Privacy / Tommy The Gray
Privacy policy
Last updated
I. General provisions
This document is the privacy policy (the “Privacy Policy”) setting out the rules for processing data, including personal data, of users of the website available at www.tommythegray.com, operated by:
MG Fotografia Sp zoo, with its registered office at ul. Spacerowa 52 in Dzięgielów, with the following identification numbers:
NIP: 5482767109
KRS: 0001163385
REGON: 54124179100000
Using the website constitutes acceptance of this Privacy Policy.
II. Personal data
- Users’ personal data may be processed in particular in connection with:
- using contact and order forms on www.tommythegray.com,
- subscribing to the newsletter,
- email correspondence with the administrator,
- using the website (statistical data, cookies).
- Providing personal data is generally voluntary, but may be necessary for:
- responding to an enquiry,
- providing a service,
- sending a newsletter or information materials.
Failure to provide the required data may prevent these activities from being carried out.
III. Types of data and purposes of use
- Data provided in forms
Data provided in forms on www.tommythegray.com are used to:
- contact the user,
- prepare an offer,
- perform a contract or provide a service,
- handle enquiries and requests.
- Publicly available personal data
Personal data provided on www.tommythegray.com in places intended for comments, reviews and similar content may be visible to other users visiting the website. The administrator cannot protect users against the use of these data by other people or entities. These data are not protected under the rules described in this Privacy Policy.
- Cookies
The website www.tommythegray.com automatically collects certain data through cookies when the website is used.
Cookies are small text files stored on the user’s device that enable, among other things:
- the correct display and operation of the website,
- remembering selected settings,
- collecting statistical data (e.g. visits and how the website is used),
- saving data in contact or order forms.
Cookies do not harm the user’s computer or data.
Most browsers accept cookies by default. Users can change their browser settings themselves, including to:
- block cookies,
- receive a notification whenever a cookie is saved,
- delete saved cookies.
Restricting cookies may, however, cause some website features to work incorrectly.
- Newsletter subscription
Subscribing to the newsletter available through www.tommythegray.com requires an email address and possibly other data (such as a name). These data are used exclusively to send the newsletter and content to which the user has consented.
- Messages and marketing content
The administrator reserves the right to send messages to people who have provided their contact details and consented to their processing.
Messages include, among other things:
- information about www.tommythegray.com and its services and products,
- information about changes, promotions and special offers,
- non-commercial communications (e.g. greetings and organisational information).
External entities commissioned to carry out activities such as email campaigns do not receive access to the personal data of mailing-list users. Messages may be sent only through systems operated or supervised by the administrator.
- Other forms and external content
Forms, pop-up windows or other elements on www.tommythegray.com concerning third-party services or products may be operated by those third parties. In such cases, the rules for processing data are set out in their privacy policies.
IV. Users’ rights concerning personal data
Users have the rights provided by personal data protection legislation, in particular the General Data Protection Regulation (GDPR), including:
- the right to access their data,
- the right to rectify their data,
- the right to have their data erased (the “right to be forgotten”),
- the right to restrict processing,
- the right to data portability,
- the right to object to processing,
- the right to withdraw consent, where consent is the basis for processing, without affecting the lawfulness of processing carried out before that withdrawal.
Users may submit a request concerning their personal data at any time by emailing: [email protected]
The administrator applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or unauthorised use.
V. Changes to the Privacy Policy
The administrator of www.tommythegray.com reserves the right to amend this Privacy Policy.
The current version of the Privacy Policy is always available on www.tommythegray.com. If significant changes are made to the rules for processing data, users may be additionally informed, for example through a website notice or an email message where possible.
VI. Contact
For questions, concerns or requests to exercise rights concerning personal data, please contact:
Email: [email protected]
The administrator will respond as soon as possible, in accordance with applicable legislation.
VII. Contact form
When the form is enabled, we process your name, email address, optional phone number and company name, selected topic and message to handle your enquiry and reply. We also record the page from which the enquiry was sent and the date and version of your consent to contact. Providing your data is voluntary; your name, email, message and consent are required to use the form. This form does not subscribe you to a newsletter.
The enquiry is sent through Cloudflare infrastructure to the administrator’s management panel (Cloudflare D1 database); an email notification is sent to the administrator through Cloudflare’s email service. Access to panel enquiries is restricted to authorised people. If one channel is unavailable, the enquiry may be accepted through the other. Enquiry retention period: 12 months from the last contact; if we enter into an agreement — for its duration and until the limitation periods for claims expire.
The form uses Cloudflare Turnstile to protect against automated submissions. Verification may involve technical browser, device and connection data processed by Cloudflare. The widget loads with an enabled form, and the result is also checked on the server. Further information: Cloudflare Turnstile Privacy Addendum.
When you book a consultation, we also record the chosen date and topic and a request identifier that prevents duplicate bookings. The booking is stored in the administrator’s calendar and enquiries under the Tommy The Gray brand. The administrator’s brands share calendar availability; public pages show only free times, without other people’s data. We email confirmation to the address you provide, including the date, time and meeting location, or a notice that the link will follow by email. The database also records the delivery status of the confirmation and the administrator’s notification.
If the form is disabled or JavaScript is unavailable, you can contact us by email, phone or the messaging services listed on the contact page. For personal data enquiries: [email protected].