Tosto Studio

Privacy policy

Draft – requires verification by a lawyer

Notice version: draft-0

This policy describes how tostostudio.com processes data at its current scope: the site presents the studio and the game, and has no forms, newsletter or user accounts.

Data controller

The data controller is Adrian Kokoryka, running a sole proprietorship under the business name Tosto Studio - Adrian Kokoryka, os. Kaszubskie 15/7, 84-200 Wejherowo, Poland, tax ID (NIP) 5882549623, REGON 545143312.

For personal data matters, write to privacy@tostostudio.com.

Cookies, analytics and third-party content

We do not set cookies ourselves and do not use analytics tools. Cloudflare, which serves the site, may set a technical security cookie (such as cf_clearance or __cf_bm) when protecting it against attacks or bots; it is used only to protect the site. The site does not load scripts, fonts, images or any other content from third-party services.

Hosting and technical data

We serve the site through Cloudflare. When you open it, Cloudflare processes your IP address and technical request data (such as browser type, the page requested and the time). It does so to deliver the site to you and to protect it against abuse and attacks.

  • Purpose and legal basis: keeping the site running and secure, which is our legitimate interest (Art. 6(1)(f) GDPR).
  • Cloudflare acts as our processor under a data processing agreement.
  • Data may be processed outside the European Economic Area, including in the United States. The transfer relies on the standard contractual clauses approved by the European Commission, and Cloudflare also declares participation in the EU-U.S. Data Privacy Framework.

Contacting us by email

If you write to us at contact@tostostudio.com, we process the data you give us: your email address, the content of your message and, optionally, your name and any other information you choose to send.

  • Purpose: replying to your message and keeping the correspondence.
  • Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). If your message concerns entering into or performing a contract, Art. 6(1)(b) GDPR applies as well.
  • Recipients: our business email provider, Zoho, which processes the data as a processor. We use Zoho Mail in the EU region.
  • Retention period: [TO BE COMPLETED: how long we keep email correspondence not linked to forms].

Providing data is voluntary, but without your email address we cannot reply.

The site contains links to our profiles on social media services. When you click one, you leave this site for an external service that follows its own privacy rules and uses its own cookies. We have no influence over them, so please read them there.

Your rights

You have the right to:

  • access your data,
  • rectify it,
  • erase it,
  • restrict its processing,
  • object to processing based on our legitimate interest, on grounds relating to your particular situation,
  • data portability, where it applies (automated processing based on a contract or consent).

To use these rights, write to privacy@tostostudio.com.

If you believe we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

We do not profile visitors and do not make automated decisions about them.

Policy changes and version

We may change this policy, for example when we add new features to the site. The current version and its status are shown at the top of this page.

The site currently has no contact or recruitment forms and no newsletter. When we launch them, we will extend this policy with the rules for processing data in each of them, including purposes, legal bases and retention periods.