Privacy policy — Honeyue

Data controller

The controller of your personal data is Bartosz Domański (Honeyue), ul. Panewnicka 355, unit 6, 40-773 Katowice, Poland, NIP 6342967760. For data matters, write to [email protected] or by post to the business address. We have not appointed a data protection officer, as we are not required to.

What data we process

Contact and brief data — name, company name, website address, email, phone, a description of your offer and target audience, and our correspondence.
Billing data — details for the bill or invoice, the amount, currency and date of payment.
Online payment data — if you pay via Stripe: name, email, amount, card brand and last 4 digits, payment status. The full card number and CVC are processed only by Stripe — we never receive them.
Technical data — IP address and browser information, processed by the server and the Cloudflare network to deliver and secure the website.

Data in campaigns

When running a campaign, we work on your ad accounts. Data about the people who see your ads belongs to you and the advertising platforms — you (and the platform) are its controller. If you entrust us with your customers' data (for example, an email list for a custom audience), we process it only on your instructions, under a data processing agreement, and delete it once the task is done.

Purposes and legal bases

Preparing a plan and quote — steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR) and your consent given in the form (Art. 6(1)(a) GDPR).
Performing the agreement, including taking payments and refunds (Art. 6(1)(b) GDPR).
Issuing bills and keeping tax records (Art. 6(1)(c) GDPR).
Handling complaints and payment disputes, and establishing, pursuing or defending claims (Art. 6(1)(b), (c) and (f) GDPR).
Showing creatives in our portfolio, unless you object (Art. 6(1)(f) GDPR).
Website security (Art. 6(1)(f) GDPR).

Providing data is voluntary, but without it we cannot prepare a plan or perform the service. We do not make automated decisions or profile you. This website uses no analytics or marketing tools.

Recipients

Stripe — Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland: online payment provider; also as an independent controller for fraud prevention and legal obligations (stripe.com/privacy).
Hosting and email provider — OVH SAS (OVHcloud), 2 rue Kellermann, 59100 Roubaix, France — website and email server.
Cloudflare — Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA — domain name service (DNS), content delivery and website protection.
Collaborators (photographer, camera operator, editor) — only when they work on your project and only as far as needed, under a data processing agreement.
Accounting office — for data on bills and invoices, under a data processing agreement.
The bank holding our business account — for bank transfers and refunds.
Public authorities — only where the law requires it.

We do not sell data or share it for marketing.

Transfers outside the EEA

Stripe and Cloudflare may transfer data to the United States. The basis is these companies' participation in the EU-U.S. Data Privacy Framework (European Commission decision of 10 July 2023) and standard contractual clauses. We will provide a copy of the safeguards on request.

Retention

Briefs that did not lead to an agreement — up to 12 months from our last contact.
Agreement, billing and payment data — for 5 years from the end of the calendar year in which the tax payment deadline passed.
Data needed to handle complaints and claims — until the claims become time-barred.

Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, port it, and object to processing based on our legitimate interests. You can withdraw consent at any time. Write to [email protected]; we reply within one month.

Right to complain

You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl) or with the supervisory authority in your country of residence. For cookies, see the Cookie policy.