Privacy Policy & Data Protection (GDPR)

The controller of your personal data under Art. 4(7) GDPR is:

Aleksandra Dec
Creator and designer of dec.visuals
E-mail: kontakt@dec-visuals.pl

The Controller operates this website as a natural person showcasing a design portfolio. Under GDPR regulations, operating a registered company (tax ID) is not required to act as a personal data controller.

When you send a message via our contact form or direct email:

• Scope of data collected: name and surname, email address, phone number (optional), and message content.
• Purpose of processing: responding to your inquiry, preparing an estimate, discussing design concepts, or initiating collaboration.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller in managing inquiries and client relations) and Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request).
• Providing data is voluntary, but necessary to receive a response.

When using dec-visuals.pl, the servers automatically process basic technical information:

• Form submitter IP addresses are hashed using a cryptographic HMAC-SHA256 algorithm — raw IP addresses are never stored in our database.
• Anti-spam defense: the system applies rate limiting to protect the contact channel from automated spam.
• All connections to the website are encrypted using an SSL/TLS certificate (HTTPS).
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security, stability, and abuse prevention).

Our website uses cookies:

• Technical cookies: essential for site security and administrative session management.
• Google Analytics 4 (Google Ireland Limited): measures aggregated visit counts and project engagement. We have configured it without remarketing and without personalized advertisements.
• Managing cookies: you can block or clear cookies at any time through your browser preferences.

Your data is stored only as long as reasonably necessary:

• Form messages: for the duration of discussions and up to 3 years following the last communication (for project records and defense against claims).
• Project contracts and execution: for the duration of the engagement plus statutory limitation periods.
• Analytics data: in accordance with standard Google Analytics retention schedules.

Data may be entrusted solely to providers supporting our infrastructure:

• OVH SAS / OVH Sp. z o.o. — hosting and email server provider (data centers located within the European Union).
• Google Ireland Limited — analytics provider (Google Analytics 4).

We do not sell, trade, or transfer your personal data to any third parties for marketing purposes.

Under the GDPR, you have the following rights:

• Right of access and to receive a copy of your data (Art. 15 GDPR),
• Right to rectification of inaccurate data (Art. 16 GDPR),
• Right to erasure ('right to be forgotten', Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to object to processing (Art. 21 GDPR),
• Right to data portability (Art. 20 GDPR).

To exercise any of these rights, email us at: kontakt@dec-visuals.pl.

You also have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
https://uodo.gov.pl

If you have any questions or concerns regarding your privacy or data processing, please contact us:

Aleksandra Dec
E-mail: kontakt@dec-visuals.pl

This version of the Privacy Policy is effective as of September 2026.