This privacy policy describes the rules for processing information about you, including personal data and cookies.

1. General Information

  1. This policy applies to the website operating under the following URL: https://www.aggiekraskacarter.co.uk/
  2. The data controller is Agnieszka Kraska Carter.
  3. For matters related to personal data protection, you can contact us via email: contact@aggiekraskacarter.co.uk
  4. Agnieszka Kraska Carter is the controller of your personal data in relation to the data provided voluntarily through the website.
  5. The website gathers information about users and their behavior in the following ways:
    • Through data voluntarily entered into forms or comments, which are entered into the website’s systems.
    • By saving cookies in end-user devices (so-called “cookies”).

2. Method of Data Collection

Most data is provided voluntarily by the user by: using the contact form, adding a comment on the blog, sending an email or by following the profile on the social networking site Facebook and interacting there.
Some data may be collected automatically by tools used by the website. The newsletter system collects your IP address and information related to your activity with the newsletters sent to you, such as opening messages, clicking links, etc.

3. Collected Information

Depending on the purpose, the following information collected by the website may be processed:

  • name,
  • email address
  • data provided in correspondence sent via the contact form or email
  • content of comments added to the blog.

The scope of processed data is described below for each processing purpose.

4. Purpose of Data Processing – Details

Contact form and e-mail correspondence
When you fill in the contact form, you provide your personal data: your name, and your e-mail address. When you contact me by e-mail, you also provide your personal data in the content of the correspondence, e.g. your e-mail address. The provision of data is voluntary, but necessary in order to make contact.

The data are processed for the purpose of contacting you.

I am unable to specifically determine when the content of the correspondence will be deleted, as it may be subject to archiving. You have the right to request its deletion and/or production (if it has been archived), unless its archiving is justified by my overriding interests, e.g. defence against claims.

Legal basis: Article 6(1)(f) of the GDPR.

Comments
When adding a comment, you must provide at least a username that will be assigned to the comment (the name may include personal data such as first or last name) and an e-mail address. Providing this data is voluntary, but necessary to add a comment.

The comment you add, together with your publicised data, will be visible on the blog. You can modify or delete your comment at any time.

Legal basis: Article 6(1)(f) of the GDPR.

5. Selected Data Protection Methods

  1. Login areas and personal data entry points are secured at the transmission layer (SSL certificate). Thanks to this, personal data and login information entered on the site are encrypted on the user’s computer and can only be read on the target server.
  2. Backups are regularly performed to protect the data.
  3. Regular updates of all software used for personal data processing are an important element of data protection, including regular updates of software components.

6. Your Rights and Additional Information on Data Use

  1. In certain situations, the controller has the right to share your personal data with other recipients if it is necessary to perform a contract with you or fulfill the obligations of the controller. This applies to the following recipients:
    • Hosting company: NETMARK Internet Systems (https://www.netmark.pl)
    • Postal operators
    • Authorized employees and collaborators who use the data to operate the website.
  2. Your personal data processed by the Administrator will not be retained longer than necessary to perform activities related to them as defined by separate regulations (e.g., accounting regulations).
  3. You have the right to request:
    • Access to your personal data,
    • Correction of your data,
    • Deletion of your data,
    • Restriction of data processing,
    • Data portability.
  1. You have the right to object to the processing of your personal data for the purpose of legitimate interests pursued by the Administrator, including profiling. However, the right to object cannot be exercised if there are valid, legally justified grounds for processing that override your interests, rights, and freedoms, particularly for establishing, asserting, or defending claims.
  2. You have the right to file a complaint regarding the Administrator’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  3. Providing personal data is voluntary but necessary for the operation of the Service.
  4. Personal data is NOT transferred to third countries as defined by data protection regulations. This means we do not transfer data outside the European Union.

7. Administrator Logs

  1. Information about user behavior in the service may be logged. These data are used for managing the service.