privacy policy

Last updated: 2026-10-16

1. Data controller

Your personal data is controlled by Agata Krutul, Krokusowa 42 15-584, tax ID (NIP) [NIP], operating the “Na niby kwiaty” flower studio (formerly Niebo Kwiatów). Contact: kontakt@nanibykwiaty.pl, phone +48 664 957 689 or +48 604 083 104.

2. What data we collect and why

• Contact form: name, email, optionally phone, occasion, date and your message. Purpose: replying to your enquiry and preparing an offer. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(f) (legitimate interest in replying to you).
• Email, phone, messengers: the data you provide. Purpose and basis as above.
• Statistics and analytics (only after you consent in the cookie banner): anonymous or pseudonymous usage data. Legal basis: Art. 6(1)(a) GDPR (consent).
• Fulfilling orders: data needed for delivery and invoicing. Legal basis: Art. 6(1)(b) and (c) GDPR (contract, tax obligations).

3. Tools we use

• Cloudflare (Cloudflare, Inc., USA): website hosting and protection. Policy
• Web3Forms: forwarding form messages to our email. Policy
• Google Tag Manager and Google Analytics 4 (Google Ireland Ltd.): visit statistics, only with consent. Policy
• Microsoft Clarity (Microsoft Ireland Operations Ltd.): usage analysis, only with consent. Policy
• CookieScript (Objectsoft UAB, Lithuania): cookie banner and consent records. Policy
• Google Fonts and Adobe Fonts: displaying typefaces; the provider's servers see your IP address. Google, Adobe
• Instagram and Facebook (Meta Platforms Ireland Ltd.): links to our profiles only. We don't embed tracking plugins.

4. Cookies

We use essential cookies (e.g. remembering your consent and language) and, with your consent, analytics cookies. You can change or withdraw consent at any time in the cookie banner settings (icon in the corner of the page) or in your browser.

5. How long we keep data

Form messages and emails: until the conversation ends, and if an order was placed, for the period required by tax law (usually 5 years from the end of the tax year). Analytics data: according to tool settings, no longer than 14 months.

6. Transfers outside the EEA

Some providers are based or host servers in the USA. Transfers rely on the European Commission's EU–US Data Privacy Framework decision or standard contractual clauses.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object, and to withdraw consent at any time (without affecting earlier processing). Write to us: kontakt@nanibykwiaty.pl.

You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

8. Voluntary provision

Providing data is voluntary, but without it we cannot reply or fulfil an order. We do not make automated decisions or profile you.