Privacy policy
Effective from: 24.10.2026
1. Who is responsible for your data
The controller of personal data is Kinga Piskuła, running a business under the name Kinga Piskuła Lux Stories, address: Obrzębin 56A, 62-700 Obrzębin, Poland, NIP (tax ID) 6682021668, REGON 544878997.
For matters concerning personal data, write to agencja@luxstories.pl or call +48 667 212 507.
2. Why and on what legal basis we process data
| Purpose | What data | Legal basis | How long |
|---|---|---|---|
| Replying to an enquiry sent via the form, email or phone and preparing an offer | first name, company name, email address, phone number, selected service or the scope chosen in the pricing calculator, message content | Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract); for correspondence unrelated to an offer, Art. 6(1)(f) GDPR (our legitimate interest: replying to messages) | 12 months from the last contact, if we do not enter into a contract |
| Entering into and performing a contract | data from the contract and correspondence | Art. 6(1)(b) GDPR | until the end of the contract, then until claims become time-barred |
| Accounting and taxes | data on invoices | Art. 6(1)(c) GDPR (obligation under tax law) | for the period required by tax law |
| Pursuing and defending against claims | data needed for the case | Art. 6(1)(f) GDPR | until claims become time-barred |
| Visit statistics (Google Analytics 4) | cookie identifiers, pages visited, approximate location, device and browser type | Your consent: Art. 6(1)(a) GDPR, and for storing cookies Art. 399 of the Polish Electronic Communications Law | 14 months |
Providing your data is voluntary. Without an email address or phone number we will have no way to reply to you.
We do not make automated decisions about you and we do not profile you.
3. Who we share data with
Only with companies that help us run the website and the business, and only to the extent necessary:
- the hosting company whose servers run the website: LH.pl Sp. z o.o.;
- Google Ireland Ltd. - email (Google Workspace), which receives messages from the form, and Google Analytics 4 (only with your consent);
- the accounting office that keeps our books: Biuro Rachunkowe Optima (Turek);
- Make (make.com) - an automation tool that passes form enquiries to a spreadsheet in Google Sheets (Google Ireland Ltd.).
Google may also process data in the USA. The transfer is based on the European Commission decision on the EU-US Data Privacy Framework, which Google LLC has joined.
4. Your rights
You have the right to:
- access your data and receive a copy of it;
- rectify your data;
- erase your data;
- restrict processing;
- port the data we process on the basis of a contract or consent;
- object to processing based on our legitimate interest;
- withdraw your consent at any time - without affecting the lawfulness of what we did before it was withdrawn. You can withdraw cookie consent using the "Cookie settings" link in the website footer;
- lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl).
To exercise these rights, write to agencja@luxstories.pl.
5. Cookies
Cookies are small files stored in your browser. We store only those necessary for the website to work, and the others - only after you give consent in the banner. Until you do, Google Analytics does not store any files in your browser.
| Name | Who stores it | Purpose | Type | Expiry |
|---|---|---|---|---|
| cookies_and_content_security_policy | us | remembers your choice in the cookie banner | necessary, no consent | 1 year |
| _ga | Google Analytics 4 | distinguishes visitors from each other for statistics | statistics, with consent | 2 years |
| _ga_TVV6CV4LZT | Google Analytics 4 | stores the session state for statistics | statistics, with consent | 2 years |
We do not currently use marketing or advertising cookies.
You can change your choice at any time using the "Cookie settings" link in the footer. You can also delete cookies or block them in your browser settings.
6. Links to social media
The website contains links to our profiles on Instagram and Facebook. Simply visiting our website does not send data to Meta. After clicking a link you go to a service run by Meta Platforms Ireland Ltd., which processes your data under its own rules.
7. Server logs
The server running the website records in its logs, among other things, the IP address, the date and time of the request and information about the browser. We use them only to maintain and secure the website (Art. 6(1)(f) GDPR). The logs are kept for the period set by LH.pl as part of the hosting service.
8. Changes to this policy
When we change the way we process data, we will update this page and the date at the top.
