Privacy Policy

1. General information

This Privacy Policy defines the principles of processing personal data by UMEO Studios (hereinafter referred to as: "Administrator", "we", "us") in connection with the use of the website umeo.pl (hereinafter referred to as: "Website").

The Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and the Act of 10 May 2018 on the protection of personal data.

2. Data administrator

The administrator of personal data is:

UMEO Studios
Józefa i Sylwester Buszczyńskich 5C/39, 87-100 Toruń
NIP: 8792009681
REGON: 340586940
E-mail: contact@umeo.pl

In matters related to personal data protection, you can contact us via e-mail: contact@umeo.pl

3. What data do we process?

We process the following categories of personal data:

3.1 Contact form

Name
Email address
Message content
IP address (automatically logged)
Date and time the message was sent

3.2 Technical data

IP address
Browser type and version
Operating system
Language preferences
Device data (screen resolution, device type)

4. Purposes and legal basis of processing

4.1 Contact form support

Purpose: To answer user inquiries

Legal basis: Consent (Article 6 (1) (a) of the GDPR)

Retention period: Data is sent by email to our mailbox. You can request the deletion of your data at any time by contacting us.

4.2 Ensuring safety

Purpose: Protection against attacks, spam, abuse

Legal basis: Legitimate interest (Article 6 (1) (f) of the GDPR)

Retention period: Technical data is processed by the hosting provider in accordance with their retention policy.

4.3 Site functionality

Purpose: Ensuring proper functioning of the site (language preferences, sessions)

Legal basis: Legitimate interest (Article 6 (1) (f) of the GDPR)

Storage period: Until the end of the session or 1 year for preferences

5. Cookies

Our website only uses essential cookies that are necessary for the proper functioning of the website. We do not use analytical, marketing or tracking cookies.

5.1 Types of cookies used

Session cookies - ensure the security and functionality of forms
Language preference cookies - remember the selected language (i18n_redirected)
Consent cookies - remember cookie preferences (umeo-cookie-consent)

All cookies we use are necessary for the functioning of the website and do not require additional consent in accordance with Article 5(3) of Directive 2002/58/EC.

6. External services

6.1 Google reCAPTCHA v3

We use Google reCAPTCHA v3 to protect against spam. When using the contact form, Google may process data such as IP address, browser information and user behavior on the site.

Administrator: Google LLC Legal basis: Legitimate interest (security)

6.2 Prismic CMS

The content on the site is managed by the Prismic CMS system. Prismic may process technical data necessary to display the content.

Admin: Prismic

7. Your rights

Under the GDPR, you have the following rights:

Right of access (Article 15 of the GDPR) - you may request information about the data being processed.
The right to rectification (Article 16 of the GDPR) - you can request that incorrect data be corrected.
Right to delete (Article 17 of the GDPR) – you can request the deletion of your data.
Right to restriction (Article 18 of the GDPR) - you may request the restriction of processing.
Right to portability (Article 20 GDPR) - You can receive your data in a structured format.
Right to object (Article 21 GDPR) - You may object to processing.

How to exercise your rights?

To exercise the above rights, please contact us at: contact@umeo.pl

We will respond to your request within 30 days.

8. Data security

We use appropriate technical and organizational measures to protect personal data:

Connection encryption (HTTPS/SSL)
Safe data storage on servers with security certificates
Regular system updates
Limited access to personal data
Security monitoring
Protection against attacks (reCAPTCHA, firewall)

9. Data transfer

Personal data may be transferred to the following recipients:

IT service providers (hosting, e-mail) - to the extent necessary to provide services
State bodies - in cases provided for by law

9.1 Transfers to third countries

Some external services (Google) may process data outside the European Economic Area. The transfer is based on:

European Commission adequacy decision
Standard Contract Clauses approved by the European Commission
Privacy Shield Certification (for US entities)

10. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. We will announce any significant changes on the website.

The current version of the Privacy Policy is always available at: umeo.pl/privacy-policy

11. Right to file a complaint

In the event of a breach of personal data protection regulations, you have the right to lodge a complaint with the supervisory authority:

Personal Data Protection Office
ul. Stawki 2, 00-193 Warsaw
Phone: +48 22 531 03 00
E-mail: kancelaria@uodo.gov.pl
Website: uodo.gov.pl

12. Contact

For matters relating to personal data protection, please contact:

E-mail: contact@umeo.pl
Subject: "Personal data protection - GDPR"
Correspondence address:
UMEO Studios
Józefa i Sylwester Buszczyńskich 5C/39
87-100 Toruń

We will respond to your inquiry within 30 business days of receipt.