Who we are

This website, truestoryphotographs.com, is operated by Helena Staniszewska, a business
registered in France (SIRET: 851 531 939 00029), with its registered address at 45 Rue
Marx Dormoy, 75018 Paris, France. I am the data controller for the personal data collected
through this website. You can contact me at helastaniszewska@gmail.com.

What data we collect and why

Contact form. When you send me a message through the contact form, I collect your first
name, last name, email address and the content of your message. I use this data only to
reply to your enquiry. Legal basis: my legitimate interest in responding to enquiries and,
where relevant, steps taken at your request before entering into a contract.

Newsletter. When you subscribe to my newsletter (Notes, about twice a month), I collect
your email address and, if you provide it, your first name. I use it to send you the
newsletter. Legal basis: your consent. You can withdraw your consent at any time by
clicking the unsubscribe link in every email.

Clients. If we decide to work together, I also process the data needed to deliver the
service, issue invoices and meet legal obligations. The terms of our collaboration are set
out in a separate agreement. Legal basis: performance of a contract and legal obligation.
Website usage data. With your consent, I use analytics and advertising tools (see
Cookies below) that collect information about how you use this website, such as pages
visited, device type, approximate location and the website you came from.

Cookies

This website uses cookies and similar technologies. Strictly necessary cookies do not
require your consent. All other cookies are set only after you accept them in the cookie
banner. You can change or withdraw your choice at any time using the cookie settings link
at the bottom of the page.
The cookies and tools used on this website:

Google Analytics (Google Ireland Limited): measures how visitors use the website, so I can understand which content is useful and improve it. Set only with your consent.

Meta Pixel (Meta Platforms Ireland Limited): measures the effectiveness of my
advertising on Facebook and Instagram and helps show relevant ads. Set only with
your consent.

Cookies are stored for no longer than 13 months.

Who we share your data with

I do not sell your data. I share it only with service providers who process it on my behalf or
with your consent:

LH.pl (Poland), website hosting.

MailerLite (UAB MailerLite, Lithuania), newsletter delivery and subscriber
management.

Google Ireland Limited, website analytics (Google Analytics), only if you accept
analytics cookies.

Meta Platforms Ireland Limited, advertising measurement (Meta Pixel), only if you
accept marketing cookies.

Where these providers process data on my behalf, they act under data processing
agreements and may use your data only as instructed by me.

How long we retain your data

Contact form messages: up to 3 years after our last contact.

Newsletter subscribers: until you unsubscribe, or until 3 years after your last
interaction with the newsletter.

Client and invoicing data: 10 years, as required by French accounting law.

Analytics and advertising data: according to the retention settings of Google and
Meta, and cookies for no longer than 13 months.

What rights you have over your data

Under the General Data Protection Regulation (GDPR) you have the right to access,
correct, delete, restrict or object to the processing of your data, the right to data portability,
and the right to withdraw your consent at any time. To exercise these rights, email me at
[EMAIL ADDRESS]. I will respond within one month.

If you believe your rights have been violated, you can lodge a complaint with the French
data protection authority, the CNIL (www.cnil.fr), or with the data protection authority in
your own country.

Where your data is sent

Website hosting (LH.pl) and newsletter delivery (MailerLite) take place within the European
Economic Area. Google and Meta may transfer data to the United States or other countries
outside the EEA. These transfers are protected by the EU–US Data Privacy Framework or
by Standard Contractual Clauses approved by the European Commission.

What rights you have over your data

I may update this policy from time to time. The date of the latest update is shown at the top
of this page.