Privacy Policy

Privacy Policy

This Privacy Policy describes how we process information, including personal data and cookies (also known as cookies).

Definitions and Abbreviations:

• GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

• User – A person using the service, a guest visiting the website.

• Service – The online service operating at the address https://www.magdaciura.com/.

Personal Data Administrator:

The personal data administrator is Magdalena Ciura, conducting business under the name Magdalena Ciura Media Group, located at Cicha 31, 96-515 Paprotnia, Poland. You can contact the Administrator via traditional mail at the above address or by email at ciura.media@gmail.com.

The Administrator ensures that Users' rights are properly protected and, in particular, guarantees that personal data is:

• Processed lawfully, fairly, and transparently for the data subject;

• Collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes;

• Accurate and relevant to the purposes for which it is processed;

• Processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage;

• Stored in a form that allows identification of data subjects for no longer than necessary to achieve the purpose of processing.

Purpose, Legal Basis, and Data Processing Period:

The Administrator processes personal data for the following purposes:

1. Conclusion and performance of the contract – for providing the service. Data will be processed based on Article 6(1)(b) of the GDPR for the period necessary to perform the contract.

2. Handling any complaints – Data will be processed based on Article 6(1)(c) of the GDPR for the period specified by law.

3. Payment settlements, tax and accounting obligations – Based on Article 6(1)(c) of the GDPR for the period specified by law.

4. Responding to inquiries (contact form) – Data will be processed based on Article 6(1)(f) of the GDPR until we respond to your inquiry.

5. Allowing comments on social media posts – Based on Article 6(1)(a) of the GDPR, i.e., your consent, which you give by leaving the comment.

6. Establishing, asserting, or defending claims – Based on Article 6(1)(f) of the GDPR (legitimate interest of the Administrator). Personal data will be processed until the claims are barred.

7. Cookies-related processing – Based on Article 6(1)(a) of the GDPR (consent). Personal data will be processed until you delete the cookies using your browser/device settings.

8. Adapting platform content to User preferences and improving browsing quality – Based on Article 6(1)(f) of the GDPR (legitimate interest of the Administrator), until you object to the processing.

9. Assessing website usage and improving it – Based on Article 6(1)(f) of the GDPR (legitimate interest of the Administrator), until you object to the processing.

10. Managing the Website and Administrator profiles on other platforms – Based on Article 6(1)(f) of the GDPR (legitimate interest of the Administrator).

11. Conducting satisfaction surveys – Based on Article 6(1)(f) of the GDPR (legitimate interest of the Administrator).

12. Internal administrative purposes related to managing User contact – Based on Article 6(1)(f) of the GDPR (legitimate interest of the Administrator).

In every case where we ask for your consent to process your personal data, providing the data is voluntary but necessary to perform the action. You can withdraw your consent at any time, but this will not affect the lawfulness of processing that took place before your withdrawal.

Data Recipients:

In certain situations, the Administrator may share your personal data with other recipients if necessary to fulfill obligations arising from the Administrator’s duties, to perform the contract, ensure continuity of services, payment processing, etc.

Personal data processed on the Service may be shared with entities that the Administrator cooperates with for the purpose of fulfilling the contract concluded with you. Personal data may be shared with entities that the Administrator has entered into a data processing agreement with, such as those providing technical support, IT infrastructure, website hosting, and legal or accounting services.

In situations specified by applicable law, personal data may be shared with state authorities.

We may outsource some services to providers located outside the European Economic Area (in a "third country"). In such cases, data is transferred to a third country based on a decision from the European Commission recognizing an adequate level of protection. If no such decision exists, we apply appropriate safeguards to ensure the proper level of data protection, such as Standard Contractual Clauses.

Server Logs:

Information collected and stored automatically during normal use of the website includes typical server log data. These log data are used for statistical purposes and to measure activity on the website for the benefit of the users. These data may be shared with other recipients for analysis or for improving the website and our services.

Collected Information:

We collect information that you voluntarily provide, including personal data if provided (e.g., data related to User activity on the site, such as time spent on the page, search terms, number of pages viewed, date and source of visits), and personal data provided in the contact form (name, email address, other data you voluntarily provide).

We may store connection parameters (e.g., timestamp, IP address).

In some cases, we may store information that facilitates linking the form data with your email address. In such cases, your email address appears within the URL of the page containing the form.

Data provided in the form will be processed according to the purpose of the specific form, e.g., contact with the Administrator.

Users' Rights:

• Right to withdraw consent: If we process your data based on consent, you have the right to withdraw it at any time. Withdrawing consent will not affect the lawfulness of the processing before your withdrawal.

• Right of access to data: You can request information from the Administrator about which of your personal data we are storing.

• Right to data portability: If we process your personal data based on consent, a contract, or automated means, you have the right to request a copy of that data in a structured, commonly used, and machine-readable format. This only applies to data provided by you.

• Right to rectify data: You have the right to correct your personal data if it is incorrect or to complete incomplete data.

• Right to erasure: You may request the deletion of your personal data, and we will act on your request promptly, unless we are legally required to retain it.

• Right to restrict processing: This right may be exercised if:

  • You contest the accuracy of your data, for the period that allows the Administrator to verify its accuracy;

  • Processing is unlawful, and you oppose erasure of your data, requesting instead that its use be restricted;

  • The Administrator no longer needs the data for processing, but you need it to establish, assert, or defend legal claims;

  • You have objected to processing based on legitimate interests, pending verification of whether the Administrator's legitimate grounds override your objections.

• Right to object to processing: You have the right to object to the processing of your data based on legitimate interests pursued by us or a third party, or if the processing is necessary for the performance of a task carried out in the public interest.

• Complaint to a supervisory authority: If you believe that the processing of your personal data violates data protection laws, you may file a complaint with a supervisory authority, such as the President of the Personal Data Protection Office in Poland (contact details: Stawki 2, 00-193 Warsaw, phone: +48 22 531-03-00).

Cookies:

When using our website, small files (primarily text files) containing necessary information for the proper functioning of the site are saved on your device. These files (cookies) enable the collection of statistical data on website usage, which helps us improve the site. The legal basis for collecting data through cookies is Article 6(1)(a) of the GDPR (your consent).

Managing Cookies:

The web browser typically accepts cookies by default. Users of the Service can change settings to block cookies or delete them. It is also possible to use the site in "incognito" mode, which blocks data collection. For detailed information, please consult your browser’s help or documentation.

Restricting the use of cookies may affect some functionalities on the Service's website.

The Administrator uses the following cookies:

• Functional

• Analytical

• Statistical

And tracking technologies such as:

• Social media plugins (e.g., Facebook, Instagram, TikTok, YouTube)

• Analytical and marketing tools (e.g., Google Analytics, Google Search Console, Facebook Pixel)

Google Analytics and Google Search Console:

The Administrator uses Google Analytics for website analytics and Google Search Console for monitoring the site's presence in Google search results. Google uses cookies to collect and analyze usage data. These data are usually transferred to a Google server in the USA.

To prevent the collection of data by cookies, you can install the browser plugin available at: tools.google.com/dlpage/gaoptout.

Changes to the Privacy Policy:

The Administrator reserves the right to make changes to the Privacy Policy. Users will be informed about any changes.