1. Who is responsible
The controller of your personal data is Patryk Twardowski, Mordechaja Anielewicza 35/24, 01-057 Warszawa, Poland, VAT EU PL5321867515. For anything about your data, write to hello@plipplop.studio.
2. Visiting the website
Like every web server, ours records technical data about each request (IP address, time, address of the page, the page you came from and browser type). Our hosting provider in Poland keeps these logs for a short time to keep the site running and secure. We also read them to count visits and see which pages people read and which sites send them here. We do not combine them with other data or use them to find out who you are (legitimate interest, Art. 6(1)(f) GDPR).
The site uses no analytics service and sets no cookies of its own. The typefaces load from our own server, not from Google Fonts.
Some pages show videos from YouTube. Until you click a video, the page shows only a still picture from our own server and nothing is sent to YouTube. When you click, the player loads from youtube-nocookie.com: your browser connects to YouTube (Google Ireland Limited) and sends it your IP address, and YouTube may store data in your browser under its own privacy policy. Data may be transferred to Google LLC in the USA, which is covered by the EU–US Data Privacy Framework.
3. Buying our products
Payments are handled by Creem (Armitage Labs OÜ, Tallinn, Estonia), our reseller and merchant of record. Creem collects your payment and billing details as a separate controller under its own privacy policy; we never see your card details.
From Creem we receive your name, e-mail address, country and the order details. We use them to deliver what you bought, help you, handle refunds (contract, Art. 6(1)(b) GDPR) and keep the accounting records the law requires (Art. 6(1)(c) GDPR), for 5 years from the end of the year of purchase.
4. E-mail, Discord and release news
When you write to us, we use your address and message to answer and to handle your matter, and keep them as long as it needs (legitimate interest, Art. 6(1)(f) GDPR). Our Discord server is run on Discord’s platform under Discord’s own privacy policy.
If you signed up for release news, your e-mail address is kept in Mailchimp (Intuit Inc., USA, covered by the EU–US Data Privacy Framework) until you unsubscribe with the link in every message (consent, Art. 6(1)(a) GDPR).
5. Who else gets the data
Only the services named above: our hosting provider, Google (YouTube videos you choose to play), Mailchimp and Creem, and our accountant when the law requires it. We do not sell your data and do not use it for automated decisions or profiling.
6. Your rights
You have the right to access your data, correct it, have it deleted, restrict its use, take it with you and object to its use, and to withdraw consent at any time without affecting what happened before. Write to hello@plipplop.studio.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
7. Changes
When we change how we use data, we update this page and its date.