Privacy and Cookies Policy

Last updated: July 2026 (Revision 3.02)

Krzysztof Burzyński Photography site krzysztofburzynski.com is managed by Biznes Innovation s.c.

At Biznes Innovation s.c., we value your privacy and are committed to protecting personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and applicable Polish data protection laws.

1. Data Controller

The Data Controller of your personal data is:

Biznes Innovation s.c.

ul. Geodetów 13, 05-270 Marki, Poland

Contact email: privacy@biznesinnovation.com

2. Scope & Categories of Data Processed

We process personal data of both individual clients (B2C consumers) and representatives, employees, or associates of corporate clients and business partners (B2B).

Depending on your relationship with us, we process the following categories of data:

Individual Clients (B2C): Name, residential/shipping address, private email address, phone number, payment details, order history, and booking details.
Corporate Clients / Business Partners (B2B): Name, job title/position, business email address, business telephone number, company name, and corporate registration details (e.g., VAT/Tax ID).

We do not intentionally collect special categories of personal data (e.g., health data). Any unsolicited personal data received is deleted immediately.

3. Purposes, Legal Bases, and Data Retention Periods

4. Data Recipients & Subprocessors

To deliver our services and maintain our websites, we share personal data with trusted third-party service providers acting on our behalf under formal Data Processing Agreements (DPAs):

Payment Gateways & Banks: Payment processors and financial institutions (for B2C transactions).
Cloud & IT Infrastructure Providers: Virtual servers, cloud storage, and email hosting (including Google Workspace / Google Sites).
Advisory & Professional Services: Accounting firms, legal advisors, and IT maintenance teams.
Postal & Courier Operators: For physical deliveries or mailing documents.

Data may also be disclosed to public authorities (e.g., tax authorities) if required by mandatory provisions of law.

5. Third-Country Data Transfers (Outside the EEA)

Some of our IT service providers utilize data centers located outside the European Economic Area (EEA), specifically in the United States.

All international transfers strictly comply with Chapter V of the GDPR using legal transfer mechanisms, such as:

Transfers to US entities certified under the EU–U.S. Data Privacy Framework (DPF).
Executing European Commission Standard Contractual Clauses (SCCs) with appropriate technical security safeguards.

6. Cookies & Web Tracking Technologies

Our websites (hosted via Google Sites) use cookies to ensure proper operation and analyze web traffic.

A. What are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the site recognize your device and save preferences.

B. Types of Cookies We Use

Strictly Necessary / Essential Cookies (No Consent Required):
- Essential for core website operation, security, network management, and page navigation.
- Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in operating a functional website).
Analytics & Performance Cookies (Consent Required):
- We use services such as Google Analytics (provided by Google LLC) to analyze website traffic, visitor interactions, and usage statistics.
- Legal Basis: Art. 6(1)(a) GDPR (Consent granted via the website cookie banner).

C. Managing Your Cookie Preferences

You can accept or reject non-essential cookies using the Cookie Banner displayed upon entering our website, or you can manage, block, or clear cookies directly through your web browser settings.

7. Your Data Protection Rights

Under Articles 15–22 of the GDPR, you have the following rights:

Right of Access: Request confirmation of processing and a copy of your personal data.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of data no longer required for its original purpose.
Right to Restriction: Request temporary pausing of data processing.
Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
Right to Object: Object at any time to processing based on our legitimate interest (Art. 6(1)(f)), including direct marketing.
Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at privacy@biznesinnovation.com.

8. Supervisory Authority & Complaints

If you believe that our processing of your personal data infringes on your rights under the GDPR or Polish law, you have the right to lodge a formal complaint with the supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (PUODO)

ul. Stawki 2, 00-193 Warsaw, Poland

Website: https://uodo.gov.pl

9. Voluntariness of Providing Data

Providing personal data is voluntary. However, failing to provide basic contact details will prevent us from responding to inquiries, executing services, issuing invoices, or concluding contracts with you or your organization.

10. Automated Decision-Making & Profiling

We do not use automated decision-making processes, nor do we perform profiling that produces legal or similarly significant effects concerning you.

11. External Links to Third-Party Services (e.g., Shopify, Amazon)

Our website may contain links (hyperlinks) to external e-commerce platforms and third-party services (such as Shopify or Amazon) where our products or services are offered.

Please note that the Data Controller has no influence over the privacy practices or cookies used by these external sites. Once you leave our website via a link, we recommend reviewing the respective privacy policy of that third-party provider (Shopify Inc. / Amazon.com, Inc.).

Report abuse