Privacy Policy

For a good start – great that you visited our site www.noonewaystudio.com and the way we process your personal data is of no concern to you. Below you will find the purposes, legal basis and period of personal data processing indicated separately for each purpose of data processing.

To begin with, we want to emphasize that your data is safe with us. We ensure the confidentiality of any data you provide to us, protect it from unauthorized access, and take appropriate security and data protection measures as required by data protection laws.

  1. General Information.

1.1 The administrator of your personal data is Magdalena Horanin If you have any doubts about the privacy policy, you can contact us at any time by sending a message to hello@noonewaystudio.com.

1.2 RODO (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data) grants you the following rights related to the processing of your personal data:

  1. The right to access your data and receive a copy of it,
  2. The right to rectify (amend) your data,
  3. The right to erasure (if, in your opinion, there is no basis for us to process your data, you can request that we erase it),
  4. The right to restrict data processing (you can request to restrict data processing only to storage or performance of activities agreed with you),
  5. The right to object to processing (you have the right to object to processing on the basis of legitimate interest; you should indicate the particular situation that you think justifies us stopping the processing covered by the objection. We will stop processing your data for these purposes unless we demonstrate that the grounds for our processing override your rights or that your data are necessary for us to establish, assert or defend claims),
  6. The right to data portability (you have the right to receive from us in a structured, commonly used machine-readable format the personal data you have provided to us on the basis of a contract or your consent; you can have us send this data directly to another entity),
  7. The right to lodge a complaint with a supervisory authority (if you find that we are processing your data unlawfully, you can file a complaint about it with the President of the Office for Personal Data Protection or any other competent supervisory authority).

The rules related to the exercise of the rights indicated above are described in detail in Articles 16 – 21 of the RODO. Remember that you can also request that we provide you with information about what data we hold about you and for what purposes we process it. All you need to do is send an email to hello@noonewaystudio.com

1.3 Your personal data may be processed by entities whose services we use. They may have access to your personal data if the services they provide involve or may involve the processing of personal data to the extent related to such access. This includes, in particular, entities such as a web host, email service providers, website maintenance provider, law firms, marketing service providers, accounting firms, cloud software providers, etc. Remember that your data is secure and processed only to the extent necessary. In addition, if necessary, your personal data may be shared with entities, authorities or institutions authorized to access the data under the law, such as police, security services, courts, prosecutor’s offices, as well as tax offices to the extent necessary to carry out tax and accounting obligations.

1.4 We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the United States. The providers of these tools guarantee an adequate level of personal data protection through the relevant compliance mechanisms provided for by the RODO or the use of standard contractual clauses. The storage of personal data on servers located in third countries occurs within the framework of Google services (described in this privacy policy), whose provider is Google Ireland Limited, and within the framework of the Gmail and Hostinger mailing system.

1.5 We use tools that may take certain actions depending on the information collected through tracking mechanisms (profiling and behavioral advertising). However, we believe that these actions do not have a significant impact on you, as they do not differentiate your situation as a customer and do not affect the terms of the contract you may enter into with us.

1.7 Comments.

We provide on our site the possibility to add comments thanks to the system Disqus[1]  . The use of this system is based on the Disqus terms and conditions, which you accept as its user. Within the Disqus system, we do not have access to your personal information, except for your nickname defined in the Disqus system and your image, if any, within your user account in the Disqus system. The Disqus system provider is an independent administrator of your personal data processed within the Disqus system.

2. purposes and activities of personal data processing[2]  .

2.1 Contact.

Data processed: name, e-mail address plus possibly data contained in the body of the message (providing data is voluntary but necessary to make contact).

Purpose of processing: to establish contact

Processing period: the content of the correspondence may be subject to archiving and we are not able to clearly determine when it will be deleted.

Legal basis: article 6(1)(f) RODO, i.e. our legitimate interest. The legal basis for post-contact processing is also our legitimate purpose of archiving correspondence for internal purposes (Article 6(1)(f) RODO).

Entitlements: You have the right to request the history of correspondence you have had with us (if archived), as well as to request its deletion, unless its archiving is justified by our overriding interests, such as defense against potential claims on your part.

2.2 Newsletter.

Data processed: first name and e-mail address (providing data is voluntary but necessary to subscribe to the newsletter.

Purpose of processing: sending newsletters. The mailing system we use tracks your actions taken in connection with messages sent to you. Accordingly, we have information about which messages you opened, within which messages you clicked on links, etc.

Processing period: the duration of the newsletter service and also for archiving purposes in order to be able to prove that you have given your consent to receive the newsletter in the past.

Legal basis: consent (Article 6(1)(a) RODO) given when signing up for the newsletter.

Eligibility: You can unsubscribe from the newsletter at any time by clicking on the dedicated link included in each message sent as part of the newsletter, or by simply contacting us. You can rectify your data or object to the processing of your personal data. Due to our legitimate interest (Article 6(1)(f) RODO), we will not remove your data from the database. Deletion of such data would prevent us from proving that you have given your consent to receive the newsletter in the past.

2.3 User Account.

Processed data: e-mail address and password (providing data is voluntary, but necessary to create an account. As part of editing your account data, you can provide your further data).

Purpose of processing: to provide you with the electronic service of providing you with a user account.

Processing period: You can delete your account at any time. If you choose to do so, your data will continue to be stored in the database so that we can identify you as a returning user in the future, should you decide to use the site again as a registered user. In this regard, the legal basis for processing your personal data is our legitimate interest – Article 6(1)(f) of the RODO.

Legal basis: a contract concluded under the terms and conditions described in the regulations – Article 6(1)(b) RODO.

2.4 Procurement.

Processed data: data necessary to complete the order, i.e.: first and last name, billing address, company data, e-mail address, telephone number, tax ID number. (Provision of data is voluntary, but necessary to place an order).

Purpose of processing: performance of the contract concluded by placing an order, issuing an invoice and including it in the accounting records, archival and statistical purposes, and direct marketing of our own products and services.

Processing period: the time necessary to process the order, and then until the expiration of the statute of limitations for claims under the contract.

After this deadline, the data may still be processed by us for archival or statistical purposes, e.g. to identify a returning customer and also for direct marketing of our own products and services until you object.

Legal basis: performance of a contract concluded by placing an order (Article 6(1)(b) of the DPA), issuance of an invoice (Article 6(1)(c) of the DPA), inclusion of the invoice in accounting records (Article 6(1)(c) of the DPA), direct marketing of our own products and services (Article 6(1)(f) of the DPA), and for archival and statistical purposes (Article 6(1)(f) of the DPA).

Entitlements: In the case of order data, you do not have the option to rectify the data once the order has been processed. You also cannot object to data processing and demand deletion of data until the expiration of the statute of limitations for contractual claims. Similarly, you cannot object to the processing of data and demand the deletion of data contained in invoices. You may object to data processing for the purposes of direct marketing of products and services.

2.5 Recovering abandoned shopping carts.

Data processed: e-mail address

Processing purpose: to be able to finalize your order. (For this purpose, your personal data collected by us in connection with the initiation of your order is processed.)

Processing period: You may object to the processing of your data for the purposes of abandoned cart recovery by clicking on the link available within the message sent as part of abandoned cart recovery.

Legal basis: legitimate interest (Article 6(1)(f) RODO).

2.6 Complaints and withdrawal.

Data processed: name, home address, telephone number, e-mail address, bank account number. Provision of data is voluntary, but necessary to make a complaint or withdraw from the contract.

Purpose of processing: execution of the complaint procedure or withdrawal procedure

Processing period: the time necessary to carry out the complaint or withdrawal procedure. Complaints and withdrawal statements may furthermore be archived in order to be able to demonstrate the complaint or withdrawal process in the future

Legal basis: for the purpose of the complaint procedure or withdrawal procedure (Article 6(1)(c) of the DPA), and then for archival purposes, which is our legitimate interest (Article 6(1)(f) of the DPA).

Entitlements: In the case of data contained in complaints and withdrawal declarations, you do not have the opportunity to rectify such data. You also cannot object to the processing of the data and request deletion of the data until the expiration of the limitation period for claims under the concluded contract. However, after the expiration of the limitation period for claims under the concluded contract, you may object to our processing of your data, as well as demand the deletion of your data from the database.

3. Cookies[3] 

3.1 Cookies and other tracking technologies. Our website uses cookies.

Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone), which can be read by our ICT system (our own cookies) or the ICT system of third parties (third-party cookies). Some of the cookies we use are deleted when your browser session ends, i.e. when you close it (so-called session cookies). Other cookies are stored on your terminal device and allow us to recognize your browser the next time you visit the site (persistent cookies).

3.2 Cookie Consent.

  • When you visit the site for the first time, you are shown information about the use of cookies, along with a question about your consent to the use of cookies.
  • You can always change your cookie settings from within your browser, or delete cookies altogether. Browsers manage cookie settings in different ways. See your browser’s help menu for explanations on how to change your cookie settings.
  • You can also manage your cookie settings by installing special add-ons that allow you to control cookies.
  • Disabling or restricting cookies may cause difficulties in using our website, as well as many other websites that use cookies.

3.3 Server Logs.

  • Using the site involves sending queries to the server where the site is stored. Each query directed to the server is recorded in the server logs.
  • The logs include, among other things, your IP address, the date and time of the server, information about your web browser and the operating system you are using.
  • Logs are saved and stored on the server. The data stored in the server logs are not associated with specific people using the site and are not used by us to identify you.
  • Server logs are only support material for the administration of the site, and their contents are not disclosed to anyone except those authorized to administer the server.

3.4 Google Analytics.

  • We use the Google Analytics tool provided by Google LLC, based in the USA.
  • The purpose is to create statistics and analyze them in order to optimize our websites. 
  • The data collected is not personal information and does not provide any way to identify you. The information we have access to as part of Google Analytics is, in particular: information about the operating system and the web browser you use, the sub-pages you view within our site, the time you spend on our site and on its sub-pages, the source from which you go to our site.
  • As part of Google Analytics, we use Advertising Functions such as demographic and interest reports, the age range you are in, gender, approximate location, interests determined by your online activity.
  • In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses cookies from Google LLC regarding the Google Analytics service.

3.5 Google Ads.

  • We use the Google Ads advertising program operated by Google LLC,
  • The purpose is to conduct advertising campaigns, including remarketing, and the basis is the legitimate interest of marketing its own products or services. 
  • The data collected is not personal data and does not give the possibility of your identification.
  • When you visit our website, a remarketing cookie from Google is automatically left on your device, which, with the help of a pseudonymous identifier (ID) and based on the pages you visit, enables interest-based advertising.
  • Further processing of information only takes place if you have given your consent to Google to link your browsing history and application usage to your account, and to use information from your Google account to personalize the ads that are displayed on the websites.
  • If you are then logged in when you visit our website on Google, Google will use your data together with Google Analytics data to create and define target group lists for remarketing purposes on different devices. For this purpose, Google temporarily combines the collected information with Google Analytics data to create the target groups.
  • In order to use Google Ads, we have implemented a special Google Ads conversion pixel in the code of our site. The pixel uses cookies from Google LLC regarding the Google Ads service. From our site, using the mechanism for managing cookies, you can disable these cookies. You can manage your Ads settings directly from the Google website: https://adssettings.google.com/.
  • Details related to Google Ads data processing at: https://policies.google.com/privacy.

3.6 Facebook Ads and Insights.

  • We use marketing and analytics tools available through Facebook (Meta Platforms Inc., based in the USA).
  • The purpose is to market their own products or services, as well as analysis and statistics.
  • As part of our site, we have implemented the Facebook Pixel, which automatically collects information about your use of our site in terms of the pages you view, in order to target you with ads personalized to your behavior on our site.
  • The information collected as part of Facebook Pixel does not identify you. They only allow us to see what actions you have taken within our site. We can also see what age range you are in, what gender you are, where you connect to the Internet from.
  • Details about Facebook’s privacy policy can be found at: https://www.facebook.com/privacy/explanation.

3.7 Community tools.

  • Our website uses plug-ins and other social tools provided by social networks such as Facebook, Instagram, Twitter. [4] 
  • When displaying our website containing such a plug-in, your browser establishes a direct connection with the servers of social network administrators (service providers). The content of the plug-in is transmitted by the respective service provider directly to your browser and integrated into the site. Thanks to this integration, service providers receive information that your browser has viewed our site, even if you do not have a profile with the given service provider or are not logged in with them at the moment. This information (along with your IP address) is sent by your browser directly to the service provider’s server (some servers are located in the USA) and stored there. If you are logged into one of the social networks, this service provider will be able to directly associate your visit to my site with your profile on the given social network.
  • You can also completely prevent plug-ins from loading on the site by using the appropriate extensions for your browser, such as script blocking.
  • Logging out of a particular social network prior to visiting our website will prevent data collected during your visit to our website from being associated directly with your profile on that particular social network.
  • If you use a particular plug-in, such as by clicking on the “Like” or “Share” button, the corresponding information will also be sent directly to the server of the respective service provider and stored there.
  • The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contacting you and your rights in this regard and the possibility to make settings to ensure the protection of your privacy are described in the privacy policies of individual service providers. Facebook – https://www.facebook.com/legal/FB_Work_Privacy, Instagram – https://help.instagram.com/155833707900388. ,Twitter- https://twitter.com/en/privacy

3.8 Google Tag Manager.

  • We use the Google Tag Manager tool provided by Google LLC.
  • The Google Tag Manager tool is used to manage the tags (markup) of a website through an interface. With the help of Google Tag Manager, we control the advertising campaigns we run and the way you use our sites.
  • Google Tool Manager implements only tags. Its use does not involve storing cookies or collecting personal data. The tool allows other tags to operate, which may collect data under certain circumstances. However, Google Tool Manager does not access this data.
  • If the saving option has been deactivated at the domain or cookie level, this will apply to all tracking tags implemented through Google Tag Manager.
  • We carry out activities in this regard based on our legitimate interest in the form of marketing our own products or services and optimizing our websites.

3.12 Disqus.

  • We use Disqus Inc, a US-based system that gives you the ability to leave comments on our sites.
  • The Disqus comment system uses cookies to ensure the proper functioning of the comment system.
  • Information collected using cookies, Disqus may also use for marketing purposes, which is beyond our influence.
  • For details on the privacy of the Disqus system, visit: https://help.disqus.com/terms-and-policies/disqus-privacy-policy.
  • It is possible to disable chat-related cookies from the cookie management from our website, but by doing so you will lose the ability to communicate through comments.

3.14 Content from external services.

  • Our pages are embedded with content from external sites, in particular videos from YouTube. Vimeo.
  • In this connection, cookies from Google LLC related to the YouTube service are used, including DoubleClick cookies.
  • Preventing the attribution of data collected during video playback or reading other content on our website directly to your profile on a particular site is possible by logging out of that site before visiting our site, as well as, for example, by blocking scripts.
  • YouTube-related cookies are loaded only when the video is played, so refraining from watching the video will prevent them from loading
  • The purpose and scope of data collection and its further processing and use by service providers, as well as your other rights related thereto, are described in the privacy policies of individual service providers.

3.15. Tik Tok pixel

  • We use the marketing tools available on the TikTok website, operated by TikTok Technology Limited, based in Ireland for the purpose of marketing our own products or services and for analysis and statistics.
  • We have a TikTok Pixel implemented within our site, with which we can optimize campaigns and measure the effectiveness of ads. In addition, we can track site visitors’ actions, such as “view page” or “buy,” and create audience segments to re-engage previous site visitors or model doubles to find new customers.
  • The TikTok pixel collects information available through standard web browsers such as Chrome. These include information about the ad that a TikTok user clicked on or the event that was triggered, the time the Pixel event was triggered (used to determine when actions took place on the site, such as when a page was displayed, when a product was purchased, etc.), the IP address used to determine the geographic location of the event, and to determine device make, model, operating system and browser information.
  • You have full control over whether TikTok displays personalized ads in the TikTok app. TikTok does not display personalized ads without your consent. You can turn on personalized ads by clicking “Me” in the TikTok app, visiting the settings page, pressing the three dots in the upper right corner, then clicking “Personalization and data” and then using the toggle. You can change this setting at any time.
  • For more information on privacy and cookies policy, visit TikTok’s dedicated website at https://www.tiktok.com/legal/privacy-policy-eea?lang=en

Please note that if any of the information we provide about our privacy policy or cookies is unclear to you, we are available to you by email at hello@noonewaystudio.com.