Privacy policy.

1. Who we are

This website is run by Communication and Creativity (CVR 44062135), a business owned by Paulina Dufek and registered in Denmark. We are the controller of the personal data described below. You can contact us about your data at any time: [email protected], +45 52 80 82 52.

2. What data we collect

This is a simple information website. We do not use advertising trackers and we do not ask you to create an account. We use analytics cookies only if you agree to them (see section 5).

• When you contact us by e-mail, phone or LinkedIn, we receive the data you choose to share with us (for example your name, e-mail address, company and the content of your message).
• Analytics data (only with your consent): if you click "Accept" in the cookie banner, Google Analytics collects information about how you use the website - for example which pages you visit, how long you stay, what device and browser you use, your approximate location (city or country) and how you found us. Google Analytics 4 does not store full IP addresses.
• Technical data: our hosting provider (Cloudflare) automatically processes your IP address and basic technical information when you visit the site. This is needed to deliver the website securely and to protect it against attacks.

3. Why we use it and on what legal basis

• To reply to your enquiry and to prepare or carry out a collaboration - Art. 6(1)(b) GDPR (steps before or under a contract).
• To run a secure website and keep our business correspondence - Art. 6(1)(f) GDPR (our legitimate interest).
• To understand how visitors use the website and improve it (Google Analytics) - Art. 6(1)(a) GDPR (your consent).

4. Who receives your data

We share data only with service providers that help us run our business: Cloudflare (website hosting, security and e-mail forwarding) and Google (e-mail and, with your consent, Google Analytics). They process data on our behalf and under data processing agreements. Some of these providers may transfer data outside the EU/EEA; such transfers are protected by EU-approved safeguards, such as Standard Contractual Clauses or the EU-US Data Privacy Framework.

5. Cookies and Google Analytics

When you first visit the website, we ask whether you agree to analytics cookies. Until you click "Accept", no analytics cookies are set and Google Analytics is not loaded. We remember your choice in your browser's local storage, which is needed for the site to respect your decision.

If you accept, Google Analytics (provided by Google Ireland Limited) sets cookies such as _ga and _ga_<ID>, which are kept for up to 2 years. Data is kept in Google Analytics for 14 months. You can change your mind at any time by clicking "Cookie settings" at the bottom of every page; if you withdraw consent, we stop loading Google Analytics.

6. How long we keep it

We keep correspondence for as long as needed to handle your enquiry and any collaboration that follows, and afterwards for as long as required by accounting and tax law or to defend legal claims. Technical server data is kept by our hosting provider only for a short period.

7. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its processing, and receive it in a portable format. Write to us at the address above and we will reply within one month. You can also file a complaint with a data protection authority - in Denmark Datatilsynet (datatilsynet.dk), in Poland the President of the Personal Data Protection Office (uodo.gov.pl).

8. Changes

If we start collecting data in new ways, for example through a newsletter sign-up form, we will update this policy before doing so.