Privacy policy
Effective from: 13 June 2026
1. Data Controller
The controller of your personal data is Maria Sławek – violinist, active as a performing and teaching artist.
For all matters relating to the processing of personal data, you can contact us at: maria.slawek@gmail.com.
2. Purposes and legal bases
We process your personal data for the following purposes:
- Replying to a message sent via the contact form – based on consent (Art. 6(1)(a) GDPR) and the controller’s legitimate interest in conducting correspondence (Art. 6(1)(f) GDPR).
- Keeping anonymous visit statistics to improve the website – based on the controller’s legitimate interest (Art. 6(1)(f) GDPR).
- Ensuring the correct operation and security of the website (server logs) – based on the controller’s legitimate interest (Art. 6(1)(f) GDPR).
- Complying with legal obligations (e.g. archiving, possible claims) – based on Art. 6(1)(c) GDPR.
3. Scope of data processed
- Contact form: first and last name, e-mail address, subject and content of the message, as well as the IP address stored together with the submission.
- Visit statistics: an anonymised and hashed IP address, the date of the visit and the referring address. We do not store browser information (user-agent) or geolocation data. Statistics run on our own server and are not shared with third parties, and the tool honours the browser “Do Not Track” signal.
- Server logs: standard technical data (including IP address and request time) generated automatically by the server.
4. Data recipients
Your data may be transferred to:
- the hosting provider: cyber_Folks S.A., ul. Wierzbięcice 1B, 61-569 Poznań, Poland,
- the e-mail provider used to deliver messages from the contact form: Google Ireland Limited (Gmail).
Correspondence sent via the contact form is handled on the controller’s behalf by her manager – messages are delivered to a mailbox operated within the Gmail service.
We do not transfer your data to third countries (outside the EEA) unless we use services whose servers are located outside the EU (e.g. Google’s e-mail service) – in which case the transfer is based on appropriate safeguards provided for in the GDPR (e.g. standard contractual clauses).
5. Data retention period
- Correspondence from the contact form – for as long as necessary to handle the matter and then up to 24 months after its conclusion, for archival purposes and possible claims.
- Visit statistics – stored only in anonymised form that does not allow identification of a person.
- Server logs – usually up to 30 days.
After these periods the data is deleted or anonymised.
6. Your rights
You have the right to:
- access your personal data,
- rectify (correct) your data,
- erase your data (“right to be forgotten”),
- restrict the processing of your data,
- data portability,
- object to the processing,
- withdraw consent at any time (withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal),
- lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland).
To exercise your rights, please contact us at: maria.slawek@gmail.com.
7. Cookies
The website uses only the necessary cookies required for its correct operation:
| Name | Provider | Purpose | Retention |
|---|---|---|---|
pll_language | Polylang (our website) | Remembers your chosen website language | 1 year |
We do not use cookies for marketing or advertising. Visit statistics work without cookies (based on a hashed IP address). We do not use tools such as Google Analytics, Meta Pixel or other external tracking systems.
Content embedded from external services (e.g. the Spotify player – see section 9) may set its own cookies, over which we have no control.
You can change your cookie settings in your browser at any time. Disabling cookies may affect some of the website’s features (e.g. remembering the language).
8. Spam protection
The contact form uses a “honeypot” technique (a hidden trap field) to limit spam. We do not use external systems such as reCAPTCHA, hCaptcha or Cloudflare Turnstile, so the form does not send your data to such external services.
9. Embedded content and social media
We embed the Spotify (Spotify AB) music player on the website – as a frame (iframe) presenting selected recordings. Viewing a page that contains such a player causes your browser to connect to Spotify’s servers, which may process data (including your IP address) and set their own cookies under the Spotify privacy policy. We have no control over the scope of this processing.
We also provide links to the artist’s profiles on external services: Instagram, Facebook, Spotify and YouTube. Clicking a link takes you to that service, which processes data under its own privacy policy. These are ordinary links – we do not embed those platforms’ tracking widgets on the website.
10. Changes to the privacy policy
We reserve the right to amend this policy. We will announce any significant changes visibly on the website.
Last updated: 13 June 2026