How we handle
your data.

1. Who is responsible

The controller of your personal data is:

Controller

YAGODESIGN GROUP Sp. z o.o.

Address

ul. Gdańska 7/5, 59-700 Bolesławiec, Poland

Email

info@yagodesign.eu

We have not appointed a Data Protection Officer, because we are not required to under Article 37 of the GDPR. Data protection questions go to the address above.

2. What we collect, and why

Project brief and email. When you send a brief through the form on this website, or email us directly, we receive the details you provide: your name, email address, telephone number if you give one, the vehicle, the design requirements and any files you attach (reference images, photographs of your car, logo packs). We use these to answer you and, if we work together, to carry out the project.

Legal basis: Article 6(1)(b) GDPR — steps taken at your request before entering into a contract, and performance of that contract. Where your message is not about a possible project, the basis is our legitimate interest in replying to correspondence, Article 6(1)(f).

Server logs. Our hosting provider records standard technical data for every request: IP address, date and time, the page requested, the referring page, and browser and operating system identifiers. This happens for every website and is necessary to operate and secure the service. Legal basis: Article 6(1)(f) GDPR — our legitimate interest in a secure, functioning website.

Anti-abuse. The brief form counts recent submissions per IP address, so it can refuse floods of automated messages. The record is a short-lived counter on the server and is not used to identify or profile you. Legal basis: Article 6(1)(f) GDPR.

We do not use this website to make automated decisions about you, and we do not profile you.

3. Cookies and browser storage

This website does not use tracking or advertising cookies, and there is no analytics or advertising code on it. We do not track you across other websites.

The site stores a small number of settings in your browser’s local storage so the page behaves the way you left it. This information never leaves your device and is not readable by us:

• yd-language — the page language you selected.
• yd-sound — whether you switched the scroll sound off.
• yd-intro-seen — whether the opening animation has already been shown.

You can clear these at any time through your browser settings. The website continues to work without them.

4. Who else sees your data

We do not sell personal data and we do not share it for anyone else’s marketing. Data is disclosed only to the service providers we need in order to run the studio, each acting as our processor under a written agreement, and to public authorities where the law requires it.

• Hosting and email — cyber_Folks S.A. (Poland), which hosts this website and the mailbox that receives your brief.
• Accounting and payment — where a project proceeds and an invoice is issued, our accountants and bank receive the data required by tax law.
• Print and installation partners — only where a project requires it, and only the details they need to produce or fit the artwork.

Fonts. Typefaces on this site are requested from Google Fonts (Google Ireland Limited). Your IP address is transmitted to Google to deliver the font files. On the “Our clients” page, map tiles and scripts are loaded from OpenStreetMap and the unpkg CDN, which likewise receive your IP address. The search box submits your query to Google Search only if you choose to use it.

5. Transfers outside the EEA

Our hosting and email are located in Poland, inside the European Economic Area. Where a third-party provider named above processes data outside the EEA, that transfer relies on the European Commission’s Standard Contractual Clauses or an adequacy decision. You may ask us for details of the safeguards that apply.

6. How long we keep it

• Enquiries that do not become projects — up to 12 months from the last message, then deleted.
• Project correspondence and files — for the duration of the project and 12 months after handover, so we can support your installer.
• Invoices and accounting records — 5 years from the end of the tax year, as required by Polish law.
• Server logs — as retained by our hosting provider, typically no more than 12 months.

Where we are defending or pursuing a legal claim, the relevant data is kept until that claim is time-barred.

7. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy of it (Article 15),
• have inaccurate data corrected (Article 16),
• have your data erased where one of the grounds in Article 17 applies,
• restrict how we process it (Article 18),
• receive it in a portable, machine-readable form (Article 20),
• object to processing carried out on the basis of our legitimate interest (Article 21),
• withdraw consent at any time, where processing is based on consent, without affecting what was lawful before withdrawal.

Write to info@yagodesign.eu to exercise any of these. We reply within one month; if a request is complex we may extend that by two further months and will tell you why.

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

8. Is providing data required?

Providing your data is voluntary, but an email address is necessary for us to reply to a brief — without it there is no way to answer you. Attachments are optional; a brief without them is still a brief.

9. Security

This website is served over HTTPS. The brief form submits over an encrypted connection and is delivered to our mailbox over an authenticated, encrypted mail connection. Attachments are limited in size and type. Access to the mailbox and hosting account is restricted to the people who need it.

No transmission over the internet can be guaranteed completely secure. Please do not send passwords, payment card numbers or identity documents through the form.

10. Children

This website is aimed at businesses and adult customers. We do not knowingly collect data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.

11. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. Material changes affecting an ongoing project will also be sent to you by email.