Privacy & Cookie Policy

1. General Information

This Privacy Policy sets out the rules for processing and protecting the personal data provided by Users in connection with the use of the website artdanutakozak.com

2. Data Controller

The controller of Users' personal data is: Danuta Kozak, ul. Narcyzowa 5/84, 81-653 Gdynia, Poland [e-mail address: danutakozak7@gmail.com]. For matters related to the protection of personal data, please contact us at the e-mail address provided.

3. Legal Basis for Processing

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), on the following legal bases: handling your inquiry and contact – Art. 6(1)(b) and (f) GDPR (legitimate interest); performance of the sales contract – Art. 6(1)(b) GDPR; website traffic analysis (Google Analytics) – Art. 6(1)(a) GDPR (consent).

4. Purpose and Scope of Processing

Users' personal data is processed for the following purposes:

• Responding to an inquiry (e-mail message) – scope: name, e-mail address, message content.
• Website traffic analysis (Google Analytics 4) – data collected only after consent is given in the cookie banner.

5. User Rights

The user has the right to:

• access their data,
• rectify (correct) their data,
• erase their data,
• restrict the processing of data,
• data portability,
• object to processing,
• withdraw consent at any time,
• lodge a complaint with the President of the Personal Data Protection Office (PUODO).

6. Data Recipients

Data may be shared with hosting providers and with the analytics provider Google Analytics (Google Ireland Limited).

7. Cookies

The website uses Google Analytics 4 (provider: Google Ireland Limited) to analyse traffic and compile statistics. Cookies and analytics identifiers are loaded only after the User gives consent in the cookie banner (Google Consent Mode v2) – until then analytics remains disabled. Consent can be withdrawn at any time by clicking „Cookie settings” in the site footer. Essential storage (e.g. remembering the selected language) does not require consent. The website also loads Google Fonts from Google's servers, which may involve transferring the User's IP address to Google LLC (USA). Within Google Analytics and Google Fonts, data may be transferred outside the European Economic Area to Google LLC (USA) on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework), and otherwise on the basis of Standard Contractual Clauses (SCC).

8. Final Provisions

Last updated: 1 August 2026.