Legal
Privacy Policy
Last updated: 24 June 2026
Below you will find information about who processes the personal data you submit through the contact form and what rights you have in this regard (under the GDPR).
1. General provisions
This policy explains how I process the personal data you submit through the contact form on tarsala.art. I process the data in accordance with the GDPR (EU Regulation 2016/679) and the Polish Personal Data Protection Act of 10 May 2018.
2. Data controller
The controller of your personal data is Justyna Tarsała, a natural person running the tarsala.art website. Contact regarding personal data: tarsala.art@gmail.com.
3. What data I process
I process the data you provide in the contact form: first and last name, email address, phone number, the date and venue of your planned celebration, city, and the content of your message. I obtain your personal data directly from you, through the contact form.
4. Purpose and legal basis
I process your data to handle your enquiry and to take steps prior to entering into a potential contract. The legal basis is Art. 6(1)(b) GDPR (taking steps at your request before entering into a contract) and Art. 6(1)(f) GDPR (my legitimate interest - handling correspondence and responding). Providing the data is voluntary but necessary to respond.
5. Retention period
I keep the data for as long as necessary to handle your enquiry and our correspondence. If a contract is concluded - until the limitation periods for claims expire (generally 3 to 6 years). If no contract is concluded - I delete the data no later than 24 months after the last contact.
6. Data recipients
Your data may be processed by trusted providers acting on my behalf (processors) with whom I have data processing agreements (DPAs): website hosting - DigitalOcean, LLC, server located in Frankfurt (Germany, EEA); email delivery - Resend, Inc., data processed in EU infrastructure (Ireland). Resend, Inc. is a company based in the USA - for any access from outside the EEA, Standard Contractual Clauses approved by the European Commission apply. I do not sell your data or share it for marketing purposes.
7. Your rights
You have the right to: access your data, rectify it, erase it, restrict processing, data portability, and object to processing based on legitimate interest. To exercise these rights, write to tarsala.art@gmail.com - I will respond promptly, within one month at the latest. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).
8. Cookies
The site uses only cookies necessary for its proper functioning (e.g. remembering your language choice). I do not use third-party marketing or analytics cookies. You can restrict cookies in your browser settings.
9. Profiling and automated decisions
Your data is not subject to automated decision-making or profiling.
10. Final provisions
I may update this policy - the current version is always available on this page. Matters not covered are governed by the GDPR and Polish law.