Privacy policy

1. Data controller

The controller is PIXENT, Św. Antoniego 5B, 35-317 Rzeszów, Poland. For privacy questions or requests, email Brisa.

2. Data we process and why

Technical server logs may contain an IP address, request time, requested address, browser or device information, referrer and error data. They are used to deliver and secure the website, prevent abuse and diagnose faults. The legal basis is our legitimate interest in operating a secure, reliable website (Article 6(1)(f) GDPR).

Google Analytics 4 is disabled until you accept analytics cookies. After consent, it may process page views, approximate location, browser and device information, traffic source and interactions such as Etsy or contact clicks. We use these statistics to understand and improve the website. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time in Cookie settings.

If you contact us by email, we process your email address, name if supplied, message and related correspondence to answer you, provide support or take steps before a contract. The legal basis is Article 6(1)(b) GDPR where the request concerns a purchase or possible purchase, and otherwise our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).

3. Recipients and transfers

Technical data may be processed by our hosting provider. Analytics data is processed by Google Ireland Limited and its approved service providers. Google states that GA4 uses IP addresses at collection time for approximate location and then discards them before the data is logged.

Some providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses or another lawful safeguard. Links to Etsy take you to a separate service operated for EEA users by Etsy Ireland UC; Etsy then processes data under its own privacy policy.

4. Retention

Your consent choice is stored in your browser for up to six months. Google Analytics cookies are configured for up to six months. User- and event-level Analytics data is retained according to the GA4 property settings and for no longer than 14 months; aggregated reports may remain available for longer.

Technical logs are retained only for the period needed for security, operation and fault diagnosis under the hosting configuration. Email correspondence is kept until the matter is closed and then only as long as needed for claims, accounting or other legal obligations.

5. Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, portability or object to processing. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

6. Other information

Providing data for Analytics is voluntary and the website works without it. Technical request data is generated when the website is delivered. Providing contact data is voluntary, but without an email address and message we may be unable to answer your enquiry.

We do not use website data for automated decisions that produce legal or similarly significant effects. We apply reasonable technical and organisational safeguards and update this policy when the website or processing changes.