1. Introduction

This Privacy Policy defines the principles of processing personal data of users of the pixelduetweb.pl website (hereinafter referred to as the „Website”) by PixelDuetWeb civil partnership (hereinafter referred to as the „Administrator”). This policy is an integral supplement to the Terms of Service available on the Website.

Protecting the privacy of users is our priority. Below we explain what data we collect, how we process it, and what rights users have.

2. Personal Data Administrator

Administrator’s Details:
Name: PixelDuetWeb civil partnership
Address: 38-600 Lesko, Al. Jana Pawła II 26, Poland
Phone: +48 530583656
Email: pixelduetweb@gmail.com

Any questions regarding personal data processing or exercising rights under GDPR should be directed to the above email address.

3. Purposes and Legal Bases for Data Processing

3.1. Email Address Processing – Using the AI Generator

Processing purposes:

• Technical – enabling the use of the AI Generator available on the Website
• Communication – sending the result of website visualization generation to the provided email address

Legal basis: Article 6(1)(b) GDPR – processing is necessary to perform the contract concluded between the Administrator and the user

Storage period: Data will be stored for the duration necessary to fulfill the contract, i.e., until the generation result is sent to the provided email address

Data requirement: Providing an email address is mandatory to use the AI Generator

3.2. Email Address Processing – Newsletter (Additional Purpose)

Processing purposes:

• Direct marketing – adding the email address to the mailing list for sending information about PixelDuetWeb services, products, news, and promotions (hereinafter referred to as „Newsletter”)

Legal basis: Article 6(1)(a) GDPR – processing is carried out based on voluntary, conscious, specific, and unambiguous consent expressed

Storage period: Data will be stored for the duration of consent, i.e., until the user withdraws it

Data requirement: Providing Newsletter consent is entirely voluntary and is not required to use the AI Generator

Form of consent expression: Checking a separate checkbox confirming the desire to receive the Newsletter. This field is not checked by default – the user must actively express consent

3.3. Collection of Technical Data – Cookies and Analytics

Processing purposes:

• Ensuring proper Website functionality
• Personalizing user experience
• Collecting statistical data on how the Website is used
• Displaying personalized advertisements (if appropriate consent is given)

Legal basis:

• For essential cookies: Article 6(1)(b) GDPR (contract performance)
• For analytical, personalization, and marketing cookies: Article 6(1)(a) GDPR (voluntary consent)

Detailed information about cookie types and procedures for expressing and withdrawing consent are contained in Section 4 of this Privacy Policy and in the Terms of Service.

4. Cookies

4.1. General Rules Regarding Cookies

A cookie is a small text file placed by the Website server on the hard drive of a computer, mobile device, or other end-user device. Cookies are strictly assigned to a given user and can only be read by the web server in the domain that generated the cookie.

Cookies cannot be used to run programs, download files without the user’s knowledge, or transfer viruses to the user’s device.

4.2. Types of Cookies Used

On our Website, we use the following types of cookies:

A) Essential (Required) Cookies
Purpose: Enable proper Website functionality and services
Content: Collect only technical information necessary for service provision
Consent: Do not require separate user consent (basis: Article 6(1)(b) GDPR)
Right to information: User has the right to information about their use
Storage period: In accordance with technical requirements (until session expiration or according to server settings)
Examples: Session ID, technical preferences, security tokens

B) Analytical/Statistical Cookies
Purpose: Collect data on how the user uses the Website to improve its functionality and content
Content: Information such as number of visits, time spent on the Website, navigation between pages
Consent: Require the user to provide separate, conscious, and voluntary consent
Storage period:

• Detailed data: up to 13 months
• Aggregated data: may be stored for up to 25 months
  Responsibility: Cookie content may be managed by third parties (e.g., Google Analytics)

C) Personalization/Preference Cookies
Purpose: Remember user settings and preferences
Content: Information about user choices (e.g., language, Website appearance, accessibility settings)
Consent: Require the user to provide separate, conscious, and voluntary consent
Storage period: As determined by the user or up to 12 months maximum
Benefits: Enable better adaptation of the Website to individual needs

D) Marketing/Advertising Cookies
Purpose: Serve marketing purposes and display personalized advertisements
Content: Information about user interests and browsing history
Consent: Require the user to provide separate, conscious, and voluntary consent
Sharing: May be shared with marketing partners and advertising networks
Storage period: In accordance with provider policy (may range from several months to a year)

4.3. Expressing and Withdrawing Cookie Consent

Expressing consent:

• The user expresses consent for the use of optional cookies through the cookie banner displayed on the Website
• The user can choose to accept all cookies or customize settings
• Detailed preferences can be changed in the cookie settings panel available on the Website

Withdrawing consent:

• The user has the right to withdraw given consent at any time
• Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal
• Consent can be withdrawn through:
  • Changing preferences in the cookie settings panel on the Website
  • Changing cookie settings in the internet browser
  • Contacting the Administrator

4.4. Managing Cookies

The user has full control over cookies. Management options:

• Browser settings: Each modern internet browser (Chrome, Firefox, Safari, Edge, etc.) allows cookie management
• Preferences panel on the Website: A dedicated panel is available for setting preferences
• Deleting cookies: Users can delete all cookies at any time through browser settings
• Blocking cookies: It is possible to configure the browser to automatically block cookies

Note: Disabling some essential cookies may cause problems with proper Website functionality.

5. Collection and Processing of Personal Data – Details

5.1. Data Collected Directly from User

Email address:

• Collected when using the AI Generator
• Required to send the generation result
• Stored in the Administrator’s secure database

Newsletter consent (optional):

• Collected by checking a separate checkbox
• Not checked by default
• Entirely voluntary

5.2. Data Collected Automatically

Technical data:

• IP address
• Browser type and version
• Operating system
• Screen resolution
• Date and time of Website visit
• Browsing history (user path through the Website)
• Referral source (where the user came from to reach the Website)

Purpose of collection: Improve Website functionality, security, analytics

6. Personal Data Security

6.1. Security Measures

The Administrator has implemented appropriate technical and organizational measures to protect personal data against:

• Unauthorized access
• Loss or destruction
• Accidental modification
• Unauthorized disclosure

Specific measures:

• Data encryption during transmission (SSL/TLS)
• Secure storage in a database with limited access
• Regular backups
• Security monitoring

6.2. Access to Data

Only authorized Administrator employees involved in the following have access to personal data:

• Technical support for the AI Generator
• Newsletter management
• Website administration
• User support

Each employee is required to maintain data confidentiality.

7. Sharing Personal Data

7.1. Categories of Data Recipients

User email address may be shared with the following categories of recipients:

1. Administrator employees and partners:

• Persons directly involved in AI Generator support
• Persons managing the Newsletter mailing list
• Technical support staff

2. IT and hosting service providers:

• Server infrastructure providers
• Email service providers
• Database management system providers
• Limitation: These providers have access only to technical information necessary for service provision

3. Public bodies:

• In case of legal requirement (court decision, law enforcement agencies)
• For public safety protection
• For enforcement of Administrator’s rights

4. Third parties (only with user consent):

• No one outside the above categories will receive user data without explicit consent

7.2. Data Transfer Outside the EEA

The Administrator does not transfer personal data outside the European Economic Area.

8. User Rights Under GDPR

Each user has the following rights regarding their personal data:

8.1. Right of Access to Data (Article 15 GDPR)

The user has the right to obtain:

• Confirmation of whether their personal data is being processed
• A copy of their personal data
• Information about processing purposes, categories of recipients, and storage periods

How to exercise: Send a request to pixelduetweb@gmail.com with the subject „Request for Data Access”

8.2. Right to Rectification (Article 16 GDPR)

The user has the right to correct:

• Inaccurate data
• Incomplete data
• Example: Changing email address in the Administrator’s database

8.3. Right to Erasure – „Right to be Forgotten” (Article 17 GDPR)

The user has the right to have their data deleted, in particular:

• After withdrawing Newsletter consent
• If data is no longer necessary for the purpose
• Upon objection to processing
• In case of illegal or unlawful processing

Limitations: The right may not apply if processing is required by law

8.4. Right to Restrict Processing (Article 18 GDPR)

The user has the right to request processing restriction in cases of:

• Disputing the accuracy of data
• Unlawful processing (but the user requests restriction instead of deletion)
• When data is no longer necessary, but the user requires it to establish claims
• Upon objection to processing

Effect: Data will be stored but not processed/used

8.5. Right to Data Portability (Article 20 GDPR)

The user has the right to receive their data in:

• Structured format
• Commonly used format
• Machine-readable format (e.g., CSV, JSON)

The user can then transmit the data to another controller.
Format: Data will typically be provided in CSV format

8.6. Right to Object (Article 21 GDPR)

The user has the right to object to data processing for:

• Marketing purposes
• Profiling
• Statistical purposes

After expressing an objection, the Administrator will stop sending marketing communications.

8.7. Right to Withdraw Consent (Article 7(3) GDPR)

The user may withdraw given consent (e.g., for Newsletter) at any time:

• Without providing a reason
• Without incurring costs
• With immediate effect

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9. Exercising User Rights

9.1. How to Request Exercising Your Rights

To exercise any of the above rights, the user should:

• Send a written request to the email address: pixelduetweb@gmail.com
• Include in the request:
  • Full name (if applicable)
  • Email address
  • Type of request (e.g., „Request for Data Access”, „Request for Data Deletion”)
  • Detailed description of the request
  • Date and signature (for paper submissions)

The Administrator will respond within 30 days of receiving the message (in particularly complex cases, this may be extended to 90 days)

9.2. Identity Verification

The Administrator may request identity confirmation before processing a request if the user has not adequately demonstrated their identity.

9.3. No Fees

Exercising user rights is entirely free, except in cases of obviously unfounded or excessive repetition of requests.

10. Withdrawal of Newsletter Consent

10.1. How to Unsubscribe from Newsletter

The user may withdraw Newsletter consent at any time through:

Option 1 – Link in Message:

• Each Newsletter message contains an „Unsubscribe” link (usually at the bottom of the message)
• Clicking the link automatically unsubscribes the user

Option 2 – Email:

• Send an email message to: pixelduetweb@gmail.com
• Subject: „Unsubscribe from Newsletter” or „Unsubscribe”
• Provide the email address to be unsubscribed

10.2. Conditions of Withdrawal

• Withdrawal is free
• Possible without providing a reason
• Takes effect immediately (user will not receive further messages)
• Does not affect the lawfulness of processing carried out before withdrawal

11. Data Storage Period

The storage period depends on the processing purpose:

After the storage period expires, data will be permanently deleted or anonymized.

12. Information on Profiling and Automated Decision-Making

The Administrator does not conduct profiling or make fully automated decisions that could have a significant impact on the user.

Generating visualizations in the AI Generator does not constitute profiling – it is a service that the user consciously activates.

13. Right to Lodge a Complaint

If the user believes that their rights under GDPR have been violated or that their data processing is unlawful, they have the right to lodge a complaint with:

President of the Personal Data Protection Office (UODO)
Address: ul. Stawki 2, 00-193 Warsaw
Email: kancelaria@uodo.gov.pl
Website: www.uodo.gov.pl

A complaint can be submitted:

• In writing to the above address
• Electronically through the portal www.uodo.gov.pl
• Using a form available on the UODO website

Important: Lodging a complaint with UODO does not deprive the user of the right to pursue claims through the courts.

14. Additional Information

14.1. Policy Regarding Children

The Website is not intended for persons under 16 years of age. The Administrator does not knowingly collect data from persons under 16 years of age. If the Administrator becomes aware that it has collected data from a child under 16 years of age, it will immediately delete it.

14.2. Links to Third-Party Websites

The Website may contain links to third-party websites. The Administrator is not responsible for the privacy policy of those websites. We encourage you to review the privacy policy of each website you visit.

14.3. Storage Time – Deletion of Old Data

The Administrator systematically checks and deletes data that has exceeded the specified storage period, unless there is a legal requirement to retain it.

15. Changes to Privacy Policy

15.1. Right to Changes

The Administrator reserves the right to change this Privacy Policy at any time. Changes will be published on the Website.

15.2. Notification of Changes

Material changes to the Privacy Policy will be:

• Displayed on the Website homepage
• Sent as email notification to users (provided the Administrator has their email addresses and the user has consented to such notifications)

15.3. Entry into Force of Changes

Changes to the Privacy Policy take effect:

• 14 days after publication (if not resulting from legal requirements)
• Immediately, if the change results from legal requirements or due to a security incident

Use of the Website after the modification period expires constitutes acceptance of the modified Privacy Policy.

16. Relationship with Terms of Service

This Privacy Policy is a supplement to the Terms of Service available on the Website at https://pixelduetweb.com/terms-of-service/. In case of conflicts between the Privacy Policy and the Terms of Service, the provisions more favorable to the user shall apply.

17. Entire Document

This Privacy Policy, together with the Terms of Service, constitutes the entire agreement between the Administrator and the user regarding the processing of personal data. It supersedes all previous versions of this Policy.

18. Entry Into Force

This Privacy Policy takes effect on the date of its publication on the Website.