1. General Information
This Privacy Policy sets out the rules for processing personal data of users visiting the website available at:
The controller of personal data is:
Monika Żurowska, Monnci Art
Koszyce Małe, Poland
e-mail address: contact@monnciart.com
The Monnci Art website has an informational, artistic, portfolio and contact character. The website presents artworks, icons, paintings, information about artistic activity, exhibitions, news, and provides the possibility to contact the artist regarding individual commissions, availability of artworks or cooperation.
The Controller processes personal data in accordance with the provisions of the GDPR, in particular Articles 6 and 13 of the GDPR, which define the legal bases for data processing and the information obligation towards data subjects.
2. What Data May Be Processed?
The Controller may process personal data voluntarily provided by the user, in particular:
first and last name,
e-mail address,
telephone number, if provided,
the content of the message sent via the contact form or by e-mail,
information concerning an inquiry about an artwork, icon, painting, individual commission or cooperation,
data necessary for further correspondence, if the user decides to continue communication outside the contact form.
The website may also process basic technical data related to the use of the website, such as IP address, date and time of visit, browser information, device information and visited subpages.
3. Purposes of Data Processing
Personal data are processed for the following purposes:
handling inquiries sent via the contact form,
replying to e-mail messages,
conducting correspondence concerning individual commissions, availability of artworks, prices or cooperation,
preparing information or a preliminary offer based on the user’s inquiry,
presenting the artistic activity of Monnci Art,
maintaining the website and ensuring its proper functioning,
ensuring website security,
keeping website visit statistics, if the user consents to analytical cookies,
establishing, pursuing or defending possible claims.
The website does not operate as an online store, does not have a shopping cart and does not process online payments.
4. Legal Bases for Data Processing
Personal data are processed on the basis of:
Article 6(1)(a) GDPR — when the user has given consent, for example by submitting the contact form or consenting to analytical cookies,
Article 6(1)(b) GDPR — when the contact concerns taking steps prior to entering into a possible contract, for example an inquiry about an individual commission, availability of an artwork or terms of cooperation,
Article 6(1)(f) GDPR — when processing is necessary for the purposes of the legitimate interests pursued by the Controller, such as conducting correspondence, securing the website, archiving messages, establishing, pursuing or defending claims,
Article 6(1)(c) GDPR — if, in the future, a contract or sale is concluded outside the website and legal obligations arise, for example tax or accounting obligations.
5. Contact Form
The website allows users to contact the Controller through a contact form.
The data provided in the form are submitted voluntarily and used only to handle the inquiry and provide a response.
The form may be used in particular for inquiries concerning:
an individual commission of an icon or painting,
the availability of a specific artwork,
an estimated price,
artistic cooperation,
exhibitions, publications or other projects related to the activity of Monnci Art.
Providing data is voluntary, but failure to provide an e-mail address may make it impossible to respond to the inquiry.
6. E-mail Contact
The user may also contact the Controller directly by e-mail.
In such a case, the Controller processes the data included in the message, in particular the e-mail address, first and last name, content of the message and any other data voluntarily provided by the user.
The data are processed for the purpose of conducting correspondence and handling the inquiry.
7. No Online Store and No Online Payments
The website www.monnciart.com is not an online store.
The website does not have a shopping cart, a user account registration system or online payment processing.
Any arrangements concerning a commission, artwork availability, price, completion time or method of collection are made individually through the contact form, by e-mail or through another agreed form of communication.
If, as a result of correspondence, an order or sale of an artwork is made outside the website, the user’s data may be processed only to the extent necessary to carry out such individual arrangements and to fulfil the Controller’s legal obligations.
8. Recipients of Data
Personal data may be transferred only to entities supporting the Controller in operating the website or handling correspondence, in particular:
the hosting provider,
the e-mail service provider,
a person or company providing technical support for the website,
providers of analytical tools, such as Google Analytics, if the tool is active and the user has given consent,
entities providing accounting or legal services, if necessary in connection with a specific matter.
Personal data are not sold to third parties.
9. Hosting and Technical Data
The website is maintained on the servers of an external hosting provider.
In order to ensure the proper functioning of the website, its security and error diagnostics, the hosting provider may store server logs. Logs may include, among others, the IP address, date and time of visit, address of the visited subpage, browser information, operating system information and possible technical errors.
These data are used only for the purpose of website administration, security and proper functioning.
10. Cookies
The website uses cookies, which are small files stored on the user’s device.
Cookies may be used for the following purposes:
ensuring the proper functioning of the website,
ensuring website security,
remembering basic user settings,
keeping visit statistics, if the user consents to analytical cookies.
The website may use the following types of cookies:
necessary cookies — required for the proper functioning of the website; they do not require the user’s consent,
analytical cookies — used to analyse website visit statistics; they should be used only after the user has given consent,
functional cookies — if the website uses functions that remember user settings.
If the website does not use advertising, remarketing or Meta Pixel, marketing cookies do not need to be listed as actively used.
Consent to cookies should be voluntary, specific, informed and unambiguous. Cookies other than necessary cookies should not be activated before the user gives consent.
11. Google Analytics
The website may use Google Analytics to collect website visit statistics.
Google Analytics helps determine, among other things, which subpages are visited, where users come from, what devices they use and which content is most interesting to them.
Google Analytics should be activated only after the user has given consent to analytical cookies.
If Google Analytics has not yet been implemented on the website, this section may remain in conditional form:
The website may use Google Analytics if this tool is implemented by the Controller.
12. Social Media
The Controller may maintain profiles on social media, in particular on Instagram and Facebook.
If the user contacts the Controller through social media, comments on content, follows the profile or sends a message, the user’s data are also processed in accordance with the rules of the relevant social media platform.
The Controller processes social media data for the purpose of communication, replying to messages, presenting artistic activity and informing about the work of Monnci Art.
13. Data Retention Period
Data submitted through the contact form or by e-mail will be stored for the period necessary to handle the inquiry and conduct correspondence.
If the correspondence concerns a potential commission, cooperation or individual arrangements, the data may also be stored for the period necessary to secure possible claims.
Data processed on the basis of consent, such as analytical cookies, will be processed until the consent is withdrawn or for the period resulting from the settings of the relevant tool.
Technical data and server logs may be stored for the period necessary to ensure the security and proper functioning of the website.
14. User Rights
The user has the right to:
access their personal data,
rectify their personal data,
delete their personal data,
restrict the processing of their personal data,
data portability,
object to the processing of their personal data,
withdraw consent at any time, if the data are processed on the basis of consent,
lodge a complaint with the President of the Personal Data Protection Office.
A complaint may be lodged with:
President of the Personal Data Protection Office
ul. Stawki 2
00-193 Warsaw
Poland
15. Voluntary Provision of Data
Providing personal data is voluntary.
However, failure to provide an e-mail address or contact details may make it impossible for the Controller to respond to an inquiry submitted through the contact form or by e-mail.
16. Transfer of Data Outside the European Economic Area
The Controller does not independently transfer personal data outside the European Economic Area.
However, such a transfer may occur in connection with the use of external technological tools, such as Google Analytics, e-mail services or other online services, if their providers use infrastructure located outside the EEA.
In such a case, the transfer of data should take place on the basis of appropriate legal mechanisms provided for under the GDPR.
17. Automated Decision-Making
The Controller does not make decisions concerning users based solely on automated data processing that would produce legal effects concerning them or similarly significantly affect them.
The website does not operate automatic sales, automatic payments or an automated decision-making system concerning users.
18. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data, in particular:
use of an SSL certificate,
securing access to the website administration panel,
limiting access to data only to persons and entities that need to process them,
using trusted technical service providers,
updating the website, theme and plugins,
using backups, if they are performed by the Controller or hosting provider.
19. Changes to the Privacy Policy
The Controller may update this Privacy Policy in the event of changes in legal regulations, changes in website functionality or implementation of new tools, for example analytical or contact tools.
The current version of the Privacy Policy is always available on the website: