PRIVACY POLICY (GDPR)

2.1 Controller

The controller responsible for processing your personal data is:
DUSTDEZIGN (Dustin Zurek)
ZIELONA 24, 62-800 KALISZ, Poland
Email: hello@dustdezign.com

2.2 What data we process

Depending on how you use the website or contact us, we may process:

• Contact data: name, email address, message content

• Inquiry / project data: briefing details, references, files you upload, feedback

• Contract & billing data (clients): invoice details, VAT data, necessary payment/accounting info

• Technical data: IP address, browser/device info, log data required for security and website delivery

• Consent data: your cookie/consent settings stored via our consent tool (see Cookies section)

We do not intentionally collect special categories of data. Please don’t send sensitive information.

2.3 Purposes + legal bases (Art. 6 GDPR)

We process personal data for:

1. Handling inquiries and communication (email/contact/forms)
   Basis: Art. 6(1)(b) GDPR (pre-contract steps) and/or Art. 6(1)(f) GDPR (legitimate interest)

2. Providing services / project delivery (automotive design concepts, branding systems, 3D renders/visuals)
   Basis: Art. 6(1)(b) GDPR (contract)

3. Accounting / legal obligations (invoicing, retention obligations)
   Basis: Art. 6(1)(c) GDPR

4. Security and stability (fraud prevention, abuse prevention, error analysis)
   Basis: Art. 6(1)(f) GDPR

2.4 Hosting (Hostinger)

Our website is hosted with Hostinger. Hostinger provides European server locations including Germany.
For operating the site, Hostinger may process technical connection data (e.g., IP address, logs) as required for delivery and security.

2.5 Forms / inquiries (Zoho Forms embed)

If you submit a request via our embedded forms, we process the information you provide to handle your request, prepare an offer, and (if you become a client) execute the contract.
If the form offers optional device features (e.g., camera/file capture), you can refuse permission and still contact us via email.

2.6 Cookies + Consent Management (CCM19)

We use CCM19 as our cookie consent management tool. CCM19 helps us obtain, manage, and document your consent choices and can block scripts until consent is given. Consent/log data is stored on servers in Germany (provider statement).

Provider:
Papoo Software & Media GmbH
Auguststr. 4, 53229 Bonn, Germany

What is processed (typically):

• your consent status (accept/reject settings)

• technical identifiers (e.g., consent ID), timestamp

• browser/device information

• IP address (as necessary for documentation/security)

Purpose:
Documenting and managing consents and ensuring compliant use of cookies/third-party services.

Legal basis:
Art. 6(1)(c) GDPR (compliance/documentation obligations) and/or Art. 6(1)(f) GDPR (legitimate interest in legally compliant and secure website operation).

How to change or withdraw consent:
You can change your cookie settings anytime via the CCM19 settings link/button on the website (usually “Cookie Settings” or similar). A stored consent cookie can also be deleted via your browser settings.

2.7 Data recipients / processors

We may use service providers (“processors”) to run and secure the website and process inquiries, including:

• Hostinger (hosting)

• CCM19 / Papoo Software & Media GmbH (cookie consent management)

• Zoho (forms / inquiry processing)

Processors act on our instructions under data processing terms.

2.8 International transfers

We aim to process data within the EEA. If a service provider processes data outside the EEA, appropriate safeguards (e.g., Standard Contractual Clauses) are used where required.

2.9 Retention

We retain data only as long as needed for the purposes above:

• inquiries: typically up to 24 months (unless a contract/legal claims require longer)

• client/invoice data: as required by tax/accounting law

• technical logs: limited periods needed for security and troubleshooting

2.10 Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. You can withdraw consent at any time where processing is based on consent.
To exercise rights, contact: hello@dustdezign.com

2.11 Supervisory authority (Poland)

You may also lodge a complaint with the Polish data protection authority:
Personal Data Protection Office (UODO)
1A, St. Moniuszki Street, 00-014 Warsaw, Poland

2.12 Updates

We may update this Privacy Policy when legal/technical/business changes require it. The current version is published on this page with the “Last updated” date.