Last updated: November 1, 2026
1. General Information
This Privacy Policy explains how personal data is collected, used, stored, and protected when visitors use the website https://stepanovapoliina.com (the “Website”).
The Website is a personal portfolio showcasing graphic design, web design, animation, and other creative projects.
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR).
2. Data Controller
The controller responsible for processing personal data is:
Polina Stepanova
Independent Graphic Designer
Location: Warsaw, Poland
Email: polyastep954@gmail.com
For any questions regarding personal data or this Privacy Policy, visitors may contact the Data Controller using the email address above.
3. Personal Data Collected
When visitors use the contact form on the Website, the following information may be collected:
- Name
- Email address
- Type of project inquiry
- Message content
- Any additional personal information voluntarily included in the message
The Website may also process limited technical information necessary for its operation, security, and functionality, such as IP addresses and browser-related information.
Visitors are not required to provide personal information simply to browse the portfolio.
4. Purposes and Legal Basis of Processing
Personal data is processed for the following purposes:
Responding to inquiries
Information submitted through the contact form is used to respond to messages, discuss potential projects, and communicate with prospective clients.
Legal basis: Article 6(1)(f) GDPR — legitimate interests in responding to inquiries and maintaining professional communication.
Discussing potential collaborations
When an inquiry concerns a possible contract or project, personal data may be processed to prepare a proposal or take steps requested before entering into an agreement.
Legal basis: Article 6(1)(b) GDPR — taking steps prior to entering into a contract.
Website security and functionality
Limited technical data may be processed to maintain the Website, prevent misuse, and ensure secure operation.
Legal basis: Article 6(1)(f) GDPR — legitimate interests in maintaining a secure and functional website.
Where consent is legally required for optional cookies or other data-processing activities, such processing will take place only after the relevant consent has been obtained.
5. Data Storage and Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.
Contact form submissions and correspondence are generally retained for [insert your chosen retention period], unless continued storage is necessary for an ongoing collaboration, legal obligation, or the establishment, exercise, or defense of legal claims.
Where a business relationship is established, relevant information may be retained for the period required by applicable accounting, tax, or other legal obligations.
The Data Controller takes reasonable organizational and technical measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.
6. Third-Party Services
The Website is created and hosted using Tilda Publishing.
Tilda provides website hosting, contact form functionality, and technical infrastructure.
Personal data submitted through the contact form may be processed using Tilda's services and any external services configured to receive form submissions.
The Website may contain links to third-party websites, including LinkedIn and Instagram. When visitors follow these links, the privacy policies of the respective platforms apply.
Third-party service providers may process personal data on behalf of the Data Controller where necessary to operate the Website or manage communications.
Any international transfers of personal data are subject to applicable GDPR requirements, including appropriate safeguards where required.
7. Cookies and Website Analytics
The Website may use cookies and similar technologies necessary for its functionality, security, and operation.
Depending on the Website's configuration, analytics tools may also collect information about visits and interactions.
Where optional analytics or other non-essential cookies are used, visitors will be provided with appropriate information and consent options before such cookies are activated, where required by law.
Visitors can also manage or delete cookies through their browser settings.
8. Rights of Visitors
Under the GDPR, visitors have the following rights, subject to applicable legal conditions:
- Right of access: Request information about their personal data and obtain a copy.
- Right to rectification: Request correction of inaccurate or incomplete information.
- Right to erasure: Request deletion of personal data where legally applicable.
- Right to restriction: Request limitations on the processing of their data.
- Right to data portability: Receive their data in a structured, commonly used, machine-readable format where applicable.
- Right to object: Object to processing based on legitimate interests.
- Right to withdraw consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Visitors also have the right to lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO)
Website: https://uodo.gov.pl
Requests concerning personal data may be submitted to:
polyastep954@gmail.com
The Data Controller will respond within the time limits established by applicable data protection legislation, generally within one month.
9. Providing Personal Data
Providing personal data through the contact form is voluntary.
However, a valid email address and sufficient information about the inquiry are necessary to respond to a message.
The Website does not use submitted contact form information for automated decision-making or profiling that produces legal or similarly significant effects.
10. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in the Website's functionality, data-processing practices, or applicable legal requirements.
The latest version will always be available on the Website.
Contact: polyastep954@gmail.com
Website: https://stepanovapoliina.com
