1. Data Controller

The controller of your personal data is:

Touch Ideas Serafiński spółka komandytowa
ul. Krakowskie Przedmieście 13
00-071 Warszawa, Poland
NIP: 5213886220
KRS: 0000821563
E-mail: hello@touch-ideas.com (replace if different)

The Controller processes personal data in accordance with:

• Regulation (EU) 2016/679 (GDPR),

• applicable Polish data protection regulations.

2. Scope of Data Processing

The website https://touch-ideas.com (the “Website”) is informational in nature.
Users cannot create accounts or make purchases via the Website.

Personal data may be processed in the following situations:

2.1. Contact via E-mail

If you contact us via e-mail, we may process:

• your e-mail address,

• your name,

• the content of your message,

• any other data voluntarily provided.

Purpose:
Handling inquiries and conducting business communication.

Legal basis:
Article 6(1)(f) GDPR – legitimate interest (communication and potential business cooperation).

Data is retained for the period necessary to respond to the inquiry and for potential further cooperation.

3. Cookies & Analytics

The Website uses cookies and similar technologies.

Cookies are small text files stored on your device when you visit the Website.

We use the following categories of cookies:

3.1. Necessary Cookies

These cookies are required for the proper functioning and security of the Website.
They do not require consent.

3.2. Analytical Cookies

Used to measure traffic and improve the Website’s performance.

We use:

• Framer Analytics

• Google Analytics 4 (GA4) – with IP anonymisation enabled

We do not use:

• advertising cookies,

• remarketing tools,

• profiling for marketing purposes,

• Google Signals.

Legal basis:
Article 6(1)(a) GDPR – consent expressed via cookie banner.

Analytical cookies are activated only after user consent.

You may withdraw your consent at any time through your browser settings or cookie management tool.

4. Embedded Third-Party Content

The Website may contain embedded videos hosted on Vimeo.

When interacting with embedded video content, data may be transmitted to Vimeo in accordance with its own privacy policy. We recommend reviewing Vimeo’s privacy documentation directly on their website.

5. International Data Transfers

Due to the use of external service providers (including Google, Vimeo and Framer infrastructure), personal data may be transferred outside the European Economic Area (EEA).

Such transfers are based on lawful mechanisms under GDPR, including:

• Standard Contractual Clauses (SCCs),

• or other appropriate safeguards provided under applicable law.

6. Data Retention

• E-mail correspondence – stored for the period necessary to handle the inquiry and potential cooperation.

• Analytical data – stored in accordance with the retention policies of analytics providers.

7. Your Rights

Under GDPR, you have the right to:

• access your personal data,

• rectify inaccurate data,

• request deletion (“right to be forgotten”),

• restrict processing,

• data portability,

• object to processing based on legitimate interest,

• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),

• lodge a complaint with a supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).

8. Data Security

We implement appropriate technical and organisational measures to ensure the security and confidentiality of personal data.

9. Changes to This Policy

We reserve the right to update this Privacy & Cookie Policy at any time.
The current version is published on the Website.