Privacy & Cookies Policy
Hi there!
If you've come here, it's a sure sign that you value your privacy. We understand it perfectly, which is why we are getting you a document in which you will find in one place the rules for personal data processing and the use of cookies and other tracking technologies in connection with our web functioning: www.plumcatstudio.com.
This Privacy Policy has been made in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (referred to as "GDPR")
This Privacy Policy has been structured in the form of questions and answers. We chose this form for the transparency and readability of the information presented to you. Below you will find a table of contents of this Policy corresponding to the questions we answer further in this document.
- Who is the controller of your personal data?
- Who is the contact person regarding personal data?
- What personal data do we collect?
- Where do we get your personal data from?
- Is your data safe?
- What are the purposes of your personal data processing?
- How long will we keep your personal data?
- Who are the recipients of your personal data?
- Do we transfer your personal data to third countries?
- What rights do you have regarding your personal data processing?
- Do we use cookies, and what exactly are cookies?
- Why do we use cookies?
- Can you disable cookies?
- Why do we use our own `'First-party`' cookies?
- What third-party cookies do we use on our website?
- Do we track your behavior on our website?
- Do we target you with customized ads?
- How can you manage your privacy?
- Can this Privacy Policy be changed?
If you have any doubts about the Privacy Policy, you can contact us anytime by sending a message to info@plumcatstudio.com.
#1: Who is the controller of your personal data?
The controller of your personal data is Dawid Sobieski, running a business under the name "Dawid Sobieski Plumcat Studio," registered under the address: ul. Brązowa 43/6, Szczecin, Poland, NIP: 9552231937.
#2: Who is the contact person regarding personal data?
In matters related to personal data protection and broadly understood privacy, you can contact us at info@plumcatstudio.com.
#3: What personal data do we collect?
Depending on the purpose, we may process the following information about you:
- First name and Last name,
- Address,
- Email address,
- Phone number,
- Data contained in email correspondence,
- IP address,
- Approximate location,
- CV/profile photo,
- Statistics related to received newsletters,
- Interest in specific topics,
- The scope of the processed data has been precisely described in relation to each processing purpose. Information in this regard can be found in the following part of this Policy.
#4: Where do we get your personal data from?
In most cases, you send them over yourself. It happens when:
- You're subscribing to our newsletter,
- You're contacting us via e-mail,
- You're following our social media channels or interacting with our social media content.
In addition, some information about you may be automatically collected by the tools we use:
- The mechanism of the website and the newsletter system collect your IP address,
- The mechanism of the newsletter system collects information about your activity concerning the content sent to you as part of the newsletter, such as opening messages, clicking links, etc.,
- Third-party cookies collect Anonymous Information related to your activities on the website.
#5: Is your data safe?
We are committed to protecting your personal data. We analyzed the risks associated with individual processes of processing your data and then implemented appropriate security and personal data protection measures. If you have any questions regarding your personal data, please get in touch with us at info@plumcatstudio.com.
# 6: What are the purposes of your personal data processing?
You can find a list of purposes below:
- Newsletter management,
- Correspondence management,
- Fulfillment of tax and accounting obligations,
- Social media management,
- Recruitment purposes.
Newsletter management - additional information
By subscribing to our newsletter, you're providing us with your name and e-mail address. Providing data is voluntary, but necessary to subscribe to the newsletter.
In addition, the system used to handle the newsletter saves your IP number and determines your approximate location and the mail client you use to manage e-mail. This system tracks your actions in connection with the newsletter messages sent to you. Therefore we also get the information about which messages you have opened, which messages you have clicked on links, etc.
The data provided by you in connection with the newsletter subscription are used to send you the newsletter. The legal basis for their processing is your consent expressed when subscribing to the newsletter.
You can unsubscribe from the newsletter anytime by clicking on the dedicated link in each message sent as part of the newsletter or by contacting us.
Despite unsubscribing from the newsletter, your data will still be stored in the database to identify the returning subscriber and possible defense of claims related to sending you the newsletter, in particular, to demonstrate the fact that you consented to receive the newsletter and the moment of its withdrawal.
You can modify your personal data provided for receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by contacting us.
Correspondence management - additional information
By contacting us via e-mail, you provide us with your personal data, particularly the e-mail address, name, and surname. Providing data is voluntary but necessary to make contact.
Your data is processed in this case to contact you.
The content of correspondence may be archived, and we cannot clearly determine when it will be removed. You have the right to request a correspondence history (if it was archived) and demand its removal unless its archiving is justified due to overriding interests, e.g., defense against potential claims on your part.
Fulfillment of the tax and accounting obligations - additional information
If we issue an invoice for you, it is included in the accounting documentation, which will be kept for the period required by law. Your personal data is processed to fulfill our tax and accounting obligations in such a situation.
Social media management- additional information
If you follow our social media or interact with the content we publish, we see your publicly available data on your social profile. We process this data only within a given social network and only to manage a given social network.
Recruitment purposes - additional information
If you participate in our recruitment process by sending your CV via the website or by contacting us in person, by correspondence, by phone, or via social media, your personal data is processed for recruitment purposes.
#7: How long will we keep your personal data?
Data storage periods have been set separately for each processing purpose. The storage of personal data will take place as long as it is necessary to achieve each particular storage purpose.
#8: Who are the recipients of your personal data?
External service providers that are involved in your personal data processing of your personal data are:
- The hosting provider that stores the data on the server,
- A cloud computing service provider where your personal data may be stored,
- Mailing system provider, who keeps your personal data if you are a newsletter subscriber,
- CRM system provider in which we store your data to improve the customer service process and for archival purposes,
- Invoicing system provider where your data is stored for invoicing,
- Our accounting that processes your data that is visible on invoices,
- Technical support services that could get access to personal data if the technical work carried out relates to areas in which personal data is stored,
- Other subcontractors could get access to personal data if the scope of their activities requires such access.
All entities listed above process your data based on personal data processing agreements and guarantee appropriate personal data protection.
Your data may be available to a legal adviser or advocate bound by professional secrecy if necessary. The need may result from using legal assistance that requires access to your personal data.
Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax, settlement, and accounting obligations. It applies to any declarations, reports, statements, and other accounting documents in which your personal data is included.
In addition, your personal data may be made available to entities, bodies, or institutions authorized to access data under the law, such as police, security services, courts, and prosecutor's offices.
#9: Do we transfer your data to third countries?
Yes, some processing operations of your personal data may involve their transfer to third countries.
We transfer your personal data to third countries in connection with the use of tools that store personal data on servers in third countries, particularly in the USA (e.g., MailChimp, Google, Asana, etc.). The providers of these tools guarantee adequate personal data protection through appropriate compliance mechanisms provided by the GDPR, mainly through standard contractual clauses.
#10: What rights do you have regarding your personal data processing?
The GDPR grants you the following potential rights related to the processing of your personal data:
- The right to access your data and receive a copy thereof,
- The right to rectify (correct) your personal data,
- The right to remove your personal data,
- The right to limit your personal data processing,
- The right to object to your personal data processing,
- The right to transfer your personal data,
- The right to withdraw consent to the processing of your personal data if you have previously given such consent,
- The right to complain to the supervisory authority.
You can always ask for information about the personal data we store and for what purposes we process it. Just send a message to info@plumcatstudio.com.
#11: Do we use cookies, and what exactly are cookies?
Our website uses cookies.
Cookies are small text information stored on your device (e.g., computer, tablet, smartphone), which can be read by our ICT system (own “First-party” cookies) or ICT systems of third parties (“Third-Party” cookies). Cookie files may contain and store specific information which ICT systems can access for particular purposes.
#12: Why do we use cookies?
We use cookies based on your consent, except when cookies are necessary to provide electronic services to you properly.
Cookies that are unnecessary for the proper provision of electronic services remain blocked until you consent to use cookies. During your first visit to the website, we display a message asking for your consent and the ability to manage cookies, i.e., decide which cookies you agree to and which you want to block.
Remember that disabling or limiting the use of cookies may prevent you from using some of the functions available on the website and cause difficulties in using the website. For example, if you block cookies of social media plug-ins, buttons, widgets, and social media functions implemented on the website may not be available to you.
#13: Can you disable cookies?
Yes, you can manage cookie settings in your web browser. You can block all or some selected cookies. You can also block cookies for specific websites. You can delete previously saved cookies and other websites and plug-in data anytime.
We also give you the ability to control cookies directly from our website. We have implemented a cookie management mechanism that allows you to block cookies you do not want.
#14: Why do we use our own `'First-party`' cookies?
First-party cookies are used to ensure the proper functioning of individual website mechanisms, such as the correct submission of forms visible on the website, support for newsletter forms, etc.
First-party cookies also store information about cookie settings defined by you made from the level of the cookie management mechanism.
#15: What third-party cookies do we use on our website?
The website uses the following third-party cookies:
- Google Analytics,
- Google Ads,
- Hotjar,
- Facebook Pixel,
- Facebook Connect and other social plugins.
Google Analytics - additional information
We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out these activities to create statistics and analyze them to optimize the website.
A unique Google Analytics tracking code has been implemented in the website code to use Google Analytics. The tracking code uses Google LLC cookies for the Google Analytics service. You can block the Google Analytics tracking code anytime by installing a browser add-on provided by Google.
Google Analytics automatically collects data about your use of the website. The data collected this way is most often transferred to Google servers, which may be located worldwide, and stored there.
Due to activated IP anonymization, your IP address is shortened before forwarding. Only in exceptional cases the full IP address is transmitted to Google servers and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not combined with other Google data.
Within Google Analytics we have access only to Anonymous Information.
Google Analytics and Google Analytics 360 services have been certified by the independent security standard ISO 27001. ISO 27001 is one of the most widely recognized standards in the world and warrants that the systems supporting Google Analytics and Google Analytics 360 meet the relevant requirements.
Hotjar - additional information
We use the Hotjar tool to understand your needs better and optimize the website in terms of your experience. The plug-in is provided by an external entity, i.e., Hotjar Limited, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta.
Hotjar records each website visitor, makes a video recording of their movement on the site and generates the so-called heat maps. Within Hotjar use, we don't have access to information that allows us to identify our web visitors because Hotjar does not record the process of completing forms. Within Hotjar, we have access to the following data:
information about the operating system and web browser that you use,
pages you browse within the website,
time spent on the website and its particular pages,
transitions between individual pages within the website,
the source from which you go to the website,
places within the website that you click,
A unique Hotjar tracking code has been implemented in the website code to use Hotjar. The tracking code uses cookies from Hotjar Limited. Hotjar stores the information collected as part of cookies as part of a pseudonymous user profile. Neither Hotjar nor we use this information to identify you.
Facebook Custom Audiences - additional information
As part of the Facebook Ads advertising system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, we use the Custom Audiences function to target specific groups of users with targeted advertising messages. Facebook Pixel has been implemented as part of the website to target you with ads personalized regarding your web-behavior. It automatically collects data about your use of the website. The data collected in this way is most often transferred to Facebook servers, which may be located worldwide, particularly in the US.
The information collected as part of Facebook Pixel is anonymous, i.e., it does not allow us to identify you. Depending on your activity on the website, you can reach a specific group of recipients, but we do not identify individuals belonging to these groups in any way.
The Facebook Pixel can track and record (among others) your following behaviors:
- Displaying the content of a specific page,
- Completing a particular form, e.g., subscribing to a newsletter.
However, we'd like to inform you that Facebook may combine the collected information with other information about you gathered as part of your use of Facebook and use it for its own purposes, including marketing. Such activities are no longer dependent on us; you can search for information about them directly in Facebook's privacy policy.
Google Ads - additional information
We use the remarketing functions available as part of the Google AdWords system operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out these activities for the marketing of our products or services.
When visiting our website, a Google remarketing cookie file is automatically left on your device, which collects information about your web activity. Thanks to the data collected in this way, we can display ads targeting you within the Google network - depending on your behavior on the website. For example, suppose you're seeing a particular product. In that case, the remarketing cookie file will record information about this fact, allowing us to direct you to an ad regarding this product or any other that we consider appropriate. This ad will be displayed to you within the Google network when you're online, browsing different websites, etc.
When using Google Ads, we use only Anonymous Information.
Using Google AdWords, we can only define the groups of recipients we would like our ads to reach. On this basis, Google decides when and how to present the ad to you.
Further information processing takes place only if you have consented to Google linking your browsing history with your account and using data from your Google account to personalize website ads. In this situation, Google will use your data to create and define lists of target groups for remarketing purposes on various devices. For this purpose, Google temporarily combines the data collected with other data to create target groups.
If you don't want to receive personalized ads, you can manage your ad settings directly on the Google website: https://adssettings.google.com/
Facebook Connect and other social plugins - additional information
Our website uses plugins, buttons, and other social tools, hereinafter jointly referred to as "plugins," provided by social media platforms such as Facebook, Instagram, Linkedin, and Twitter.
By displaying a website containing a plugin of a given social network, your browser sends information about the visit to the administrator of this social network. Since the plugin is a part of the social network embedded in the website, the browser sends information about the request to download the content of the given social network to the website.
The plugins collect certain information about you, such as your user ID, the website you visit, date and time, and other information about your web browser.
Social network administrators use some of this information to personalize the viewing experience of our site.
Social network administrators may also use the data collected by plugins, such as improving their products, creating user profiles, analyzing and optimizing their activities, and targeting advertisements.
Social network plugins collect and transmit information to the administrators of these websites even when you browse our website without being logged in to your social network account. Then, however, the browser sends a more limited set of information.
If you have logged in to one of the social media platforms, the site administrator can directly assign a visit to our website to your profile on a given social networking site.
Suppose you want to avoid social networking platforms assigning data collected during visits to our website directly to your profile on a given website. In that case, you must log out of this platform before visiting our website. You can also completely prevent the loading of plugins on the website by using the appropriate extensions for your browser, e.g., blocking scripts.
In addition, using some plugins may involve publishing certain information as part of your social profiles. For example, information about clicks on the "Like" button may be available on your Facebook timeline. Of course, if you share any content on your social media using plugins embedded on our website, this sharing will naturally be visible in your profile.
As for the details related to the processing of information collected by plugins by administrators of social media platforms, you can find everything in the privacy policies of individual service providers:
- Facebook,
- Twitter,
- LinkedIn,
- Instagram.
#16: Do we track your behavior on our website?
Yes, we use Google Analytics, Google AdWord, Facebook Pixel, and Hotjar tools to collect information about your activities on our website. These tools have been described in detail as part of the question on third-party cookies.
#17: Do we target you with customized ads?
Yes, we use Google Ads. We can target ads to specific target groups defined based on various criteria such as age, gender, interests, profession, work, and activities.
#18: How can you manage your privacy?
You can manage your privacy by:
- Cookie settings in the web browser,
- Browser plug-ins supporting cookie file management,
- Additional cookie management software,
- Incognito mode in the web browser,
- Behavioral advertising settings,
- The mechanism for managing cookies on our website,
- Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout,
- Google Ads Settings: https://adssettings.google.com/,
- Facebook Ads Settings: https://www.facebook.com/ads/settings,
- HotJar Opt-out: https://www.hotjar.com/legal/compliance/opt-out
#19: Can this Privacy Policy be changed?
Yes, we can modify this privacy policy, in particular, due to technological changes and law changes.