GDPR
Privacy policy
Last updated: 3 July 2026
Data controller
The controller of your personal data is FENIX studio Morena, Piecewska 31/9, 80-288 Gdańsk, Poland.
For matters concerning personal data, contact us by phone at +48 606 531 403 or in person at the studio.
What data we process
Contact form: the name, phone number and message you provide voluntarily. We do not collect sensitive data and do not require an account.
Technical data: our hosting provider processes standard server data (including IP address and browser information) needed to deliver and secure the site.
Purposes and legal bases
Handling your enquiry and arranging a visit - based on your consent (Art. 6(1)(a) GDPR) and our legitimate interest in responding to your contact (Art. 6(1)(f) GDPR).
Ensuring the security and correct operation of the site - our legitimate interest (Art. 6(1)(f) GDPR).
Anonymous visit analytics - solely on the basis of your consent given in the banner (Art. 6(1)(a) GDPR).
Recipients and service providers
We entrust data to trusted providers acting on our behalf: Cloudflare (site hosting and anonymous analytics) and Telegram (delivery of form messages). We do not sell data or share it for marketing purposes.
You make bookings in the external Booksy system, which is an independent controller of your data - its own privacy policy applies there.
Transfers outside the EEA
Some providers (Cloudflare, Telegram) may process data outside the European Economic Area. This takes place on the basis of appropriate safeguards, in particular the Standard Contractual Clauses approved by the European Commission.
Retention period
We keep enquiry data only for as long as needed to handle the matter, then delete it. We do not build a permanent marketing database from it.
Cookies and analytics
The site uses only the essential browser storage needed to run and to remember your consent choice. We do not use tracking cookies.
Optionally we use anonymous, cookie-less analytics (Cloudflare Web Analytics) that does not identify individuals. It loads only after you accept in the banner, and your choice is stored in the browser's local storage (not a cookie). You can withdraw consent at any time by clearing the site data in your browser.
The contact form keeps an unfinished message (name, phone, text) in your browser’s local storage, on your device only, so a page reload does not lose it. Nothing is sent anywhere until you press “Send”; it is deleted after a successful submission, after 7 days, and immediately when you use the “Clear” button next to the form.
Your rights
You have the right to access your data, rectify it, erase or restrict its processing, the right to data portability, to object, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). To exercise these rights, contact us by phone.
You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown above.