Privacy Policy

Last update: 31 October 2026

1. General Information

This Privacy Policy explains how personal data is processed in connection with the website bypaulina.art.

The data controller is Paulina M. Khan, the operator of bypaulina.art.

For any questions concerning personal data, please contact:

brief@bypaulina.art

2. Personal Data Collected

bypaulina.art is a professional portfolio and informational website. It does not offer user accounts, public comments or contact forms.

Personal data may be processed when:

• You contact me by email: your email address, name (if provided), and the contents of your message.
• You discuss or undertake professional collaboration: information necessary to communicate, agree on terms and provide services.
• You visit the website: technical information, including IP addresses, browser and device information, and cookie-related data.

3. Purposes and Legal Bases

Personal data may be processed for the following purposes:

• Responding to enquiries and correspondence: legitimate interests under Article 6(1)(f) GDPR.
• Taking steps before entering into a contract and fulfilling contractual obligations: Article 6(1)(b) GDPR, where the data subject is a party to the contract.
• Complying with legal obligations, including tax and accounting requirements: Article 6(1)(c) GDPR.
• Maintaining website security and functionality: legitimate interests under Article 6(1)(f) GDPR.
• Establishing, exercising or defending legal claims: Article 6(1)(f) GDPR.
• Using technologies that require consent: consent, where required under applicable data protection legislation.

4. Hosting and Data Recipients

The website and email services are hosted by Chmurka.pl.

The hosting and email service provider may process personal data to the extent necessary to provide technical infrastructure and maintain the services.

Other technical service providers may have access to data where necessary for website maintenance, security or communications.

Personal data may also be disclosed to competent authorities where required by law.

5. Cookies

This website uses cookies and similar technologies, including those necessary for website functionality and for remembering users’ consent preferences.

Cookie consent is managed through Complianz.

Visitors can accept, reject or change their preferences regarding optional cookies using the consent management tools available on the website.

Further information about cookies, their purposes and retention periods is provided in the separate Cookie Policy.

6. External Links

The website contains links to third-party services, including WhatsApp, LinkedIn and Upwork.

When visitors follow these links, their data may be processed according to the privacy policies of the respective service providers.

The operator of bypaulina.art is not responsible for the privacy practices of external websites.

7. Data Retention

Personal data is retained only for as long as necessary for the relevant purpose.

In particular:

• Email correspondence is retained for the time necessary to handle an enquiry and, where justified, for subsequent communication or the protection of legal interests.
• Contract-related information is retained throughout the collaboration and for an appropriate period afterwards.
• Information subject to tax or accounting obligations is retained for the period required by law.
• Technical data is retained as necessary to maintain website security and functionality.
• Cookie retention periods are described in the Cookie Policy.

8. Your Rights

Subject to the conditions set out in the GDPR, you may have the right to:

• access your personal data;
• request its rectification;
• request its erasure;
• restrict its processing;
• request data portability, where applicable;
• object to processing based on legitimate interests;
• withdraw your consent at any time where consent is the legal basis, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, please contact brief@bypaulina.art.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

9. Voluntary Provision of Data

Providing personal data when making an enquiry is voluntary. However, without contact details or information necessary to respond, it may not be possible to handle your request.

Certain personal data may be required to enter into or perform a contract.

10. Automated Decision-Making

The controller does not make decisions concerning people who contact the website based solely on automated processing that would produce legal or similarly significant effects.

11. Changes to This Policy

This Privacy Policy may be updated to reflect changes in applicable legislation, technology or website operation.

The latest version will be available at bypaulina.art.