Privacy and Cookie Policy

Last Updated: January 2026

Introduction

Welcome to our Privacy and Cookie Policy. This policy explains how we collect, use, and protect your personal data when you visit our website. We are committed to safeguarding your privacy and ensuring compliance with all relevant laws, including the EU General Data Protection Regulation (GDPR) and applicable Polish regulations. By using our site, you acknowledge that you have been informed of our data practices as described here.

Who We Are

This website (the "Site") is operated by Karol Ryś Architekt / Digital Giants Studio ("we" or "us"), a business based in Poland. For the purposes of data protection laws, we act as the data controller for any personal data processed via the Site. If you have any questions or requests regarding your personal data, you can contact us at kontakt@karolrys.pl. We do not have a designated Data Protection Officer, as our scale and nature of data processing do not require one, but we take privacy seriously and will respond to your inquiries promptly.

Information We Collect

We do not collect any personal information such as your name, address, or contact details through forms or account registrations on our Site – because we have no such forms or user accounts. However, like most websites, we do collect certain information automatically when you visit, which may be considered personal data under GDPR (e.g., online identifiers). This includes:

• Technical Data: Your device's IP address (note: anonymized by Google Analytics, described below), browser type, operating system, and similar technical information sent by your browser.
• Usage Data: Information about how you interact with our Site, such as the pages you visit, the time and duration of your visit, referral URLs, and click paths.

This data is typically collected through cookies and analytics tools (described in the next section). We do not use this data to identify you as an individual, and we do not combine it with other information to attempt to discover your identity. All data collected is used in aggregate or pseudonymized form for analytics purposes.

Additionally, our web servers may automatically log requests made to the Site (for example, logging IP addresses and page requests) to ensure security and proper functioning. These server logs are used only for administration and security monitoring and are not used to profile visitors. Such logs are protected and routinely deleted or anonymized (typically within 30 days unless needed longer for investigation of security incidents).

Cookies and Analytics

Cookies are small text files stored on your device when you visit websites. We use cookies and similar tracking technologies on our Site primarily for analytics – to understand how our website is being used and to improve its performance. We do not use cookies for advertising, profiling, or other marketing purposes, and we do not use any third-party cookies beyond those set by Google Analytics (and a cookie to remember your preferences, as described below).

When you first visit our Site, you will see a cookie consent notice. Because our Site is based in the EU (Poland) and serves international visitors, we adhere to regulations requiring prior, informed consent for the use of any non-essential cookies (such as analytics cookies). This means we will not set Google Analytics cookies (or any other non-essential cookies) unless you actively opt-in by giving consent. You have the choice to accept or reject analytics cookies, and you can change your preference at any time (see Managing Cookies below).

Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC ("Google"), to collect anonymized statistical data about how visitors use our Site. Google Analytics uses first-party cookies to distinguish unique users and sessions, helping us count visits and understand user behavior. The information generated by these cookies (such as your truncated IP address, device information, and browsing actions on our Site) is transmitted to and stored by Google on its servers. We have configured Google Analytics with privacy in mind:

• IP Anonymization: Google Analytics 4 is designed with IP anonymization enabled by default, which means it does not store or log your full IP address. In GA4, the last digits of your IP are automatically masked (turned to zeros) before geolocation and processing. This ensures that your precise IP is not recorded, helping to protect your privacy.
• No Personal Identifiers: We do not send Google Analytics any information that could directly identify you (such as name, email, or phone number), and GA4 by its terms prohibits sending personally identifiable information. The analytics data is aggregated and used only to analyze website traffic and usage patterns. We do not use Analytics for profiling individual users, nor for advertising purposes on our Site.
• Google Analytics Cookies: The main cookies set by Google Analytics on our Site are described in the table below. These cookies collect information in an anonymous form, including statistics on website traffic, user interactions, and referrer information. All Google Analytics cookies on our Site are first-party cookies, meaning they are associated with our domain. Importantly, these cookies will not be placed unless you have given consent via our cookie banner, in compliance with EU law.

Google Search Console

We also use Google Search Console, a tool provided by Google that helps us understand how our site appears in Google search results and identify any issues (like broken links or other technical problems). Importantly, Google Search Console does not set any cookies on your device and does not track individual user behavior on our Site. Because no personal data of website visitors is processed by our use of Search Console, it does not trigger any cookies or consent requirement, and is mentioned here for transparency.

Cookies We Use

Below is a list of cookies used on our Site, along with their purpose and duration:

Apart from the cookies listed above, we do not use any other cookies. Specifically, we do not use advertising cookies, social media plug-in cookies, or any third-party tracking cookies beyond Google Analytics.

How You Can Manage or Disable Cookies

Your Choices: You have the right to decide whether to accept or reject cookies (aside from those that are strictly necessary for the operation of the Site). When you first visit, our cookie banner allows you to either Accept or Decline analytics cookies. If you click "Decline" (or simply ignore the banner and continue without consenting), we will not set any analytics cookies on your device.

If you initially accepted cookies but later change your mind, you can withdraw your consent at any time. Here are ways to manage your cookie preferences:

• Cookie Settings on Our Site: Click the "Cookie Settings" link in the footer to update your consent choice.
• Browser Settings: You can also control cookies through your web browser settings. Most browsers allow you to view, delete, or block cookies.
• Google Analytics Opt-Out Plugin: Google provides an official Google Analytics Opt-out Browser Add-on.

How We Use the Collected Information

We use the limited information we collect for the following purposes:

• To Analyze and Improve Our Site: The primary use of data (via Google Analytics) is to understand how our Site is used. All analysis is done on an aggregate level – we examine trends and patterns, not individual behaviors.
• Sales Funnel Performance: Since our Site functions as a sales funnel redirecting users to Etsy, we use analytics to gauge the funnel's performance.
• Site Maintenance and Security: We may use technical information for site administration and security purposes.
• Legal Compliance: If necessary, we may use and retain information to comply with legal obligations.

Legal Bases for Processing

Under the GDPR, we must have a valid legal basis for processing personal data:

• Consent (Article 6(1)(a) GDPR): We rely on your consent for any processing of analytics data that is not strictly necessary.
• Legitimate Interests (Article 6(1)(f) GDPR): For data that is essential to the basic operation of the Site, we rely on our legitimate interests.

Data Sharing and Disclosure

We treat your data with care and do not share it with third parties except:

• Google (Analytics Provider): Data collected via Google Analytics is shared with Google LLC because Google provides us the analytics platform.
• Legal Requirements: We may disclose information to third parties if we are legally compelled to do so.
• Business Transfers: If our business or website is transferred, user data might be part of the assets transferred.

Rest assured, we do not sell your personal data to anyone.

International Data Transfers

Some of your data may be transferred to and processed in countries outside your own. Whenever we transfer your personal data out of the EEA, we ensure appropriate safeguards are in place, including:

• Adequacy Decisions
• Standard Contractual Clauses (SCCs)
• Additional technical and organizational measures

Data Retention

We retain personal data only for as long as necessary:

• Analytics Data: Retained for a maximum of 14 months from your last visit.
• Cookie Data: Cookies expire as noted in the table above.
• Server Logs: Retained only for 30 days (typically).
• Consent Records: Kept as long as the consent is relevant.

Data Security

We take appropriate security measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Access controls and strong passwords
• Data minimization principles
• Regular updates and security patching

Your Rights Under GDPR

As an individual whose personal data may be processed on our Site, you have several rights under the GDPR:

1. Right to Be Informed: Clear, transparent information about how your personal data is used.
2. Right of Access: Request a copy of the personal data we hold about you.
3. Right to Rectification: Request correction of inaccurate personal data.
4. Right to Erasure: Request deletion of personal data we hold about you.
5. Right to Restrict Processing: Ask us to limit processing of your personal data.
6. Right to Data Portability: Receive your data in a structured, machine-readable format.
7. Right to Object: Object to processing of your personal data.
8. Rights related to Automated Decision Making: Not be subject to decisions based solely on automated processing.

Exercising Your Rights: If you wish to exercise any of these rights, you can contact us at kontakt@karolrys.pl. We will respond within the timeframe required by GDPR (generally 1 month).

Right to Complain: You have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Links to Other Websites

Our Site contains links to external websites, specifically Etsy. If you click on a link that takes you to Etsy or any other third-party site, please be aware that this Privacy Policy no longer applies there. The data practices of external sites are governed by their own privacy and cookie policies.

Children's Privacy

Our Site is not directed to children under the age of 16, and we do not knowingly collect any personal data from children.

Changes to This Policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices, legal requirements, or for any other reason. When we make changes, we will update the "Last Updated" date at the top of this policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy and Cookie Policy or our data practices, please do not hesitate to contact us:

Karol Ryś Architekt / Digital Giants Studio
Email: kontakt@karolrys.pl

Thank you for reading our Privacy and Cookie Policy. We hope you have a pleasant experience on our Site, and we appreciate your trust.