Privacy Policy

1. Controller and contact

Dustin Żurek / DUSTDEZIGN, Zielona 24, 62-800 Kalisz, Poland is the controller of personal data processed for this website and project enquiries. For privacy questions or rights requests, contact hello@dustdezign.com.

2. Website access and technical data

When you request a page or locally hosted media, the hosting infrastructure receives technical connection data, such as your IP address, request time, requested URL, browser information and response status. These data are used to provide the website, diagnose faults and protect it against abuse. The legal basis is the legitimate interest in a secure and reliable website under Article 6(1)(f) GDPR.

The current website serves its own fonts, images and films. It does not integrate advertising pixels, an analytics platform, social-media feeds or externally embedded video players. Clicking an external link takes you to a separate service.

3. Enquiries, contracts and invoicing

If you contact us, we process the name, contact details, correspondence, references and project information you provide. Enquiries made with a view to a contract and contract delivery rely on Article 6(1)(b) GDPR. Communication with a company’s representatives and other general enquiries relies on Article 6(1)(f), for the legitimate interest in handling business communication.

Billing and accounting information is processed to comply with legal obligations under Article 6(1)(c). Providing enquiry data is voluntary, but we may be unable to reply or prepare an offer without sufficient contact and project details. Information required for a contract or a lawful invoice must be provided for that purpose. Please do not send unnecessary sensitive data.

4. Project calculator and films

While you complete the calculator, entries remain in the current page and are not saved in browser storage. Pressing Send project enquiry transmits your contact details, selected scope, brief and any requested call time to our server through HTTPS. Our server validates the enquiry and sends it to hello@dustdezign.com through authenticated, TLS-encrypted SMTP provided by Hostinger. The website does not keep a separate database of submitted briefs. The enquiry is processed as correspondence for the purposes and on the legal bases described above.

Spam protection and duplicate-send prevention use short-lived signed request tokens, keyed hashes derived from the connection address and submission, and timestamps. The tokens remain in page memory, not cookies or local storage. The private server records do not contain the plain IP address, contact details or brief; expired records are removed during subsequent requests after 24 hours. Hosting connection logs are handled separately.

The alternative email action opens a draft in your own email application; you decide whether to send it there. Copying a brief writes to your clipboard only when requested. The estimate is non-binding and involves no profiling or decision with legal or similarly significant effects. Concept films are requested from this website only after you press Play.

5. Cookies and local browser storage

The current application does not set advertising or analytics cookies. The signature intro uses the local-storage entry dd-signature-intro-seen to remember its last display time and suppress replay for 30 minutes in the same browser for this website. Reloading or returning during that period does not extend the timer. This entry is accessed independently of the optional preferences in Cookiebot. It contains only a timestamp, not a visitor identifier, and is not sent to DUSTDEZIGN or used for advertising or analytics.

After 30 minutes, the timestamp no longer suppresses the intro and is replaced when the intro is displayed again. The stored value may remain until replaced or cleared through your browser’s site-data settings. Reduced-motion and data-saving preferences bypass the intro. The website remains usable when browser storage is blocked, although replay memory may then be unavailable. Cookiebot manages optional consent categories separately.

6. Consent management with Cookiebot

Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, displays and records your consent choices. It receives technical connection data and consent information, including the chosen categories and consent record. Its consent cookie remembers the decision; this is separate from intro replay memory.

Consent administration and the evidence needed to meet legal obligations rely on Article 6(1)(c) GDPR. You can accept or refuse optional categories and change your choice using Cookie settings in the footer. Usercentrics states that end-user data are deleted on a rolling basis after 12 months. See its privacy policy. A provider or network outage does not authorise optional advertising or analytics storage.

7. Recipients and service providers

Access is limited to people and providers who need it for the relevant task. Hostinger provides website hosting and email infrastructure. Technical website data and email correspondence are processed within the relevant services. See Hostinger’s privacy policy and data-processing addendum.

Project files are exchanged by email or, where used for the project, through WeTransfer or Apple iCloud. File content and any associated names, email addresses and sharing details may be processed by that service. See the WeTransfer privacy policy and Apple privacy policy. These file-transfer tools are not embedded on this website.

Other recipient categories include IT support, accountants, legal advisers and project contractors receiving only the information needed. Public authorities receive data only where legally required. The website does not embed third-party enquiry forms; the visitor chooses whether to send an email.

8. International processing

An external communications or project tool may process information outside the European Economic Area. Any such transfer requires an applicable GDPR transfer basis, such as an adequacy decision or appropriate safeguards. You can request details of the providers and safeguards relevant to your enquiry or project, and a copy of the applicable safeguards, through hello@dustdezign.com. A link to an external social network does not load that network into this page.

9. Retention

Enquiry records are retained while needed to answer the enquiry, prepare an offer and complete relevant follow-up. Contract records are retained for performance and then for the applicable statutory accounting, tax and limitation periods. Records may be retained longer where necessary for an actual dispute or legal obligation.

Technical logs are retained only for operational and security purposes, in accordance with the hosting configuration. Records that no longer have a justified purpose are deleted or anonymised. Local intro storage is described separately above.

10. Your rights

Subject to the GDPR conditions, you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests, and withdraw a consent at any time without affecting earlier lawful processing. Contact hello@dustdezign.com; requests are handled within the applicable statutory time limits.

You may complain to a competent supervisory authority, including Poland’s Urząd Ochrony Danych Osobowych (UODO), or the authority in your habitual residence, workplace or the place of the alleged infringement. There is no automated decision-making within the meaning of Article 22 GDPR on this website.

11. Scope and updates

This notice covers the present website and the enquiry process. Separate project arrangements may require additional information before a new processing activity begins. Updates reflect changes in the website, providers or legal requirements; the revision date is shown above.