Privacy Policy

1. Data Controller

Top Designer Solutions Sp. z o.o., Radość 45, 21-047 Świdnik, Poland. Email: studio@topdesignersolutions.com. Tel: +48 81 468 3157. KRS: 0000XXXXXX (Sąd Rejonowy Lublin-Wschód w Lublinie). NIP: XXXXXXXXXX. REGON: XXXXXXXXX.

2. Applicable Law

Regulation (EU) 2016/679 (GDPR); Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych (Polish Personal Data Protection Act, Dz.U. 2018 poz. 1000); Ustawa z dnia 18 lipca 2002 r. o świadczeniu usług drogą elektroniczną (Polish E-commerce Act); Ustawa z dnia 16 lipca 2004 r. – Prawo telekomunikacyjne (Polish Telecommunications Act).

3. Legal Basis

Art. 6(1)(b) GDPR — Contract performance. Art. 6(1)(a) — Consent (marketing). Art. 6(1)(f) — Legitimate interest (analytics, security). Art. 6(1)(c) — Legal obligation (Polish accounting law: Ustawa o rachunkowości, Art. 74).

4. Data Categories

Contact: Name, email, phone, company. Project: Brand assets, design briefs (under NDA). Payment: Stripe (PCI DSS L1) — no card data stored. Analytics: Plausible (EU, no cookies, no PII).

5. Recipients

Stripe (USA, SCCs + DPF). Plausible (Estonia, EU). Figma (USA, SCCs) — design collaboration. Data never sold.

6. Retention

Enquiries: 3 years. Project files: delivered to client, deleted from our systems after 90 days. Accounting: 5 years (Art. 74 Ustawa o rachunkowości). Communications: 3 years.

7. Data Subject Rights (Art. 15-22 GDPR)

Access, rectification, erasure, restriction, portability, objection, consent withdrawal. Contact: studio@topdesignersolutions.com.

Supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO — President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warszawa. uodo.gov.pl. Tel: +48 22 531 03 00.

8. Security

TLS 1.3, AES-256, 2FA, NDA with all team members, daily EU backups. Last updated: March 2026.