Privacy
Privacy policy of spokostudio.com. In short, what data we collect, why, and what rights you have.
Updated 10 November 2026
Who controls your data
The controller of personal data collected through spokostudio.com is Spoko Creative sp. z o.o., Os. Stare Sady 20/14, 98-300 Wieluń, Poland, tax ID (NIP) 832 209 68 43, REGON 528409341, KRS 0001101330.
For anything about your personal data, write to hello@spokostudio.com or call +48 572 234 916.
What data we collect and why
Contact. When you email us, use a form or call, we process the data you give us, usually your name, company name, email address, phone number and the content of your message. We do this to reply and prepare an offer (Art. 6(1)(b) GDPR) and in our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).
Visit statistics. Only if you consent, we use Google Analytics 4. It tells us which pages are visited, where visitors come from, their country and city, and what device and browser they use. The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). We do not combine these statistics with data that identifies you.
Site security. The server running the site records technical connection data such as IP address, date, the address visited and browser type. We use it to protect against attacks and fix errors, which is our legitimate interest (Art. 6(1)(f) GDPR).
Form protection. Our forms are protected by Cloudflare Turnstile, which checks that a person is sending the message. When you open a form, your browser connects to Cloudflare and shares technical data such as your IP address and browser details. We do this in our legitimate interest in protecting against spam (Art. 6(1)(f) GDPR).
Recruitment. If you send us a CV or portfolio, we process it to assess your application (Art. 6(1)(b) GDPR), and any data beyond what the law requires on the basis of your consent (Art. 6(1)(a) GDPR).
Cookies and browser storage
The site’s fonts, scripts and images are hosted on our own server, so until you agree to statistics the site does not connect to Google and sets no analytics cookies. The only exception is the Cloudflare Turnstile form protection, which loads only next to a contact form.
| Name | Provider and purpose | Type | Lifetime |
|---|---|---|---|
spoko-zgody | Spoko Studio. Remembers your cookie choice (browser storage). | Necessary | 12 months |
_ga | Google Analytics. Distinguishes visitors in statistics. | Analytics, with consent | 2 years |
_ga_* | Google Analytics. Keeps the session state for statistics. | Analytics, with consent | 2 years |
You can change your decision at any time with the Cookies link in the footer. You can also delete or block cookies in your browser settings.
Who receives your data
Data may go to companies that help us run the site and email, namely our hosting and email provider, to Cloudflare, Inc., which protects our forms against spam, and, for statistics and only with your consent, to Google Ireland Limited. Each of them processes data on our instructions or under its own data protection terms.
Cloudflare and Google may process data in the United States. Such transfers rely on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework).
We may also disclose data to public authorities where the law requires it.
How long we keep data
We keep correspondence for as long as needed to reply, prepare an offer and work together, and then until any claims are time-barred. Google Analytics statistics are kept for no longer than 14 months. Technical server logs are kept briefly, only as long as site security requires. Recruitment documents are deleted when the recruitment ends or when you withdraw consent.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on our legitimate interest. You can withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
If you believe we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Providing data is voluntary, but without contact details we cannot reply to your message. We do not make automated decisions or profile visitors.
Links to other sites
The site links to our Facebook, Instagram and LinkedIn profiles and to the My Spoko App, Spoko Art and Spoko Events websites. Once you go there, those sites’ privacy rules apply.
Changes to this policy
When we change how we process data, we will update this page, and if the change concerns cookies we will ask for your consent again.