This is an English translation. In case of discrepancies, the Polish version prevails.
This document explains what personal data we process in connection with the website magdalena-tekieli-furniture.com (in all language versions), the enquiry form and contact with the studio, for what purposes, to whom we pass it and what rights you have. We apply Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Polish data protection law.
1. Who is responsible for your data
The data controller is the person named in the box at the top of this page. For any data protection matter you can write to magdalena@tekieli.pl, call +48 606 480 143 or send a letter to ul. Ważewskiego 33G, 30-499 Kraków, Poland. The controller has not appointed a data protection officer, as there is no obligation to do so.
2. What data we process and where it comes from
Browsing the website. The website has no user accounts and no analytics tools. To deliver the website and protect it against attacks, our hosting provider (Cloudflare) processes technical data of each request, including the IP address and information sent by the browser (e.g. its type and operating system version). We do not combine this data with other information about you. Fonts and photographs are loaded from our own domain, not from external servers.
Language choice and consents. If you choose a language version or make a decision in the consent window, your browser stores that choice on your device. This information is not sent to us. Details are in the Cookie policy.
Vimeo films. If you consent to films in the consent window (the Raffles background film) or click “Play film”, your browser connects to Vimeo’s servers, which receive, among other things, your IP address. We load the player with the “do not track” parameter, which stops Vimeo from setting session analytics cookies. Until you click, the film does not load. The background film on the home page is served from our own domain, without Vimeo.
Google Maps. If you consent to the map, your browser connects to Google’s servers, which receive, among other things, your IP address. Without your consent the map does not load and no data is sent to Google.
Enquiry form. We receive the data you provide: your name, e-mail address, optionally your phone number and the piece you are asking about, and your message. In the Architect zone form you also provide your studio name and tax ID (NIP) and, optionally, your website or Instagram profile; we use this data to send design materials, the price list and terms of collaboration. We also record which language version the enquiry was sent from. If the form is protected by Cloudflare Turnstile, your browser connects to Cloudflare’s servers, which receive your IP address and browser information and use them to tell people from bots. This is not used for tracking or advertising.
E-mail and phone contact. We receive the data you provide, usually your name, phone number, e-mail address, delivery address and the content of your message.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing, maintaining and protecting the website | Art. 6(1)(f): our legitimate interest in a secure, working website |
| Showing a Vimeo film or Google Maps | Art. 6(1)(a): your consent, given by clicking “Play film”, in the consent window or with the button in place of the map |
| Replying to your enquiry and preparing a quote at your request | Art. 6(1)(b): steps taken before entering into a contract; when you contact us on behalf of a company, Art. 6(1)(f): our legitimate interest in contacting clients’ representatives |
| Other correspondence (e.g. with media or galleries) | Art. 6(1)(f): our legitimate interest in replying to people who contact us |
| Making the piece, delivery, invoicing and accounting if we work together | Art. 6(1)(b) and (c), in connection with tax and accounting law |
| Establishing, pursuing or defending claims | Art. 6(1)(f): protection of our rights |
We do not carry out marketing on the website and do not profile visitors. We do not make decisions about you based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
You can withdraw your consent to films and the map at any time in “Cookie settings” in the website footer. Withdrawal does not affect the lawfulness of processing carried out before it.
4. Do you have to provide data
Browsing the website involves processing technical data without which it cannot be displayed. Providing data in the form and in other contact with us is voluntary, but without your name and e-mail address we cannot prepare a quote or reply to your message.
5. Who we share data with
Processors acting on our behalf, under data processing agreements:
- Cloudflare, Inc. - website hosting, content delivery network, protection against attacks and spam, and the database where we store form enquiries;
- Resend - e-mail delivery service that sends form enquiries to our mailbox;
- e-mail provider - operation of the magdalena@tekieli.pl mailbox;
- IT service providers and our accounting office - where necessary in a given matter.
Independent controllers, who decide about data on their own terms:
- Vimeo.com, Inc. - when you click “Play film”; further processing follows the Vimeo privacy policy;
- Google Ireland Limited - when you consent to the map; we may be jointly responsible with Google for collecting and transmitting data to Google, and further processing follows the Google privacy policy;
- transport and courier companies - when we deliver the piece you ordered;
- law firms - when necessary to protect our rights;
- public authorities - when required by law.
6. Transfers outside the European Economic Area
Cloudflare, Resend, Vimeo and Google group companies may process data in the United States. For companies participating in the EU-US Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision of 10 July 2023; in other cases on standard contractual clauses approved by the Commission. You can obtain a copy of the standard contractual clauses by contacting us.
7. How long we keep data
- Technical data processed by Cloudflare - for the short time needed to deliver the website and protect it against attacks, according to the provider’s rules.
- Form enquiries and correspondence that do not lead to an order - up to 12 months from the last contact.
- Data related to an order and accounting - for the duration of our cooperation and then for the period required by tax and accounting law, as a rule 5 years from the end of the year in which the tax payment deadline expired.
- Correspondence needed to protect claims - until the limitation period expires.
- Consents and chosen language stored in your browser - up to 12 months or until you clear the site data.
After these periods, we delete or anonymise the data.
8. Your rights
Under the GDPR you have the right to:
- find out whether we process your data and receive a copy of it;
- rectify inaccurate data and complete incomplete data;
- request erasure of your data or restriction of its processing;
- port data you provided to us under a contract or consent, if we process it by automated means;
- withdraw consent at any time, where processing is based on consent.
Right to object. You have the right to object at any time, on grounds relating to your particular situation, to processing of your data based on our legitimate interest (Art. 6(1)(f) GDPR). After receiving an objection we will stop processing the data for that purpose, unless we demonstrate compelling legitimate grounds that override your interests or grounds for establishing, pursuing or defending claims.
To exercise your rights, write to magdalena@tekieli.pl. We will reply without undue delay, as a rule within one month. For complex or numerous requests the period may be extended by two further months; we will let you know. Some rights are limited by law; for example, we will not delete invoices before the end of their mandatory retention period.
If you believe we process your data unlawfully, you may lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl) or with the supervisory authority in your country of residence.
9. Security
The website works only over an encrypted HTTPS connection. The form is protected against automated spam. We use technical and organisational measures appropriate to the risk to protect data against loss, unauthorised access and disclosure.
10. Changes to this policy
We update this policy when the law, the way the website works or our providers change. The current version is always available at this address, and the date at the top of the page shows when it took effect.