Privacy and data

Who is responsible

Dorota Cyranowska, the painter whose site this is. For anything concerning your data: dorota@cyranowska.com.

The enquiry form

The form collects your name, email address and message. If you write from a particular painting's page, which painting you asked about is recorded too.

The basis is your own enquiry. Without these details I cannot reply. They go into this site's record of enquiries and at the same time to my mailbox, which is run by the mail provider Postale.

I keep them for as long as the conversation and anything following from it lasts; if you ask me to delete them, I delete them. They are never used for a mailing list or for anything other than replying.

Visit statistics

I use Google Analytics to see which paintings are being looked at. The Google script loads only once you click “Accept” in the bar at the foot of the page. Until then not a single request goes to Google and no cookie is stored.

After you agree, Google stores analytics cookies and counts your visit on its servers, including outside the European Economic Area. I do not ask Google for advertising data or ad personalisation, and there is no profiling.

You can withdraw your agreement at any time by clearing this site's data in your browser. Your choice is stored locally only, in browser storage, under the key “cyranowska:analytics-consent”. The site works exactly the same without it.

Server logs and abuse protection

The server keeps technical access logs containing the IP address, the time and the address of the page visited. They exist to diagnose faults and catch abuse; they are rotated and overwritten, are not linked to form enquiries, and are not used for statistics.

The form limits how many enquiries an hour may be sent, counted per IP address. That address is held only in the running process's memory for this purpose and is never written to the database.

Where the data sits

The site and its database run on a server in Amsterdam, the Netherlands, inside the European Economic Area. The photographs of the paintings and the record of enquiries are in that database.

Two things leave that server: the notification email about an enquiry (provider: Postale) and, only with your agreement, visit statistics (Google).

Your rights

You can ask for access to your data, for it to be corrected or deleted, and you can object to it being processed. An email to dorota@cyranowska.com is enough.

You also have the right to complain to the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych).

What is not here

There is no mailing list, no advertising, no ad pixels and no cross-site tracking. I do not sell or share the details you send through the form. There are no cookies other than the analytics ones described above, and those appear only after you agree.