Last updated: 12 October 2026
I respect your privacy and process only the data needed for contact, cooperation, sending the newsletter and the proper functioning of this website.
1. Data controller
The controller of your personal data is Monika Maria Masztafiak, running a business under the name Monika Masztafiak, Polish tax ID (NIP): 634 220 80 95.
Contact for matters concerning personal data: monika@masztafiak.art, +48 608 614 205.
2. What data I process and why
Contact form and direct contact
If you write to me through the form, by e-mail, on LinkedIn or by phone, I process the data you provide - mainly your name, e-mail address, phone number and the content of your message.
I use it to:
- reply to your message,
- discuss possible cooperation,
- take steps prior to entering into a contract.
The legal basis is, respectively, Article 6(1)(b) or (f) of the GDPR - steps taken at your request before entering into a contract, or my legitimate interest in handling correspondence and business contact.
If we start working together, the data may also be processed to perform the contract and to fulfil accounting and tax obligations.
SEE BEYOND newsletter
If you subscribe to the newsletter, I will process your e-mail address and, if the form requires it, also your first name and information about the consent you have given.
The newsletter may contain expert content and information about new materials, events and my offer.
The legal basis for processing is your consent - Article 6(1)(a) of the GDPR. You can withdraw your consent at any time by using the link in the newsletter or by writing to me at monika@masztafiak.art.
Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
Website security
I may process basic technical data, such as your IP address or browser information, where this is needed to protect the website and its forms against spam or abuse.
The legal basis is my legitimate interest - Article 6(1)(f) of the GDPR.
Website statistics
If Google Analytics 4 is active on the website, analytics data will only be collected after you have consented to analytics cookies.
The legal basis for processing is Article 6(1)(a) of the GDPR.
3. How long I keep the data
I keep the data only for as long as it is needed for the purpose for which it was collected:
- correspondence and form data - for the time needed to handle the contact and any cooperation, and afterwards for the period necessary to secure any possible claims;
- data related to cooperation and settlements - for the period required by law, in particular tax and accounting regulations;
- newsletter data - until consent is withdrawn;
- information about consent given or withdrawn - for as long as it is needed to demonstrate that it was obtained correctly;
- analytics data - in line with the settings of the analytics tool used.
4. Who the data may be shared with
The data may be used by entities that help me run the website, communication and my business, in particular:
- the provider of hosting, e-mail and technical infrastructure,
- the provider of the newsletter system - if the newsletter is launched,
- Google - if you use Google Analytics features or YouTube content,
- providers of IT or technical services,
- entities handling accounting or settlements - if we start working together,
- public authorities - only where required by law.
These entities have access to the data only to the extent needed to provide their services.
I do not sell or share your data with other entities for their own marketing purposes.
5. Transfers outside the EEA
Some technology providers may process data outside the European Economic Area, including in the United States.
Where such a transfer takes place, it is based on the mechanisms provided for by the GDPR, such as a European Commission adequacy decision or appropriate safeguards required by law.
6. Cookies
The website may use:
- technologies necessary for the website to work properly and to remember your settings,
- analytics cookies - only after you have given consent,
- content embedded from external services, e.g. YouTube.
I do not use marketing cookies, unless I clearly inform you about their introduction in the future.
Where cookies require consent, you can change or withdraw it at any time using the cookie settings available on the website.
7. Your rights
You have the right to:
- access your data,
- have it rectified,
- have it erased,
- restrict its processing,
- data portability - where applicable,
- object to processing based on legitimate interest,
- withdraw consent at any time.
For these matters, write to monika@masztafiak.art.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
8. Is providing data mandatory
Providing data is voluntary.
However, without the data needed for contact I will not be able to reply to your message, and without your e-mail address and the required consent I will not be able to send the newsletter.
9. Automated decisions
I do not make decisions about you based solely on automated processing and I do not carry out profiling within the meaning of Article 22 of the GDPR.
10. Changes to this policy
This privacy policy may be updated if the way the website works, the tools used or the applicable regulations change.