ENPL

Privacy & Cookie Policy

How we process personal data and use cookies.

In force from 16 June 2026

Part I · Privacy Policy

§1 Personal data administration

  1. The controller of personal data is NATALIA MALARSKA, conducting business under the name NATALIA MALARSKA la folie studio projektowe, ul. Antoniego Bohdziewicza 25, 01-685 Warsaw, Poland, entered in the CEIDG under NIP: 6932087942, REGON 362846966.
  2. You may contact the person supervising the processing of personal data in the organisation by e-mail at contact@boldandpanache.com, in writing to the Controller’s address, or by telephone at +48 573 215 905.
  3. This Policy sets out the rules for the processing of personal data by the Controller in the Service, including the bases, purposes and scope of processing and the rights of data subjects.
  4. Personal data is processed by the Controller in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR). Official text of the GDPR: http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679.
  5. The User’s rights are not absolute and do not apply to all data-processing activities. 

§2 Definitions

  1. Controller – NATALIA MALARSKA, conducting business under the name NATALIA MALARSKA la folie studio projektowe, ul. Antoniego Bohdziewicza 25, 01-685 Warsaw, Poland (NIP: 6932087942, REGON 362846966).
  2. Personal data – information about an identified or identifiable natural person, identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including a device IP, an online identifier and information collected via cookies and similar technology.
  3. Policy – this Privacy Policy.
  4. Cookie Policy – the document setting out the rules for using cookies in the Service, available at https://boldandpanache.com/polityka-cookies.
  5. Profiling – automated processing of personal data that consists in analysing and predicting User behaviour.
  6. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
  7. Service – the website operated by the Controller at boldandpanache.com.
  8. User – any natural person visiting the Service or using one or more of the services or functionalities described in the Policy. 

§3 Security

  1. The Controller has implemented appropriate technical and organisational measures ensuring the security of personal data processing and, in particular, ensures that the data it collects is: processed lawfully; collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes; substantively correct and adequate to the purposes for which it is processed; stored in a form allowing identification of data subjects no longer than necessary; and processed in a manner ensuring appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organisational measures. 

§4 Purposes and legal bases of processing

  1. On the basis of Article 6(1)(a) GDPR (consent), personal data may be processed for the purposes of: retargeting and behavioural advertising, including displaying personalised advertisements based on the User’s activity history in the Service and on other websites (processing for these purposes takes place solely on the basis of the User’s consent expressed in the cookie banner; data may be collected via cookies and similar technologies, in accordance with the Cookie Policy); publishing reviews; storing data in cookies in accordance with the Cookie Policy; contact via means of distance communication, in particular by telephone, e-mail or app; content moderation; content personalisation; marketing of the Controller’s products and services and those of the Controller’s partners; participation in a webinar or online training; participation in competitions and loyalty programmes; and inviting participation in surveys and market research.
  2. On the basis of Article 6(1)(b) GDPR (performance of a contract), personal data may be processed for: performing a sales or service contract, or taking action at the request of the data subject before or after concluding such a contract, in particular the warranty right and handling complaints; and complaints or withdrawal from a distance contract.
  3. On the basis of Article 6(1)(c) GDPR (legal obligation of the Controller), personal data may be processed for: issuing and storing invoices, bills or fulfilling other obligations arising from tax and accounting regulations (archiving obligation for accounting documents); cooperation with law enforcement and public institutions; and creating registers and other documentation required by the GDPR.
  4. On the basis of Article 6(1)(f) GDPR (legitimate interest of the Controller), personal data may be processed for: operating the boldandpanache.com Service; storing data necessary for the proper functioning of the Service in cookies in accordance with the Cookie Policy; managing accounts on Facebook, Instagram and Pinterest and interacting with users of those platforms; ensuring the security of the Service, managing it and ensuring its proper functioning; conducting statistics and analyses of Service traffic; direct marketing; establishing claims raised by or against the Controller; and contact with the User.
  5. Personal data may also be processed for other purposes if the Controller has an appropriate legal basis, in particular under Article 6 GDPR, provided the purpose does not infringe the User’s rights and freedoms. In such a case the User will be informed of the new purpose before processing begins. 

§5 Profiling

  1. The Controller does not use profiling that would lead to automated decision-making producing legal effects for the User or otherwise significantly affecting their rights and obligations.
  2. The Controller may use profiling for marketing and analytical purposes and to personalise content and advertising, solely on the basis of the User’s consent expressed in the cookie banner, in accordance with the Cookie Policy. Such profiling does not produce legal effects for the User and does not significantly affect them within the meaning of Article 22 GDPR. The User may withdraw consent to profiling at any time by changing the cookie banner settings or the browser settings. 

§6 Period of processing

  1. The period of processing depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service, until the consent given is withdrawn, or until an effective objection is raised to processing where the basis is the Controller’s legitimate interest.
  2. The processing period may be extended where processing is necessary to establish, pursue or defend claims, and thereafter only to the extent required by law. After the processing period, data is irreversibly deleted or anonymised.
  3. Indicative retention periods by purpose: data related to contract performance – for the duration of the contract and then until the limitation period for claims expires (3 or 6 years); accounting and tax data – for the period required by tax law (currently 5 years); data obtained on the basis of consent – until consent is withdrawn; data related to User enquiries – up to 12 months from the end of the correspondence. 

§7 User rights

  1. In relation to their personal data, the User has the following rights: access to their personal data; rectification at any time; erasure at any time; obtaining a copy of their data; restriction of processing; objection to processing; data portability; withdrawal of consent (withdrawal does not affect the lawfulness of processing carried out before withdrawal); objection to processing based on the Controller’s legitimate interest for marketing and direct-marketing purposes and for purposes other than marketing; and lodging a complaint with the supervisory authority.
  2. To exercise these rights, the User may contact the Controller by e-mail at contact@boldandpanache.com or in writing to the Controller’s registered office. The Controller undertakes to consider the request within 30 days of receipt.
  3. In some cases the Controller may refuse to fulfil the User’s request if the law requires further processing of the data. 

§8 Recipients of personal data

  1. For the proper operation of the Service, the Controller transfers the User’s personal data to external entities, in particular: a hosting services provider, payment operators (e.g. Stripe, Przelewy24), a newsletter delivery service provider (e.g. MailerLite), providers of analytics and marketing tools, courier companies and postal operators, and an accounting office.
  2. The Controller reserves the right to disclose personal data where required by applicable law, including the obligation to provide information to competent administrative or law-enforcement authorities. 

§9 Security of personal data

  1. The Controller continuously conducts risk analysis to ensure that personal data is processed securely, in particular ensuring that only authorised persons have access to the data and only to the extent necessary for their tasks.
  2. The Controller is obliged to take all legally permitted measures to ensure that all operations on personal data are logged and carried out only by an authorised entity.
  3. The Controller also requires that other entities cooperating with the Controller guarantee the use of appropriate security measures whenever they process personal data on the Controller’s behalf.
  4. The Controller uses technical safeguards such as data transmission encryption (SSL/TLS), restricted access to systems and procedures protecting against unauthorised access to data. 

§10 Amendments to the Privacy Policy

  1. The Policy is regularly reviewed and updated.
  2. The current version of the Policy was adopted and is in force from 16 June 2026.

Part II · Cookie Policy

§1 Introduction

  1. The boldandpanache.com Service uses cookies.
  2. The administrator of the Service at boldandpanache.com is NATALIA MALARSKA, conducting business under the name NATALIA MALARSKA la folie studio projektowe, ul. Antoniego Bohdziewicza 25, 01-685 Warsaw, Poland (NIP: 6932087942, REGON 362846966).
  3. This document sets out the rules for the functioning and use of cookies in the boldandpanache.com Service.
  4. You may contact the person supervising the processing of personal data by e-mail at contact@boldandpanache.com, in writing to the Administrator’s address, or by telephone at +48 573 215 905. 

§2 Definitions

  1. Administrator – NATALIA MALARSKA, conducting business under the name NATALIA MALARSKA la folie studio projektowe, ul. Antoniego Bohdziewicza 25, 01-685 Warsaw, Poland (NIP: 6932087942, REGON 362846966).
  2. Cookie Banner – the interface displayed to the User on their first visit to the Service, allowing management of consents to the use of cookies and similar technologies. The Cookie Banner allows acceptance, rejection or customisation of settings for individual cookie categories. It is available at any time via a link in the Service.
  3. Personal data – information about an identified or identifiable natural person, including a device IP, an online identifier and information collected via cookies and similar technology.
  4. Policy – this Cookie Policy.
  5. Cookies – small text files containing fragments of code that are saved on the User’s device while browsing the Service. Depending on their function, cookies may be temporary (session cookies, deleted when the browser is closed) or persistent (stored for a set period). For some cookies, their content may be automatically sent to the Service’s server or a third-party server with each browser request.
  6. Local Storage and Session Storage – technologies enabling data to be stored in the user’s browser. Unlike cookies, this data is not automatically sent to the server with each request. You can manage their storage in your browser settings.
  7. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
  8. Service – the website operated by the Administrator at boldandpanache.com.
  9. User – any natural person visiting the Service or using one or more of the services or functionalities described in the Policy. 

§3 Purpose of storing and accessing information

  1. In the Service we use cookies and other browser storage technologies, such as localStorage and sessionStorage, which allow information to be saved on the User’s device.
  2. Cookies and similar technologies may be used for the following purposes:
    • Advertising (ad_storage) – enable the storage of advertising-related data.
    • Ad preferences (ad_user_data) – indicate consent to sending user data, among others to Google, for online advertising purposes.
    • Ad personalisation (ad_personalization) – express consent to personalised advertising.
    • Analytics (analytics_storage) – enable the storage of analytics-related data such as cookies.
    • Personalisation (personalization_storage) – enable the storage of data related to Service personalisation.
    • Functionality (functionality_storage) – enable the storage of data necessary for the proper functioning of the Service.
    • Security (security_storage) – enable the storage of data related to security or authentication.

§4 Cookies used

  1. The Service uses cookies.
  2. Detailed information about the cookies used (e.g. their purposes, storage time and third-party providers) is available in our cookie banner, which appears on the first visit to the site.
  3. You may edit or withdraw the consents given in the cookie banner at any time. To reopen the cookie banner, click the relevant link in graphic or text form. 

§5 Consent to cookies

  1. During a visit to the Service, a message (cookie banner) is displayed informing that the Service uses cookies. It is possible to reject and modify cookies.

§6 Changing cookie settings

  1. Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Cookie consents can be managed via the privacy settings in the cookie banner or via your internet browser.
  2. You can change cookie settings in the most popular browsers via their respective Settings/Preferences menus, under Privacy and security (or Cookies and site permissions) options.
  3. Not consenting to cookies may limit the functioning of certain features on the site. 

§7 Amendments to the Cookie Policy

  1. Changes to cookies will be updated on an ongoing basis in the cookie consent management window in the Service.
  2. The Policy is regularly reviewed and updated.
  3. The current version of the Policy was adopted and is in force from 16 June 2026.

This is an English translation provided for the convenience of our international customers. The legally binding version of these policies is the Polish version; in the event of any discrepancy, the Polish version prevails.