1. Introduction

Welcome to Art Maker ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or participate in our workshops.

Art Maker is the controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at info@mkr.art.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity Data: includes first name, last name, company name, job title
Contact Data: includes email address, telephone number, and postal address
Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website
Usage Data: includes information about how you use our website and services
Marketing Data: includes your preferences in receiving marketing from us

3. How We Collect Your Data

We collect data through various methods, including:

Direct interactions: You may provide us with your Identity and Contact Data when filling forms, corresponding with us by post, phone, email, or otherwise.
Automated technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns.
Third parties: We may receive personal data about you from various third parties, such as analytics providers or advertising networks.

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

To register you as a new customer
To process and deliver your orders
To manage our relationship with you
To send you marketing communications if you have opted in
To improve our website, products/services, and customer relationships
To comply with legal obligations

5. Legal Basis for Processing

Under Polish and EU data protection laws, we need a legal basis to collect and use your personal information. Our legal bases include:

Contractual necessity: When we need to process your data to perform our contract with you
Legitimate interests: When processing is necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms
Legal obligation: When we need to comply with a legal or regulatory obligation
Consent: When you have given us specific consent to process your data

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through other means, as well as applicable legal requirements.

7. Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

Request access to your personal data
Request correction of your personal data
Request erasure of your personal data
Object to processing of your personal data
Request restriction of processing your personal data
Request transfer of your personal data
Right to withdraw consent

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

8. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

10. Third-Party Services

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

11. International Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission
Using specific contracts approved by the European Commission which give personal data the same protection it has in Europe
Using providers based in the US that are part of Privacy Shield (where applicable)

12. Children's Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal data from children under 16. If we learn we have collected or received personal data from a child under 16 without verification of parental consent, we will delete that information.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

14. Contact Information

If you have questions or comments about this policy, you may contact our Data Protection Officer (DPO) by email at info@mkr.art or by mail to:

Art Maker
Śniadeckich 4
60-774 Poznań
Poland

15. Complaints

You have the right to make a complaint at any time to the Polish Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO), the Polish supervisory authority for data protection issues (https://uodo.gov.pl/).

We would, however, appreciate the chance to deal with your concerns before you approach the UODO, so please contact us in the first instance.