Publication date: October 30, 2025
We treat your personal data and its protection very responsibly. This Privacy Policy applies to the personal data we process in connection with our activities.
The document you are reading is based on legal provisions regarding personal data, including the provisions of the GDPR (General Data Protection Regulation of April 27, 2016) and the Personal Data Protection Act of May 10, 2018.
The content of this Privacy Policy may change at any time. We will always inform you of changes and provide the current version of the document. We cooperate with entities that ensure a high level of protection of the personal data we process.
Contact us:
For any matter related to the protection of your personal data, you can contact us at info@spaceforplans.com.
Data Controller:
The controller of your personal data processed in connection with our online activities is Dagmara Jankowska, representing STUDIO Dagmara Jankowska, based in Lodz (90-562), ul. Lakowa 13/3, Tax Identification Number (NIP): 7272743003, National Business Registry Number (REGON): 388310257.
What the Privacy Policy contains:
Here you will find information about the principles of processing your personal data, the purposes for which we process your data and the legal basis for doing so, the tools we use on the website, as well as the recipients of your data and your rights.
What data do we process, for what purposes, and on what basis?
We process your personal data, for example, when you contact us, or when you are our customer and purchase our products.
We process the personal data we receive from you for the following purposes and on the following legal bases:
1. Contacting You
* email address (first and last name), data contained in the message
* telephone number
* other data provided by you in the correspondence
The legal basis for this processing is Article 6(1)(a) of the GDPR, which allows us to process data based on consent to respond to your message, and Article 6(1)(f) of the GDPR, which allows us to pursue our legitimate interest in ensuring efficient and effective communication between the website administrator and the user.
2. Placing and Fulfilling an Order for Products/Services
* first and last name
* address
* email address
* residential address
* telephone number
additionally:
* Tax Identification Number
* business activity data
Providing data is voluntary, but necessary to fulfill the order.
The legal basis for this processing is Article 6(1)(b) of the GDPR, which allows us to process data for the purpose of taking steps to conclude a contract and for the performance of the contract concluded by placing an order.
3. Issuing an invoice and fulfilling tax and legal obligations
* business data
* name and surname
* address
* Tax Identification Number (NIP)
The legal basis for such data processing is primarily Article 6(1)(c) of the GDPR, which allows for the processing of personal data if such processing is necessary for the controller to fulfill its legal obligations.
4. Complaint processing and withdrawal processing
* email address
* name and surname
* data contained in the complaint
* bank account number
* residential address
* telephone number
The legal basis for such data processing is, firstly, Article 6(1)(b) of the GDPR, which allows for the processing of personal data if they are necessary for the performance of a contract or for taking steps to enter into a contract, and, secondly, Article 6(1)(c) of the GDPR, which allows for the processing of personal data if such processing is necessary for the controller to fulfill its legal obligations.
5. Marketing Purpose (Newsletter)
* Email Address
* Name
The legal basis for this data processing is primarily Article 6(1)(a) of the GDPR, i.e., your consent to receive commercial information and marketing content from us, and Article 6(1)(f) of the GDPR, which allows the processing of personal data if the controller thereby pursues a legitimate interest (in this case, the marketing purpose of our own services and products).
6. Archival and Evidence Purposes, for the purpose of securing information that may be used to prove facts
* All data listed in the table regarding our data processing
The legal basis for this data processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data if the controller thereby pursues a legitimate interest (in this case, the controller’s interest is to possess personal data that will enable the proof of facts related to the use of the website, the performance of a contract, and data processing on a legitimate legal basis).
7. Establishing, pursuing, or defending against legal claims
* all the above-mentioned data
The legal basis for such data processing is Article 6(1)(f) of the GDPR, which allows for the processing of personal data if the controller thereby pursues a legitimate interest (in this case, the controller’s interest is to possess personal data that will allow for the establishment, exercise, or defense against claims of persons using the website or third parties or customers).
8. Website management, use of tools to improve the website and analyze data related to website use
* IP
* behavior on the website
The legal basis for such data processing is Article 6(1)(f) of the GDPR, which allows for the processing of personal data if the controller thereby pursues a legitimate interest (in this case, the controller’s interest is to optimize the website, including the content presented on the website, to meet the needs of users, and to improve the controller’s offering).
9. Use of cookies on the website
* IP
* user behavior on the website
The legal basis for such data processing is Article 6(1)(f) of the GDPR. 1 letter a of the GDPR, which allows the processing of personal data with your consent. You provide your consent during your first visit to the website.
10. Managing the administrator’s social media profiles
* data related to the use of a given social media platform
The legal basis for processing is the administrator’s authorization under Article 6 paragraph 1 letter f of the GDPR, i.e., the legitimate interest of the administrator in managing your profile on a given platform, and your consent (Article 6 paragraph 1 letter a of the GDPR), which you express, for example, by joining a group created by the administrator on a given platform.
11. Fulfilling personal data protection obligations (e.g., the obligation to create registers and records)
* the scope of data is defined by law and varies depending on the content of the given legal obligation incumbent on the controller
The legal basis for processing is Article 6(1)(c) of the GDPR, meaning it is based on legal provisions that require the processing of personal data.
12. Posting comments/reviews on the website
* name
* email address
The legal basis for processing is Article 6(1)(a) of the GDPR, meaning your consent to post a comment on our website.
Your rights related to the processing of personal data
We inform you that you have the following rights related to the processing of your personal data:
1. The right of access to information – this means that every person whose data is processed has the right to know what is happening with their personal data. This Privacy Policy you are currently reading has been created for this purpose, among other reasons.
2. The right of access to personal data – this means that if we, as the controller of your data, receive a request from you for access to your data, we are obligated to provide you with such information. We are obligated to fulfill our obligations in this regard as the controller of your data immediately, no later than within one month. If this is not possible within this period, we are obligated to inform you at least whether we are processing your data and may then extend the deadline for a complete response to your request by two months.
3. The right to rectification of personal data – this means that you may request that the controller of your data rectify inaccurate data or supplement incomplete data.
4. The right to erasure of personal data, the right to be forgotten – this means that you can demand that we, as the controller of your personal data, erase your data and inform the person to whom your data has been transferred of its erasure. You also have the right to demand that your data, which we have made public, be erased by other controllers as well. As the controller of your data, we are also obligated to inform you, upon your request, to which recipients your data subject to erasure has been transferred.
5. The right to restriction of personal data processing – this means that you can demand that the processing of your personal data be restricted. This happens, for example, when you disagree with the accuracy of the data being processed or when you believe that you no longer need the data for processing purposes.
6. The right to object to the processing of personal data – this means that you can object to your data being processed by the controller.
7. The right to data portability – this means that, under certain conditions, you can request that your data be transferred directly to another designated controller.
8. The right to lodge a complaint – means that if you believe that our processing of your data violates the law, you may file a complaint with the President of the Personal Data Protection Office.
9. The right to withdraw consent – means that if your data is processed based on your consent, you have the right to withdraw it at any time. Withdrawing consent does not affect the legitimacy of the processing of your personal data until the consent is withdrawn.
If you wish to exercise your right, please contact: info@spaceforplans.com
Recipients
Your personal data may be transferred to third parties whose services we use in connection with the operation of the website www.spaceforplans.com and our social media profiles. We assure you that we carefully select the entities with whom we cooperate or whose services we use and always ensure adequate data protection.
Below you will find a list of all the entities whose services we use. They are divided into two groups: the first group comprises entities that process data outside the European Economic Area, and the second group comprises entities that process data outside the European Economic Area (e.g., in the USA).
In the event of personal data being transferred outside the European Economic Area, the entities carrying out such processing maintain an adequate level of data protection in line with EU standards, including through the use of standard contractual clauses adopted by the European Commission.
Data processors in the European Economic Area:
1. Service provider providing IT system maintenance and hosting services (keeping data on a server):
WordPress, WooCommerce, NETMARK, or MyDevil Internet systems
2. Marketing support:
META Facebook Pixel, Google Analytics, Google AdWords, MailerLite
3. Fast online payment provider:
PayU S.A., Stripe
Requirement to provide personal data
Providing personal data is voluntary and depends on your decision, but providing certain personal data is necessary to fulfill your expectations regarding the conclusion of a contract or use of our services. If you place an order for a product, providing your data is necessary to fulfill your requests related to the concluded contract.
If you contact us regarding any matter related to the website, our products, or the services we provide, providing your contact details may be necessary to respond to your inquiry.
If the requirement to provide your data results from legal provisions, providing your data is your responsibility.
Automated Decision-Making and Profiling
We do not use your data for automated decision-making that could affect your legal situation or have other similarly significant effects on you.
Tools implemented on the website may profile user behavior to improve the website and tailor the displayed content to user preferences. In this case, primarily anonymous data (location, age, interests) is analyzed. We use cookies and analytical tools like any other website. Further in this Privacy Policy, we explain how cookies work and how these activities affect you.
How long do we process your data?
In accordance with applicable law, we process your data only for the time necessary to achieve the designated purpose. After this period, your personal data will be irreversibly deleted or destroyed. The additional year associated with the processing of personal data collected for the performance of a contract results from the fact that you may submit a notification just before the expiry of the limitation period.
We process your data for the following periods:
1. 3 or 6 years + 1 year
in relation to personal data processed for the establishment, exercise, or defense of legal claims; the choice of 3 or 6 years depends on whether both parties are entrepreneurs or not;
2. until an effective objection is raised or the purpose of processing is achieved
in relation to personal data processed based on the controller’s legitimate interest;
3. until it becomes outdated or no longer relevant
in relation to personal data processed primarily for website administration purposes;
4. until you withdraw your consent or no longer relevant
in relation to personal data processed based on your consent, unless otherwise expressly stated at the time of consent.
Social Media
We maintain profiles on social media platforms, and our website contains plugins that redirect to them.
We are the administrator of the profile on the given platform, and we process your data (name, surname, nickname, and other data you provide in your profile) primarily for the purpose of managing our profile, building a community, and interacting with followers.
The provider of a given social media platform determines the rules governing the platform and the principles of data processing for its own purposes, so we encourage you to familiarize yourself with the terms and conditions and policies of each platform. We do not process data collected by social media platforms for their own purposes.
Plugins leading to our profiles allow you to connect directly to our profile by clicking on the platform icon. The social media platform may obtain information about your use of our website, especially when you are logged in as a user.
If you do not want social media platforms to obtain information about your activities, we recommend logging out of your profiles and using an incognito browser. Our website includes plugins that redirect you to our profiles on the platforms listed below. We also provide the platform privacy policies so you can review them in accordance with our recommendations:
Facebook: https://www.facebook.com/spaceforplans
Platform Privacy Policy: https://www.facebook.com/privacy/explanation
Instagram: https://www.instagram.com/spaceforplans/
Platform Privacy Policy: https://help.instagram.com/519522125107875?helpref=page_content
Pinterest: https://pl.pinterest.com/spaceforplans/
Platform Privacy Policy: https://policy.pinterest.com/pl/privacy-policy
Newsletter
Your data provided in the newsletter subscription form (first name, last name) is processed for the purpose of sending the newsletter and based on your consent. Please remember to confirm your subscription to our newsletter after receiving your first message.
We use the services of a newsletter provider that ensures the protection of your data, i.e., MailerLite Limited (the provider’s privacy policy is available at https://www.mailerlite.com/pl/legal/privacy-policy?_gl=1*1uhz5kd*_up*MQ..&gclid=CjwKCAjw9-6oBhBaEiwAHv1QvO5VoDW1KYvINArApCFAxpR7jznwEBagWzf80u0-JsD26yQ_orMX1BoC1UUQAvD_BwE). The provider’s system records your activity related to subscribing to our newsletter. Your data will not be transferred to a third country outside the European Union for the purpose of sending the newsletter. Providing your data in the newsletter subscription form is voluntary, but necessary to send you the newsletter based on your consent, as well as to send you information about marketing our own products or services based on our legitimate interest as the controller (i.e., Art. 6, Section 1, Letter f of the GDPR), and to pursue any claims related to the sending of the newsletter.
You will receive our newsletter until you unsubscribe or we stop sending the newsletter. If you are inactive for one year, we may stop sending the newsletter, in which case we will remove you from our list of subscribers.
The unsubscribe mechanism is simple and involves clicking the active link with the “I am unsubscribing from the newsletter” message. After you exercise this right and unsubscribe from the newsletter, your data related to your newsletter subscription will be stored for the period necessary to defend against potential claims. This is our legitimate interest as the controller. We may share the personal data you provide when subscribing to the newsletter with the following entities: the service provider providing IT system maintenance and hosting services, the email service provider, the newsletter service provider, and third parties supporting us in sending the newsletter, with whom we have entered into appropriate agreements.
As with any data processing, you have the right to access your data, receive a copy, the right to rectify, erase, restrict its processing, the right to data portability, the right to object, and the right to withdraw consent at any time.
Please note, however, that if you withdraw your consent to data processing, this will not affect the lawfulness of data processing based on your consent before its withdrawal.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your data violates the law. Your data will not be processed automatically.
You can find more information in the Newsletter Regulations.
Withdrawal of consent to data processing
If the processing of personal data is based on consent, you may withdraw this consent at any time—at your discretion. If you would like to withdraw your consent to the processing of personal data, simply send an email directly to the controller’s address provided at the beginning of this document.
If the processing of your personal data was based on consent, withdrawing it does not mean that the processing of personal data up to that point was unlawful. In other words, we have the right to process your personal data until you withdraw your consent, and withdrawing your consent does not affect the lawfulness of the processing carried out so far.
Comments and opinions on the website
We allow users to leave comments and opinions on the website. Adding a comment or opinion is entirely voluntary.
To leave a comment or opinion, complete the form, providing your name and email address. By posting a comment or opinion on the website, you consent to the processing of data related to this. The comment system on our website is provided by WordPress (we recommend reviewing their privacy policy: https://pl.wordpress.org/about/privacy/).
The review system on our website is provided by WooCommerce (we recommend reviewing their privacy policy: https://automattic.com/privacy/).
We ask you to respect each other and remember that you are responsible for the content of your comments and opinions. We reserve the right to moderate comments and opinions, in particular to remove those that are offensive, vulgar, or advertising-related, or that violate the rights of others.
Cookies and Tools Implemented on the Website
This website, like many others, uses cookies. Cookies are short text files stored on the device you use to browse the website. They can be read by us (“first-party cookies,” which we use to ensure the proper operation of this website and improve our offerings), as well as by systems belonging to other entities whose services we use (“third-party cookies”). Remember that you have the right to change cookie settings in your browser or delete them.
When you first visit the website, information about the use of cookies is displayed –
Our website uses the following tracking technologies:
social plugins that redirect to our social media profiles, which we mentioned in more detail above,
analytical and marketing tools such as Google Analytics, META (Facebook) Pixel.
META (Facebook) Pixel
The META (Facebook) Pixel is an analytical tool, a piece of code implemented on the website that allows us to target marketing activities to people who have visited our website or are interested in our activities.
The data collected by the tool is anonymous (location, gender, age, online activity), although the provider may combine it with data it has collected about you as part of your use of its platform.
The META (Facebook) Pixel helps us determine the effectiveness of our ads, reach specific audiences, and show their reactions to our activities.
You can read more about the tool on the provider’s website:
Google Analytics
Google Analytics allows you to analyze services and online activities. Google Analytics uses cookies, which are stored on your computer and enable analysis of your use of the website.
You can disable cookies by using the appropriate settings in your browser. However, there is a risk that you will not be able to fully use all the features of this website.
The data collected through this tool is anonymous (location, gender, age, internet activity), and the provider may combine it with data it has collected about you through your use of its browser and/or its services.
We use Google Analytics to analyze user usage and improve the website in line with user preferences. These statistics allow us, for example, to tailor our offerings.
Details about Google Analytics are available by clicking the link: https://analytics.google.com/analytics/web/provision/?hl=pl#/provision.
Google assures you that it uses data protection and security mechanisms provided for by European law. Details about data protection by Google are available at the following link: https://policies.google.com/privacy?hl=pl.
Content from External Services
We may include content from external services on our website, such as audiovisual or audio recordings, and these services may record information about your playback of the content. If you have an account on a given website, we recommend logging out before playing content on our website if you do not want the website to be aware of it.
Server Logs
Using our website involves sending queries to the server hosting the website.
Each query sent to the server is recorded in server logs, which include, for example, the IP address, server date and time, information about the web browser and operating system you are using.
Data stored in server logs is not associated with specific individuals using the website and is used as auxiliary material for administrative purposes.
The content of server logs is not disclosed to anyone except those authorized to administer the server.
Final Provisions
The materials posted on this website constitute the intellectual creation of the administrator and are subject to legal protection. Using the content provided outside of permitted personal use may result in the risk of criminal and civil liability.
If you have any questions regarding the legal nature of the content provided or how you may legally use it, please send us a message (email address provided at the beginning of this document) and we will provide you with a comprehensive response.
Please also remember that the content provided is for educational purposes and does not constitute or replace individual expert advice.
Finally, we remind you that the content of this Privacy Policy is subject to change, for example, when we change the service provider or the scope of functionality on the website. For your convenience, the date of the Privacy Policy update is provided at the beginning.
That’s all we have to share.
Thank you for your time.