Privacy Policy
This Privacy Policy explains how DCS Studio processes personal data of people who use the website, contact DCS Studio, send a message through the Contact form and send a project brief through Marcus AI Guide.
1. Data controller
The controller of your personal data is Dariusz Gawron, operating under the DCS Studio brand.
Controller contact address:
ul. Profesora Boleslawa Wiktora Wicherkiewicza 17/12 30-389 Krakow Poland
Contact for privacy, personal data protection, GDPR and cookies matters: cookies@dcsstudio.pl.
General contact: hello@dcsstudio.pl.
For matters concerning personal data, it is best to write to cookies@dcsstudio.pl. This address is used in particular for privacy questions, handling requests concerning personal data, matters related to cookies and contact regarding rights under the GDPR.
DCS Studio has not appointed a data protection officer. Under the currently confirmed processing model, a data protection officer is not required unless the processing model changes materially.
2. When we process data
We may process your data when you use the DCS Studio website, contact us by email, send a message through the Contact form, send a project brief through Marcus AI Guide, write to brief@dcsstudio.pl, hello@dcsstudio.pl or cookies@dcsstudio.pl, ask for information about services, a consultation, an offer or contact, use website functions that require technical tools, hosting, email or security mechanisms, or exercise your rights concerning personal data.
We do not collect data “just in case”. The scope of data depends on which function you use and what information you provide to us yourself.
3. What data we may process
3.1. Data provided in the Contact form
If you send a message through the Contact form, we process the data needed to handle the message and respond to the enquiry.
The data required in the Contact form is:
- full name;
- email address;
- message content;
- confirmation that you have read the information about personal data processing.
Optional data in the Contact form is:
- company or activity name;
- phone number.
The Contact form does not include a budget field, deadline field, attachments, newsletter or marketing consent. Confirmation that you have read the information about personal data processing is not consent to data processing within the meaning of Article 6(1)(a) GDPR and is not marketing consent.
3.2. Data provided in Marcus AI Guide
If you use Marcus AI Guide and send a project brief, we may process data entered in the form, in particular the name or name entered in the form, the company, brand, project or organisation name, email address, phone number, information about the project type, information about the project stage, selected project goals, an additional goal description if you enter one, information about the brand character, preferred timeline and indicative budget or method of determining the budget.
Marcus AI Guide may also create technical auxiliary data related to sending the form, such as the form source, form language, date and time of creating the brief and a summary of the project direction based on selected answers.
3.3. Data from email correspondence
If you contact us by email, we may process data contained in the message, in particular the sender’s email address, full name or company name if provided, message content, contact details provided in the message, information about the matter, project or enquiry, attachments if you send them, and technical information needed to handle email.
The address brief@dcsstudio.pl is used to handle project briefs. The address hello@dcsstudio.pl is used for general contact and handling messages from the Contact form. The address cookies@dcsstudio.pl is used for privacy, GDPR and cookies matters.
3.4. Website technical data
When using the website, technical data needed for its operation, security and diagnostics may be processed. This may include in particular information related to the connection, server operation, handling website requests, security, email and technical tools used to maintain the website.
The detailed scope of cookies and similar technologies is described in a separate Cookie Policy.
4. Purposes of data processing
We may process your data to handle messages and respond to enquiries sent through the Contact form, handle email correspondence, handle enquiries and project briefs, return contact, prepare a cooperation proposal, handle a pre-contractual or contractual relationship, handle privacy, GDPR and cookies matters, ensure the operation of the website, email and technical systems, archive correspondence and protect claims, and fulfil legal obligations.
The Contact form is a separate process from Marcus AI Guide. The Contact form is used to handle messages and respond to enquiries. It is not used for marketing, newsletter, profiling or automated decision-making.
Handling enquiries and project briefs through Marcus AI Guide concerns data sent through Marcus AI Guide and later correspondence concerning the project. Return contact may include responding to a message, agreeing details, preparing next steps or providing information about services. Preparing a cooperation proposal may include analysing needs, project type, goals, timeline, scope and budget.
Handling a pre-contractual or contractual relationship concerns situations where an enquiry leads to discussions about an offer, cooperation or service performance. Handling privacy, GDPR and cookies matters concerns correspondence sent to cookies@dcsstudio.pl and exercising rights related to personal data.
Ensuring the operation of the website, email and technical systems includes hosting, email, automation tools, security, diagnostics and protection against abuse. Archiving correspondence and protecting claims concerns situations where keeping correspondence is needed to document arrangements, protect rights or defend against claims. Fulfilling legal obligations concerns situations where laws require specific data to be retained, for example in accounting or tax documentation, if a given relationship leads to settlements.
5. Legal bases for processing
Depending on the purpose and nature of the matter, the legal basis for data processing may be Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract or to perform a contract.
For the Contact form, Article 6(1)(b) GDPR applies to enquiries where you ask us to take steps before entering into a contract, for example to provide information about services, discuss an offer or prepare a further step before cooperation.
The legal basis for processing may also be Article 6(1)(f) GDPR, where processing is necessary for the legitimate interests pursued by the controller, such as handling correspondence, providing responses, organising contact, website and email security, protection against abuse or protection of claims.
For other ordinary correspondence related to DCS Studio’s activity, conducted through the Contact form or by email, the controller’s legitimate interest is conducting correspondence, handling enquiries and ensuring the possibility of communication with DCS Studio.
In specific cases, the legal basis for processing may be Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation, for example accounting, tax or other obligations arising from legal provisions.
If a given function requires consent, the legal basis for processing may be Article 6(1)(a) GDPR. This may concern, for example, certain cookies, newsletter, marketing or similar activities if they are implemented. Ordinary handling of the Contact form is not based on consent under Article 6(1)(a) GDPR.
If processing is based on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
6. Contact form
The Contact form allows you to leave basic contact details and describe the matter in your own words. The purpose of the form is to handle the message and respond to the enquiry.
A submission from the Contact form is forwarded to the mailbox hello@dcsstudio.pl. The currently confirmed Contact form model does not include storing submissions in an application database, separate form database, custom WordPress storage or external form service.
In connection with handling the form, technical email or server metadata may be created if generated by email, server or security mechanisms. This Policy does not assume that technical logs store message content unless this has been confirmed.
7. Marcus AI Guide
Marcus AI Guide is an interactive form that helps collect basic information about a planned project and send it to DCS Studio.
The currently confirmed Marcus flow is as follows: the user uses Marcus AI Guide form, data is sent to a Make webhook, then handled by a Make scenario, forwarded to brief@dcsstudio.pl, and a confirmation message is sent to the user.
Marcus AI Guide uses Make within the confirmed technical flow. No active OpenAI provider, active CRM or active external database has currently been confirmed for this flow. Comments in the code regarding future integrations do not mean a current process.
Marcus AI Guide is used to collect a project brief and contact details regarding services. Sending a brief itself does not mean concluding a contract or an automatic decision to accept the project.
8. Technical tools, Make, email and hosting
To handle the Contact form, Marcus AI Guide form, email and website, we use technical tools necessary for these processes to work properly.
Make is described in this Policy only within the currently confirmed Marcus AI Guide flow: Marcus AI Guide form, Make webhook, Make scenario, forwarding the brief to brief@dcsstudio.pl and a confirmation message to the user.
Public information is available from Make regarding its DPA and subprocessors. The account-specific Make account region, account-specific DPA acceptance, account-specific list of subprocessors, detailed payload retention and detailed transfer status for this account have not been confirmed. This Policy does not present these unconfirmed elements as facts and describes Make only within the confirmed scope of the current flow.
Regardless of Make, data may also be processed by email in the dcsstudio.pl domain, hosting and the technical panel used to operate the website and email, security and anti-spam systems, and the email systems of message recipients if we send a reply to the provided email address.
The hosting and email provider used to operate the dcsstudio.pl domain is CENTIB sp. z o.o. / tb3.pl. The confirmed scope includes the provider, mailboxes hello@dcsstudio.pl, brief@dcsstudio.pl and cookies@dcsstudio.pl, and access to mailbox passwords only on the owner’s side. The exact server, email or backup regions, list of subprocessors and detailed transfer status for this provider have not been confirmed. This Policy does not present these unconfirmed elements as facts.
Data may be processed by technical providers only to the extent needed to handle the website, forms, email, security, backups, diagnostics and service maintenance.
We describe technical information to the extent needed to explain the principles of data processing.
9. Data recipients and technical providers
Your data may be disclosed or entrusted only when needed to achieve the described purposes.
Recipients or entities supporting processing may include the hosting and email provider, the Make automation tool provider within the Marcus AI Guide process, providers of email systems through which correspondence passes, providers of IT, security, website or email maintenance services, entities providing accounting, legal or administrative services if a given matter reaches the cooperation, settlement or claims stage, and public authorities if required by law.
Submissions from the Contact form go to hello@dcsstudio.pl and are not currently stored in a separate form database or forwarded to an external form service.
Data is not sold to third parties.
10. Transfers of data outside the European Economic Area
Technical tools and service providers may participate in the operation of the website, forms and email.
As of the date of preparing this Policy, a transfer of data outside the European Economic Area has not been confirmed and such a transfer has not been excluded. DCS Studio does not declare the absence of transfers without evidence. With regard to Make and CENTIB sp. z o.o. / tb3.pl, the Policy describes only currently confirmed information and does not decide unconfirmed technical details.
If data is transferred outside the European Economic Area in connection with the use of technical tools, this will take place in accordance with GDPR requirements and with appropriate safeguards.
11. Data retention period
We keep data for the period needed to achieve the purpose for which it was provided.
Data from the Contact form and ordinary correspondence is kept for the period needed to handle correspondence and achieve the contact purpose. Afterwards, if justified, data may be kept for the period needed to establish, pursue or defend possible claims. If contact leads to entering into a contract, further processing is subject to the rules applicable to the contractual relationship and required documentation.
Data from a project brief may be kept for the time needed to handle the enquiry, prepare a response, conduct project discussions or protect the controller’s legitimate interests. Email correspondence may be kept for the time needed to handle the matter, contact, project arrangements, protection of claims or compliance with legal obligations.
Messages concerning privacy, GDPR and cookies may be kept for the time needed to handle the request and demonstrate that it was properly considered. Technical data, logs, email data and backups may be kept for the period resulting from the operation of technical tools, hosting, security, backups, diagnostics and legal obligations. Data related to settlements, if they occur, may be kept for the period required by law.
After the relevant period expires, data is deleted or restricted unless further retention is needed under the law, to protect claims or to ensure system security.
In the case of backups, deleting data from active systems may not mean immediate deletion from all technical backups. Data in backups is kept for the period resulting from the operation of the service and is not used for current handling unless system restoration or security assurance is necessary.
12. Your rights
In connection with the processing of personal data, you may have the following rights: the right of access to data, the right to rectification, the right to erasure, the right to restriction of processing, the right to object, the right to data portability where applicable, the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with the President of the Personal Data Protection Office.
To exercise rights concerning personal data, write to cookies@dcsstudio.pl.
The exercise of some rights may depend on the legal basis for processing, the purpose of processing, the controller’s legal obligations and whether further retention of data is needed to protect claims or system security.
13. Voluntary provision of data
Providing data is voluntary, but in some cases necessary to handle the matter.
If you send a message through the Contact form, providing your full name, email address, message content and confirmation that you have read the information about data processing is needed to send the form and handle the message. Providing the company or activity name and phone number is voluntary.
If you send a brief through Marcus AI Guide, the form requires data needed to receive the brief and return contact. Without providing the required data, sending the brief may not be possible.
If you contact us by email, you provide data within the scope resulting from the message content. Lack of contact details may make it impossible to respond.
14. Automated decision-making and profiling
We do not use the Contact form for profiling or automated decision-making.
Marcus AI Guide is not used to make automated decisions concerning the user that produce legal effects or similarly significantly affect the user.
Some elements of Marcus AI Guide may automatically organise or compile answers to make it easier to prepare a brief and response. This does not mean automatic conclusion of a contract, automatic legal assessment or automatic acceptance of the project.
15. Cookies and similar technologies
The website may use cookies and similar technologies within the scope resulting from the actual configuration of WordPress, Complianz and website tools.
Detailed information about cookies, cookie categories, consents, cookie settings and the operation of the preferences panel is described in a separate Cookie Policy.
Contact for cookies matters: cookies@dcsstudio.pl.
This section does not replace the separate Cookie Policy.
16. Data security
We apply organisational and technical measures appropriate to the nature of the processed data and the available tools. They include in particular using hosting, email, panel security, anti-spam tools and technical solutions needed for the operation of the website and handling correspondence.
Access to data should be limited to people and tools that need it to handle enquiries, correspondence, the website, email, security or legal obligations.
17. Changes to the Privacy Policy
The Privacy Policy may be updated, in particular in the event of changes to the website, scope of services, technical tools, providers, method of data processing, legal requirements or related documents such as the Cookie Policy.
18. Contact
For privacy, personal data protection, GDPR and cookies matters, write to cookies@dcsstudio.pl.
For general matters, write to hello@dcsstudio.pl.
The data controller is Dariusz Gawron, operating under the DCS Studio brand.
Controller contact address:
ul. Profesora Boleslawa Wiktora Wicherkiewicza 17/12 30-389 Krakow Poland