GDPR

Privacy policy

Document version: 2026-05-05. This is an English summary of the data processing rules at FALE Studio. The Polish version on /polityka-prywatnosci is the legally controlling text.

1. Data controller

FALE Studio (Warsaw, ul. Francuska 5, 03-906 Warszawa). Contact: fale.kepa@gmail.com.

2. Categories of data

• full name, email, phone, optional show / company name;
• free-text notes you enter on the booking form;
• payment identifiers from Przelewy24 (sessionId, orderId, status, amount) — no card data;
• technical metadata: hashed IP and user-agent, kept only to prove a given consent was given.

3. Purposes & lawful bases

• Booking and contract performance — GDPR art. 6(1)(b).
• Tax and accounting obligations — GDPR art. 6(1)(c).
• Marketing (only with a separate consent) — GDPR art. 6(1)(a) and Polish ePrivacy equivalent. Withdrawable at any time.

4. Recipients

• payment provider PayPro SA (Przelewy24), Poznań, Poland;
• transactional email provider (Resend), optional SMS / WhatsApp providers (Twilio, Meta);
• infrastructure provider Vercel and managed database Neon, acting as processors.

5. Retention

• booking data — for the contract term and statutory limitation periods (typically 6 years);
• accounting documents — 5 years from the end of the financial year of issue;
• marketing consent — until withdrawal;
• GDPR consent logs — for the lifetime of the client account plus 3 years after deletion.

6. Your rights

• access, rectification, erasure, restriction;
• portability where processing is based on a contract or consent;
• objection to direct marketing;
• withdrawal of consent at any time (without affecting the lawfulness of earlier processing);
• complaint to the Polish supervisory authority (UODO, ul. Stawki 2, 00-193 Warszawa).

To exercise any of the above, email fale.kepa@gmail.com.

7. International transfers

Some sub-processors (Resend, Twilio, Meta) may process data outside the EEA. Where that happens, transfers are governed by the EU Standard Contractual Clauses.

8. Cookies

The booking app does not set marketing or analytics cookies. Only strictly necessary session identifiers required to operate the form and payment flow are used.

9. Policy updates

Material changes are published as a new document version (the version field above is bumped) and we retain the previous text so we can reconstruct what you saw when you booked.