Privacy Policy

Last updated: August 31, 2026

This Privacy Policy explains how personal data of visitors to Bochenek Painting Website (the “Website”) is processed and protected, including in connection with the newsletter sign-up, the contact form, and cookies.

  1. Data Controller

The controller of personal data collected through the Website is:

Karolina Bochenek-Świderska

Contact e-mail: contact@bochenekpainting.com

For any questions regarding the processing of your personal data, please contact us at the e-mail address above.

  1. What Data We Collect and Why

2.1 Newsletter

If you sign up for the newsletter using the form available on the Website (powered by the MailPoet plugin for WordPress), we process your e-mail address (and, if the form collects it, your name or other information you voluntarily provide) in order to:

  • send you newsletter content about paintings, news, art exhibitions and updates,
  • track open and click statistics for newsletter e-mails (if this feature is enabled in MailPoet), to improve the quality of the content we send.

We keep this data until you unsubscribe from the newsletter (an unsubscribe link is included in every e-mail) or object to further processing.

Newsletter e-mails are sent through an external SMTP provider: MailPoet Sending Service (MailPoet / Automattic), which acts as a data processor on our behalf in this respect, under a data processing agreement.

2.2 Contact Form

If you use the contact form on the Website, we process the information you provide (e.g. name, e-mail address, phone number, message content) in order to respond to your inquiry and, if we start working together, to prepare an offer or provide the requested service.

We keep this data for as long as necessary to handle your inquiry, and, where a business relationship is established, for the period required by applicable law (e.g. tax and accounting regulations).

2.3 Cookies and Similar Technologies

The Website uses cookies to:

  • ensure the Website functions correctly,
  • analyze traffic and visit statistics (e.g. via Google Analytics, if used),
  • remember your preferences.

Details on the types of cookies used and how to manage them are set out in Section 7 below.

  1. Legal Basis for Processing

We process personal data on the following legal bases:

  • Art. 6(1)(a) GDPR — your consent (e.g. newsletter sign-up),
  • Art. 6(1)(b) GDPR — necessity for taking steps prior to entering into a contract, or for performing a contract (e.g. handling quote requests, providing painting services),
  • Art. 6(1)(c) GDPR — compliance with a legal obligation to which we are subject (e.g. tax law),
  • Art. 6(1)(f) GDPR — our legitimate interest (e.g. establishing or defending legal claims, statistical analysis of Website traffic).
  1. Recipients of Data

Your data may be shared with:

  • providers of technical and IT services (e.g. Website hosting provider, MailPoet plugin provider, SMTP provider used for newsletter delivery),
  • accounting and legal service providers, where necessary to fulfil our obligations,
  • public authorities, where required by law.

We do not sell your personal data and do not share it with third parties for marketing purposes without your consent.

  1. Transfers Outside the European Economic Area (EEA)

If any of the service providers we use (e.g. an SMTP or analytics provider) processes data outside the EEA, such transfer is carried out with appropriate safeguards in place, in particular the European Commission’s standard contractual clauses or another mechanism compliant with the GDPR.

  1. Data Retention

We retain personal data for:

  • as long as necessary to fulfil the purpose for which it was collected (e.g. until you unsubscribe from the newsletter),
  • the period required by applicable law (e.g. tax regulations — typically 5 years),
  • until any potential claims related to a contract become time-barred.
  1. Your Rights

In relation to the processing of your personal data, you have the right to:

  • access your data and receive a copy of it,
  • rectify (correct) your data,
  • request erasure of your data (“right to be forgotten”),
  • request restriction of processing,
  • data portability,
  • object to processing,
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (this applies to consent-based processing, e.g. the newsletter — you can unsubscribe at any time via the link in each e-mail),
  • lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa. If you are located in another EEA country, you may also contact your local data protection authority.

To exercise any of these rights, please contact us at the e-mail address given in Section 1.

  1. Cookies — Details

Cookies are small text files stored on your device when you use the Website. We use:

  • Necessary cookies — required for the Website to function properly,
  • Statistical/analytics cookies — allowing us to analyze how the Website is used (e.g. Google Analytics),
  • Functional cookies — remembering your preferences.

You can change your cookie settings in your browser at any time, including blocking or deleting cookies already stored. Please note that restricting cookies may affect certain features of the Website.

  1. Data Security

We apply appropriate technical and organizational measures to protect the personal data we process against unauthorized access, loss, destruction, or unauthorized alteration.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, in particular to reflect changes in the law or in the services we offer. Any changes will be published on the Website with an updated “Last updated” date.

  1. Contact

If you have any questions about this Privacy Policy or about how we process your personal data, please contact us:

E-mail: contact@bochenekpainting.com