HOW I WORK
PORTFOLIO
CONTACT

Privacy Policy

Last updated: 23.09.2026

This Privacy Policy explains how Gracja Stryszak Videography (“we”, “us”, or “our”) collects, uses, and protects personal information submitted through our website, landing pages, contact forms, and advertising campaigns, including TikTok Lead Generation campaigns.

1. Data Controller

The controller of your personal data is:

Gracja Stryszak Videography
Address: Wolkowo 58, 64-060 Wolkowo
Email: gracjastryszak@gmail.com
Phone: +48 888 702 830
Polish Tax Identification Number (NIP): 9950182612

If you have any questions regarding the processing of your personal data, you can contact us using the email address above.

2. Personal Data We Collect

When you complete our contact or lead generation form, we may collect the following information:

  • first name,

  • last name,

  • email address,

  • telephone number,

  • answers provided to questions included in the form,

  • any additional information you voluntarily provide through the form.

We may also receive information associated with the submission of a lead form through advertising platforms such as TikTok where applicable.

3. Why We Process Your Personal Data

We process your personal data in order to:

  • receive and respond to your enquiry,

  • contact you regarding the products or services you expressed an interest in,

  • assess your requirements based on the answers submitted through the form,

  • provide information, quotations, consultations, or offers requested by you,

  • take steps at your request before entering into a contract,

  • maintain records of enquiries and communications where reasonably necessary.

Where permitted by applicable law, we may contact you by telephone or email in relation to the specific enquiry or request you submitted.

We will not use your information for unrelated marketing communications where separate consent or another legal basis is required unless such consent or legal basis has been obtained.

4. Legal Basis for Processing

Where the General Data Protection Regulation (“GDPR”) applies, we process your personal data on one or more of the following legal grounds:

  • Article 6(1)(b) GDPR – where processing is necessary to take steps at your request before entering into a contract or to perform a contract;

  • Article 6(1)(f) GDPR – our legitimate interest in responding to enquiries, communicating with potential customers, and managing our business relationships;

  • Article 6(1)(a) GDPR – your consent, where consent is required for a particular type of communication or processing.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. TikTok Lead Generation

We may use TikTok advertising services, including TikTok Lead Generation or Instant Forms, to enable users to submit enquiries directly through TikTok.

When you submit a form through TikTok, the information you provide may be processed by TikTok and made available to us in accordance with TikTok’s applicable terms and privacy practices.

We use the information received through TikTok for the purposes described in this Privacy Policy, including responding to your enquiry and contacting you regarding the product or service in which you expressed an interest.

TikTok may process certain information independently in accordance with its own privacy policy. We recommend reviewing TikTok’s privacy information for further details about its processing activities.

6. Sharing of Personal Data

Your personal data may be shared with service providers that assist us in operating our business, including:

  • website and hosting providers,

  • email service providers,

  • customer relationship management (CRM) providers,

  • IT and technical support providers,

  • advertising and lead generation platforms, including TikTok, where applicable.

These providers may process personal data only to the extent necessary to provide their services to us and subject to applicable data protection requirements.

We may also disclose personal data where required by law or where necessary to establish, exercise, or defend legal claims.

7. International Data Transfers

Some of our service providers or advertising platforms may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, appropriate safeguards will be used where required by applicable law, such as adequacy decisions, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

8. How Long We Keep Your Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Information submitted through a lead or contact form will generally be retained for the period necessary to:

  • respond to and follow up on your enquiry,

  • manage a potential or existing business relationship,

  • comply with legal and accounting obligations,

  • establish, exercise, or defend legal claims.

If your enquiry does not result in a business relationship, we may delete or anonymize your information after [e.g. 12 months], unless a longer retention period is required or justified.

9. Your Rights

Subject to applicable data protection law, you may have the right to:

  • request access to your personal data,

  • request correction of inaccurate or incomplete data,

  • request deletion of your personal data,

  • request restriction of processing,

  • object to processing based on legitimate interests,

  • request data portability where applicable,

  • withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at gracjastryszak@gmail.com

If the GDPR applies to you, you also have the right to lodge a complaint with the competent data protection supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

10. Providing Your Data

Providing your personal data is voluntary. However, some information may be necessary for us to respond to your enquiry or provide the requested information or service.

If required information is not provided, we may be unable to process your request.

11. Automated Decision-Making

We do not use the personal information submitted through our lead forms to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you, unless explicitly stated otherwise.

12. Security

We take reasonable technical and organisational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, advertising activities, technology, or applicable legal requirements.