is saved only in your browser and is not sent to our server. Details are in the cookie policy. The site sets no cookies and uses no analytics, advertising tools or social media widgets.

AI assistant chat

If you use the chat assistant on the site, the text of your messages, the language and the page address are sent to a function on our server and, through the Netlify AI Gateway, to an AI model provider (Anthropic) that generates the reply. We do not store the conversation ourselves, neither on our server nor in your browser, and we do not use it for profiling; the hosting provider may keep technical request logs. Please do not enter sensitive or confidential information in the chat. The legal basis is our legitimate interest in answering visitors’ questions (Art. 6(1)(f) GDPR). The providers are partly located outside the EEA; see section 4.

3. Who receives your data

Your data may be received by providers acting on our behalf: hosting (Netlify, Inc.), email (Google (Gmail)) and, where needed, accounting, legal and IT service providers. We disclose data to public authorities only where the law requires it. We do not sell personal data.

4. Transfers outside the EEA

We aim to keep data within the European Economic Area. If a service provider is located outside it, the transfer relies on a European Commission adequacy decision (including the EU–US Data Privacy Framework for certified companies) or standard contractual clauses (Art. 45 and 46 GDPR). You can request a copy of the safeguards at facetstudio.eu@gmail.com.

5. Your rights

You have the right to:

• confirmation of whether we process your data, access to it and a copy (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure of your data (Art. 17)
• restriction of processing (Art. 18)
• receive your data in a structured, machine-readable format and transmit it to another controller, where processing is based on a contract (Art. 20)
• object, on grounds relating to your particular situation, to processing based on legitimate interest (Art. 21)
• withdraw consent, should we ever process data on that basis — this does not affect the lawfulness of processing before withdrawal (Art. 7(3))

To exercise your rights, write to facetstudio.eu@gmail.com. We will reply within one month; for complex requests this may be extended by a further two months (Art. 12(3) GDPR). We may ask you to confirm your identity.

Complaint to a supervisory authority

You have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also contact the authority in the EU country where you live or work.

6. Providing data and automated decisions

Providing data is voluntary, but without it we cannot reply to your message or enter into a contract. We do not make decisions based solely on automated processing and do not carry out profiling.

7. Security

We apply reasonable technical and organisational safeguards: an encrypted connection (HTTPS), restricted access to data, and keeping only what is necessary.

8. Changes to this policy

If the way we process data changes, we will update this page and the date at the top. The current version is always available here.

9. Contact

For questions about personal data, write to facetstudio.eu@gmail.com.

Cookies and local storage are described separately in the cookie policy.