The controller of personal data processed in connection with the use of the Service is:

details: Szymon Poźniak UI/UX Studio, Poland (NIP/VAT: PL5492469537), trading as Towasze Studio

e-mail: hello@towasze.studio

(hereinafter: the “Controller”).

The Controller may process the following personal data of Users:

a) name and email address – in the case of contacting the Controller or subscribing to a newsletter,

b) data provided in the content of a message sent to the Controller (e.g. via a contact form or email),

c) technical data related to the use of the Service, in particular: IP address, cookie identifiers, information about the web browser and operating system, information about how the Service is used (e.g. visited subpages, time spent on the Service).

In the case of purchasing Products, the Controller may receive from external Sales Platforms a limited scope of transaction-related data, in particular the Buyer’s email address or order identifier, to the extent necessary to provide technical support or handle complaints.

The Controller does not process payment card data or other financial data related to payments for Products.

Personal data is processed for the following purposes:

a) handling inquiries addressed to the Controller
legal basis: Article 6(1)(f) GDPR (legitimate interest consisting in communication with Users),

b) operating a newsletter
legal basis: Article 6(1)(a) GDPR (consent),

c) statistical analytics and improvement of the functioning of the Service
legal basis: Article 6(1)(f) GDPR (legitimate interest consisting in analyzing the use of the Service),

d) handling technical support or complaints related to Products
legal basis: Article 6(1)(f) GDPR,

e) establishing, pursuing or defending claims
legal basis: Article 6(1)(f) GDPR,

f) verification of Product purchase in the case of providing additional materials or files related to the Product
legal basis: Article 6(1)(f) GDPR (legitimate interest consisting in verifying the right to use the Product).

The purchase of Products is carried out via external Sales Platforms.

In the case of purchases made via Lemon Squeezy, this platform acts as a Merchant of Record and is the controller of personal data to the extent necessary to process the transaction and handle payments.

In the case of purchases made via Webflow Marketplace, Webflow Inc. is the controller of personal data within the purchase process.

In the case of accessing a purchase via Framer Marketplace, personal data is processed within the checkout process carried out by Lemon Squeezy, which acts as the controller in this scope.

The Controller may receive from Sales Platforms a limited scope of transaction-related data solely to the extent necessary to provide technical support, handle complaints, or verify the purchase of a Product where additional materials or files related to the Product are made available.

Personal data may be transferred to entities providing technical or analytical services to the Controller, in particular hosting and IT infrastructure providers, and providers of analytical tools.

Such entities process data only to the extent necessary to perform services for the Controller.

Some entities processing data may be located outside the European Economic Area, in particular in the United States.

In such cases, data transfers are carried out on the basis of appropriate safeguards, in particular European Commission adequacy decisions or standard contractual clauses.

Personal data is stored for the period necessary to achieve the purposes of processing, in particular:

a) data related to correspondence – for the duration of communication and the period necessary to handle the inquiry,

b) data related to technical support or complaints – for the period necessary to resolve them and potentially pursue claims,

c) data processed on the basis of consent – until such consent is withdrawn.

The data subject has the right to:

a) access personal data,

b) rectify personal data,

c) erase personal data,

d) restrict processing,

e) object to processing,

f) data portability.

Where data is processed on the basis of consent, the data subject has the right to withdraw such consent at any time.

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office.

Providing personal data is voluntary, however in some cases it may be necessary to respond to an inquiry or provide technical support.

Personal data is not used for automated decision-making or profiling within the meaning of Article 22 GDPR.

The Service may use cookies for the following purposes:

a) ensuring proper functioning of the Service,

b) collecting statistics on the use of the Service,

c) improving the performance of the website.

The User may manage cookies via their web browser settings.

The Controller may introduce changes to this Privacy Policy for legal or organizational reasons.

The current version of the Privacy Policy is published in the Service