Galeria Londyn

Last updated: March 2026

Who we are

Galeria Londyn is the data controller responsible for your personal data.

• Company name: Galeria Londyn

• Country: Poland

• Contact: [your@email.com]

If you have any questions about this policy or how we handle your data, please contact us at the address above.

What data we collect and why

Contact form

When you submit our contact form, we collect your name and email address (and any information you choose

to include in your message). We use this data solely to respond to your enquiry.

• Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) — responding to a request you initiated

• Retention: We delete contact form submissions within 12 months of your enquiry being resolved

If you sign up to our newsletter, we collect your email address (and optionally your name) to send you updates.

We use Brevo (Sendinblue SAS, France) to manage and send newsletters.

• Legal basis: Consent (Art. 6(1)(a) GDPR) — you opted in explicitly

• Retention: Until you unsubscribe. You can unsubscribe at any time via the link in any newsletter email

• Data processor: Brevo — https://www.brevo.com/legal/privacypolicy/

Google Maps

Our website embeds Google Maps. When you choose to load the map, Google may collect your IP address and

other technical data. This data is processed by Google LLC (USA) and is subject to Google's own privacy

policy.

• Legal basis: Consent (Art. 6(1)(a) GDPR) — you must actively click to load the map

• Data processor:e LLC — https://policies.google.com/privacy GooglServer logs

Our web hosting provider automatically records standard server logs, which may include your IP address,

browser type, pages visited, and timestamps. This is a technical necessity of operating a website.

• Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) — security and technical operation

• Retention: Typically 30 days, as determined by our hosting provider

Content Delivery Network (CDN)

We use Bunny.net (BunnyWay d.o.o., Slovenia) as a content delivery network to serve website assets quickly

and reliably. When your browser loads assets via our CDN, Bunny.net processes your IP address and standard

technical request data (browser type, URL, timestamp) in order to route traffic to the nearest edge server.

• Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) — performance and security of the website

• Retention: As determined by Bunny.net's data retention policy

• Data processor: Bunny.net — https://bunny.net/privacy

As Bunny.net is headquartered in Slovenia (an EU member state), no international data transfer outside the EEA

occurs.

Analytics

We use Rybbit for website analytics. Rybbit is a privacy-friendly analytics tool that does not use cookies, does

not collect personally identifiable information, and does not track you across websites. No consent is required

for this tool.

Who we share your data with

We do not sell your personal data. We share data only with the service providers listed above (Brevo, Google)

strictly for the purposes described, and only to the extent necessary.

International transfers

Brevo is based in France (EU) — no transfer outside the EEA. Google LLC is based in the USA. Google's

transfers are covered by Standard Contractual Clauses and their participation in the EU-US Data Privacy

Framework.

Your rights under GDPRAs a resident of the EU/EEA, you have the right to:

• Access — request a copy of the personal data we hold about you

• Rectification — ask us to correct inaccurate data

• Erasure — ask us to delete your data ("right to be forgotten")

• Restriction — ask us to limit how we process your data

• Portability — receive your data in a machine-readable format

• Object — object to processing based on legitimate interests

• Withdraw consent — where processing is based on consent, you may withdraw it at any time without

affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [your@email.com]. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish data protection authority:

Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warsaw https://uodo.gov.pl

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect

the most recent version.

Privacy Policy