Who is responsible

The data controller is DP Vision, Poznań, Poland, operating as dp.vision. For anything related to your personal data, write to hello@dpvision.pl.

What the form saves

The contact form sends your name, email address, company, selected interest and message to the studio by email. We keep that email in our mailbox to assess your project and reply. Please include only information relevant to your project.

If you write or call us directly, we process the details you share for the same purpose. We do not send unsolicited marketing emails.

Why and on what basis

  • Responding to your inquiry and preparing a proposal: steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Art. 6(1)(f) GDPR).
  • Delivering a project: performance of the contract with you (Art. 6(1)(b) GDPR).
  • Analytics and advertising measurement: only with your consent given in the cookie banner (Art. 6(1)(a) GDPR). You can withdraw it at any time in Cookie settings.
  • Keeping financial records and answering lawful requests: legal obligation (Art. 6(1)(c) GDPR).
  • Security of the website and establishing or defending claims: legitimate interest (Art. 6(1)(f) GDPR).

Nothing optional runs until you decide. On your first visit the banner offers Accept all, Reject optional and Cookie settings, where analytics and advertising are separate choices. Google receives a “denied” consent signal until you agree (Consent Mode v2), and Microsoft Clarity is not loaded without analytics consent.

Open cookie settings

Essential

Your cookie choice is stored in this browser’s local storage under dp-consent-v2, with the notice version and the time of your choice, for 180 days. It is not sent to our team. Clearing site data in your browser removes it and the banner appears again.

Analytics (optional)

Google Analytics 4 tells us which pages are visited, for how long and from where, with IP anonymisation. Microsoft Clarity records click maps, scroll maps and session replays so we can see where visitors struggle; text typed into forms is masked and never reaches a recording. Analytics cookies such as _ga, _clck and _clsk are set only after consent and are removed if you withdraw it.

Advertising (optional)

Google Ads measures whether a visit from an ad led to an inquiry and may be used for remarketing. Without your consent no advertising cookies are set and ad click identifiers are redacted; if you consent, Google may set _gcl_* cookies and a conversion is reported when you send the form.

Hosting and fonts

The website is hosted on Vercel, which processes technical request data (such as IP address and browser type) in server logs to deliver and protect the site. Fonts are loaded from Google Fonts, so your browser connects to Google’s font servers even with optional tracking off; these requests are separate from Google Analytics.

Links to LinkedIn, Instagram and other external websites open services with their own privacy policies. This website does not embed Meta or LinkedIn pixels.

Who processes data for us

Each provider acts on our instructions under a data processing agreement or equivalent terms. We do not sell or rent your personal data. Where data leaves the EEA, transfers rely on the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses; you can ask us for a copy of the safeguards.

How long we keep it

  • Inquiries that do not lead to a project: 24 months from your message.
  • Project data (briefs, deliverables, communication): 3 years after the project ends, for follow-up work, warranty and legal compliance.
  • Financial records: 5 years, as required by Polish tax law.
  • Analytics data: up to 26 months in Google Analytics; Clarity retains recordings for a limited period set by Microsoft.
  • Cookie choice: 180 days, then the banner asks again.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time; this does not affect processing carried out before withdrawal. Write to hello@dpvision.pl; we verify your identity and respond within 30 days, free of charge unless a request is manifestly unfounded or excessive.

You can also complain to the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority in your country of residence.

AI tools in our work

dp.vision is an AI-native studio. Briefs and project materials may be processed with AI tools (language models, image and video generation) as part of our workflow. We do not upload sensitive personal data such as identification numbers or payment details to AI tools, every AI-assisted output is reviewed by our team before delivery, and we choose tools that offer options for data not being used for model training. If you want a different workflow for your materials, tell us before the project starts.

Security

Traffic between your browser and the website is encrypted (TLS). Access to inquiries and project data is limited to team members who need it. No method of transmission or storage is completely secure; if you notice a vulnerability, please write to hello@dpvision.pl.

Children

Our services are for businesses and professionals. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes

When this page changes, the date at the top is updated. For material changes, such as a new provider or a new purpose, we inform active clients by email before the change takes effect.

Questions about your information

To ask about your inquiry, your data or this policy, write to hello@dpvision.pl or call the studio on +48 665 113 132.

Let’s talk