Privacy policy

    Last updated: 5 October 2026

    This page explains what data I collect through skrzypcekrakow.pl, why, how long I keep it and what your rights are. It is the information required by Article 13 of the GDPR.

    Who is the data controller

    The data controller is Gabriela Higson-Spence, violin teacher in Kraków. For anything related to your personal data, email gabriela@skrzypcekrakow.pl or call +48 503 470 930.

    What data I collect

    • Contact form details: first name, last name, email address, phone number and your message (for example your child's age or previous experience).
    • How you found the site: campaign parameters (utm), Google or Facebook ad click IDs (gclid, fbclid), the referring website and the first page you visited. These are stored in your browser and attached to your enquiry.
    • Technical data: your browser type (user agent) when you submit the form, and information about any form errors.

    Why and on what legal basis

    • Replying to your enquiry, arranging and teaching lessons: Article 6(1)(b) GDPR (steps before entering into a contract, and performing it).
    • Understanding which ads and sources bring enquiries: Article 6(1)(f) GDPR (legitimate interest in spending the advertising budget sensibly).
    • Making sure the form works and no enquiry gets lost: Article 6(1)(f) GDPR.

    Who receives the data

    I do not sell your data or share it with other companies for their own purposes. I use service providers that process data on my behalf:

    • Vercel Inc. – website hosting,
    • Supabase Inc. – the database where enquiries are stored,
    • Formspree Inc. – a backup copy of form submissions,
    • Neo (Titan) – email,
    • Google Ireland Ltd. (Google Ads) and Meta Platforms Ireland Ltd. (Meta Pixel) – measuring ad performance.

    Transfers outside the EEA

    Some providers are based in the USA. Data is only transferred there under mechanisms provided by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

    How long I keep data

    I keep enquiry data for as long as we are in contact. If lessons go ahead, I keep it for the duration of the lessons and then until any legal claims would be time-barred. If lessons don't go ahead, I delete the data once it is no longer needed for contact. Information about how you found the site is kept together with the enquiry.

    Your rights

    • access your data and receive a copy,
    • correct inaccurate data,
    • have your data erased or its processing restricted,
    • data portability,
    • object to processing based on legitimate interest,
    • lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

    To exercise these rights, email gabriela@skrzypcekrakow.pl.

    Do I have to provide data

    Providing data is voluntary, but without your name, email address and phone number I cannot reply to your enquiry. I do not make automated decisions or profile you within the meaning of the GDPR.

    Cookies and browser storage

    The site uses the Google Ads tag and the Meta Pixel, which may set cookies to measure ad performance. Vercel Speed Insights measures page speed without cookies. Information about how you found the site is saved in your browser's local storage.

    You can block or delete cookies and site data in your browser settings, and turn off ad personalisation in your Google and Facebook account settings.