Privacy
Policy

This Privacy Policy explains how Tomasz Szumski Consulting ("Szumski Art", "we", "us") collects, uses, and protects personal data when you visit szumski.art or interact with our services. We are committed to complying with the General Data Protection Regulation (GDPR) as it applies to users in the European Union and European Economic Area.

1. Who we are

Data controller: Tomasz Szumski Consulting, registered in Warsaw, Poland. NIP: 5273186354. Contact: szumski@gopolska.com

2. What data we collect

• Email address — when you join our mailing list via the homepage form.
• Email address and password (hashed) — for curators and staff who log in to our internal studio tools to manage the gallery. This is not a public account system.
• Artwork parameters and formula — technical data describing the mathematical formula behind each piece, retained internally so curated works can be accurately reproduced or reprinted.

3. How we use your data

• To send you occasional updates about new work, editions, and events (mailing list).
• To authenticate curators and staff and provide access to our internal studio tools.
• To store and reproduce the formula behind each curated piece so we can reprint it on request.
• To curate and produce signed physical editions of works selected for exhibition.

4. Legal basis for processing

• Consent — for the mailing list. You may withdraw consent at any time.
• Contract performance — for purchase agreements regarding curated works, and for staff/curator access to internal tools.
• Legitimate interests — for basic site analytics and fraud prevention.

5. Data storage and third parties

Your data is stored on AWS (Amazon Web Services) infrastructure located in the EU (Frankfurt region). Staff/curator authentication is handled by AWS Cognito. Contact and mailing-list submissions are processed directly through our own backend (AWS API Gateway and Lambda) — we do not use any third-party form-processing service. We do not sell your data to any third party.

6. Your rights under GDPR

szumski@gopolska.com. Odpowiemy w ciągu 30 dni.">You have the right to: access your personal data; correct inaccurate data; request deletion ("right to be forgotten"); object to processing; request data portability. To exercise any of these rights, contact us at szumski@gopolska.com. We will respond within 30 days.

7. Cookies

We do not use tracking cookies or advertising cookies. We use only session storage (not cookies) to maintain login state for curators and staff in our internal studio tools. This data stays in your browser and is cleared when you close the tab.

8. Mailing list

If you join our mailing list, we will send you occasional emails about new work, events, and editions. There is no fixed frequency. You can unsubscribe at any time by replying to any email or contacting us directly.

9. Children

Our services are not directed at children under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. The current version is always available at szumski.art/privacy/. We will notify mailing list subscribers of any significant changes.

---

Questions? szumski@gopolska.com