Privacy Policy

The controller of your personal data is Stanislav Ievlentiev, a sole trader at Jana Henryka Dąbrowskiego 89/41, 60-574 Poznań, Poland, NIP: 7812093544.

Contact: kontakt@iziphoto.pl

Data is processed in order to:

• provide the service of preparing photos for documents
• process payments
• handle complaints
• comply with legal obligations
• ensure the security and operation of the website
• keep anonymous statistics of visits and orders (Google Analytics) — only with the user’s consent

Legal bases:

• Art. 6(1)(b) GDPR (RODO)
• Art. 6(1)(c) GDPR (RODO)
• Art. 6(1)(f) GDPR (RODO)
• Art. 6(1)(a) GDPR (RODO) — Google Analytics statistics (consent given in the cookie notice)

We process:

• photos uploaded by the user
• the e-mail address passed on by the payment operator
• transaction data
• for the on-site service: likeness (the photo taken on site), name, visit address, and the phone number or e-mail given in the request
• IP address and technical data
• with consent: website usage data collected by Google Analytics (pages visited, traffic source, device type, approximate location, number and value of orders)

Data is not used for profiling or automated decision-making.

• photos and files: 24 hours at most
• photos and files made in the partner cabinet (agencies): 14 days at most — this period lets the partner hand the file to the client and handle a possible claim under the MOS acceptance guarantee; after that the files are deleted automatically
• photos taken on site (on-site service): deleted from the Service Provider’s device and from the service after the file is handed over, no later than 24 hours after being taken
• accounting data: as required by legal obligations
• technical logs: up to 30 days
• complaints: up to 3 years

Data may be processed by:

• Przelewy24
• PhotoRoom
• Google Cloud
• Cloudflare
• Vercel
• Google Ireland Limited (Google Analytics) — only with the user’s consent

These entities process data only to the extent necessary to provide the service.

Data may be transferred outside the European Economic Area with appropriate safeguards, including standard contractual clauses (SCC).

Payment data is processed directly by the payment operator and is not stored by the Controller.

The user has the right to:

• access their data
• rectify their data
• erase their data
• restrict processing
• object to processing
• data portability

To exercise these rights, contact: kontakt@iziphoto.pl

The user also has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), the Polish supervisory authority.

The Controller applies appropriate technical and organisational measures, including:

• HTTPS/TLS encryption
• restricted access to systems
• automatic deletion of files after 24 hours

The website uses strictly necessary cookies and localStorage required for it to work and, with the user’s consent, Google Analytics analytics cookies. Details and how to change your consent: Cookie Policy.

The current version of the policy is available at: iziphoto.pl/polityka-prywatnosci