1. General Provisions

1.1. This Cookie Policy (the “Policy”) sets out the rules for storing and accessing information on the end devices of Users by means of cookies and similar technologies, used in connection with the provision of electronic services via the website available at wazowska.com (the “Website”).

1.2. The controller of the Website and the personal data controller within the meaning of Regulation (EU) 2016/679 (GDPR) is:

• OW Atelier Olga Wazowska
• VAT ID (NIP): 9542767145
• address: ul. Moniuszki 14c/2, 40-005 Katowice, Poland
• contact e-mail: o.wazowska@gmail.com

(the “Controller”).

1.3. Using the Website without changing your browser's cookie settings, and providing consent through the visible consent-management panel, constitutes acceptance of cookies in accordance with this Policy and the choices you have made.

2. What Are Cookies

2.1. Cookies (so-called “browser cookies”) are small text files saved by a web browser on the User's end device (computer, tablet, smartphone) while using the Website. They contain information necessary for the proper functioning of the website and may also be used, among other things, to recognise the User's device, tailor displayed content, compile visit statistics, and display advertising tailored to the User's interests.

2.2. In addition to cookies, the Website may use similar technologies (e.g. local storage, tracking pixels/tags) that serve an analogous function; for the purposes of this Policy they are treated in the same way as cookies.

3. Types of Cookies Used

3.1. By duration:

• session cookies – stored until the browser is closed or the User logs out of the Website;
• persistent cookies – stored for a specified period (as indicated for the particular cookie) or until manually deleted by the User.

3.2. By origin:

• first-party cookies – placed directly by the Controller;
• third-party cookies – placed by the Controller's trusted partners, such as Google, Meta (Facebook, Instagram) or LinkedIn.

3.3. By purpose, the following categories of cookies are used on the Website:

• Necessary (functional) – required for the proper operation of the Website and to remember the User's cookie-consent choices. They do not require the User's consent; they may be blocked in browser settings, which may limit the Website's functionality.
• Analytics (statistical) – allow the collection of information on how the Website is used (including via Google Analytics and Google Tag Manager) in order to improve it. They require the User's prior consent.
• Marketing (advertising) – used to create and display advertising tailored to the User's interests and to measure its effectiveness (including via Meta Pixel and the LinkedIn Insight Tag). They require the User's prior consent.

3.4. The choice of cookie categories to which the User consents is made in the consent-management panel (cookie banner) displayed on entering the Website.

4. Detailed List of Cookies

The list below presents the tools currently used on the Website and their purpose. The names and retention periods of individual cookies may change independently of the Controller, as they depend on the providers of these tools; they are therefore indicative only.

Necessary cookies

• Provider: wazowska.com (own cookie)
• Purpose: remembering the User's cookie-consent decision and ensuring the proper, secure operation of the Website
• Example files: consent-preferences cookie (CMP)
• Retention period: up to 12 months

Analytics cookies – Google Analytics (GA4)

• Provider: Google Ireland Limited / Google LLC
• Purpose: collecting anonymised/aggregated statistics on visits, traffic sources and user behaviour, in order to improve the Website
• Example files: _ga, _ga_<number>, _gid
• Retention period: _ga and _ga_<number> – up to 2 years; _gid – 24 hours

Analytics cookies – Google Tag Manager

• Provider: Google Ireland Limited / Google LLC
• Purpose: managing and deploying other tags on the Website (including Google Analytics), without independently storing personal data in cookies
• Example files: none of its own (it loads other scripts)
• Retention period: not applicable

Marketing cookies – Meta Pixel (Facebook, Instagram)

• Provider: Meta Platforms Ireland Limited / Meta Platforms, Inc.
• Purpose: measuring the effectiveness of advertising campaigns, building audiences (including remarketing) and targeting advertising on Facebook and Instagram
• Example files: _fbp, fr
• Retention period: up to 90 days

Marketing cookies* – LinkedIn Insight Tag

• Provider: LinkedIn Ireland Unlimited Company / LinkedIn Corporation
• Purpose: measuring the effectiveness of advertising campaigns and building audiences for ad targeting on LinkedIn
• Example files: li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory
• Retention period: from the end of the session up to 2 years, depending on the file

* The “LinkedIn Insight Tag” category is activated only where the Controller runs advertising campaigns on LinkedIn and, like other marketing cookies, is subject to the User's consent given in the consent-management panel.

5. Purposes of Analytics and Marketing Cookies

Google Analytics and Google Tag Manager – the Controller uses these tools to analyse traffic on the Website, understand how Users use it (e.g. pages visited, time spent, source of the visit) and, on that basis, improve the Website and its offering. Google Tag Manager is used solely to manage and deploy other tags (including Google Analytics) and does not itself collect personal data.

Meta Pixel (Facebook, Instagram) – used to measure the effectiveness of advertising campaigns run on Facebook and Instagram, to build advertising audiences (including lookalike audiences and remarketing to people who have visited the Website), and to display advertising tailored to the User's interests.

LinkedIn Insight Tag – used (where the Controller runs campaigns on LinkedIn) to measure the effectiveness of advertising and to build audiences for the purposes of targeting advertising on LinkedIn.

6. Legal Basis for Processing

6.1. The installation and reading of necessary cookies takes place on the basis of Article 6(1)(f) GDPR (the Controller's legitimate interest in ensuring the proper functioning and security of the Website), in conjunction with Article 173(3) of the Polish Telecommunications Law Act of 16 July 2004, which does not require separate consent from the User in this regard.

6.2. The installation and reading of analytics and marketing cookies takes place solely on the basis of the User's voluntary consent (Article 6(1)(a) GDPR in conjunction with Article 173(1) of the Telecommunications Law), given by selecting the relevant option in the consent-management panel. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

7. Data Recipients and Transfers Outside the European Economic Area

7.1. In connection with the use of the tools listed in sections 4 and 5, data collected via cookies may be transferred to the following recipients:

• Google Ireland Limited / Google LLC (Google Analytics, Google Tag Manager);
• Meta Platforms Ireland Limited / Meta Platforms, Inc. (Meta Pixel – Facebook, Instagram);
• LinkedIn Ireland Unlimited Company / LinkedIn Corporation (LinkedIn Insight Tag).

7.2. The above providers are established, or otherwise process data, outside the European Economic Area, including in the United States. Such transfers are carried out with an adequate level of protection for personal data, based on mechanisms provided for under the GDPR, in particular the standard contractual clauses approved by the European Commission and, to the extent a given provider has adhered to it, the EU-U.S. Data Privacy Framework. Current information on the safeguards applied can be found in the respective providers' privacy policies.

7.3. Further information on data processing by the individual providers can be found in their privacy policies:

• Google – privacy policy: policies.google.com/privacy
• Meta (Facebook, Instagram) – privacy policy: www.facebook.com/privacy/policy
• LinkedIn – privacy policy: www.linkedin.com/legal/privacy-policy

8. Retention Period

Cookies are stored for the period indicated in section 4, or until earlier deletion by the User. After the indicated period has elapsed, cookies are automatically deleted from the User's device or renewed on the next visit to the Website, provided the User still consents to this.

9. Managing Consent and Changing Cookie Settings

9.1. On the User's first visit to the Website, a panel (banner) is displayed enabling the User to consent to particular categories of cookies, refuse such consent, or review detailed settings and make a choice for each category separately.

9.2. The User may change or withdraw previously given consent at any time, using the cookie-settings panel available on the Website.

9.3. Regardless of the settings made on the Website, the User may independently manage cookies by changing their web browser's settings, including blocking the saving of new cookies, deleting previously saved cookies, or setting notifications when cookies are about to be saved. Detailed information on this can be found in the settings/help section of the browser used. Please note that restricting the use of cookies may affect certain functionalities available on the Website.

9.4. The User may also manage advertising preferences directly with individual providers, including via:

• Google Ads Settings: adssettings.google.com;
• Meta Ad Preferences: www.facebook.com/adpreferences;
• LinkedIn Advertising Settings: www.linkedin.com/psettings/advertising;
• the industry-wide platform: www.youronlinechoices.eu.

10. User Rights

In connection with the processing of personal data by means of cookies, the User has the following rights under the GDPR:

• the right of access to their data and to obtain a copy of it;
• the right to rectification (correction) of data;
• the right to erasure of data;
• the right to restriction of processing;
• the right to data portability;
• the right to object to the processing of data;
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
• the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland), if the User considers that the processing of their data infringes the GDPR.

To exercise the above rights, please contact us at the e-mail address indicated in section 1.2.

11. Changes to the Policy

The Controller reserves the right to make changes to this Policy, in particular in connection with changes in the law, the scope of the Website's functionality, or the analytics and marketing tools used. The current version of the Policy is always available on the Website, and the date of its last update is indicated at the beginning of the document.

12. Contact

For any matters relating to this Policy and the processing of personal data by means of cookies, please contact the Controller:

• OW Atelier Olga Wazowska, ul. Moniuszki 14c/2, 40-005 Katowice, Poland
• e-mail: o.wazowska@gmail.com