Privacy Policy

Last updated: October 14, 2026

This policy explains what personal data we collect on the likeness.pl website, for what purposes and on what legal basis we do so, who we share it with and what rights you have. It also describes how we use cookies and similar technologies.

1. Data controller

The controller of your personal data is Igor Kałuża, doing business as CAMIGO Igor Kałuża, ul. Młyńska 15, 43-246 Strumień, tax ID (NIP) 5482594040, who owns the Likeness brand and the likeness.pl website (hereinafter: the “Controller” or “we”).

You can contact us about any matter concerning personal data:

• by email: info@likeness.pl,
• by phone: +48 512 700 980,
• by post: at the address given above.

We have not appointed a data protection officer, as the law does not require us to do so.

2. What data we collect and why

Contact form and quote form

When you send an inquiry through a form, we process the data you provide in it: your first and last name, email address, company name, phone number (if you provide it), as well as the content of your message and information about the project: the type of service, a description, an approximate budget and timeline, and how you heard about us.

We do this to:

• respond to your inquiry and contact you about it, on the basis of the consent you give in the form (Art. 6(1)(a) GDPR);
• prepare a quote or an offer and agree on the terms of any cooperation, as these are steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR);
• establish, exercise or defend legal claims where necessary, which is our legitimate interest (Art. 6(1)(f) GDPR).

Messages sent through the forms go to our email inbox. We do not store them in the website’s database. You can withdraw your consent at any time by writing to the address given in section 1. Withdrawing consent does not affect the lawfulness of the processing we carried out before its withdrawal.

Email and phone contact

If you write to us or call us, we process the data you give us: usually your first and last name, email address or phone number, and the content of your message. We do this to reply and carry on the correspondence, which is our legitimate interest (Art. 6(1)(f) GDPR) and, if the conversation concerns cooperation, also as part of steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).

Cooperation

If we enter into a contract, we process the data needed to perform it and settle it (Art. 6(1)(b) GDPR), and to issue invoices and keep our accounts, as required by tax and accounting laws (Art. 6(1)(c) GDPR).

Analytics and advertising

With your consent, we use Google Analytics to see how visitors use the website, and the Meta Pixel to measure the effectiveness of ads and to reach people who have visited the website with ads. The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law), which you give in the cookie banner and can withdraw at any time. You will find the details in sections 3 and 4.

Spam protection for forms

We protect our forms with Cloudflare Turnstile, a service that checks whether a message is being sent by a human rather than a bot. We do this in our legitimate interest, namely the security of the website and protection against spam (Art. 6(1)(f) GDPR).

Server logs

On every visit, the server that runs the website automatically records basic technical information: your IP address, the date and time of the visit, the address of the page visited, information about your browser and device, and the address of the page you came from. We use this information solely to keep the website running and secure and to diagnose errors (Art. 6(1)(f) GDPR).

3. Cookies and similar technologies

Cookies are small text files stored in your browser. Other technologies that store or read information on your device work in a similar way. We use them in three categories:

• Necessary: needed for the website to work, to remember your choices in the cookie banner and to protect the forms. They do not require consent.
• Analytics: let us measure traffic and see which content is useful (Google Analytics). We only enable them with your consent.
• Marketing: used to measure the effectiveness of ads and to show ads to people who have visited the website (Meta Pixel). We only enable them with your consent.

On your first visit, you will see a cookie banner (CookieYes) where you can accept all categories, reject the ones that are not necessary or choose them individually. Until you give your consent, the analytics and marketing tools are not enabled. You can change or withdraw your choices at any time in the cookie settings. The button that opens them is available on every page of the website. You can also delete or block cookies in your browser settings.

The main cookies we use:

Cloudflare Turnstile may store or read information in your browser to the extent necessary to protect the forms. You will find the current, complete list of cookies in the cookie settings.

4. Third-party tools

Google Tag Manager

Provider: Google Ireland Limited (Ireland). A tool for managing scripts on the website. It does not store cookies itself, but it runs the tools described in this policy in line with your choices in the cookie banner. When a page loads, Google may receive technical connection data, e.g. your IP address.

Google Analytics

Provider: Google Ireland Limited (Ireland). It collects information about how you use the website: the pages you visit, the duration of your visit, the traffic source, your approximate location (at city level), your device and browser type, and events such as submitting a form. The data is linked to an identifier stored in cookies, not to your name or email address. Google Analytics 4 does not store IP addresses. The tool runs only with your consent. You can also block data collection with a browser add-on: tools.google.com/dlpage/gaoptout.

More information: Google Privacy Policy and how Google uses data from partner sites.

Meta Pixel

Provider: Meta Platforms Ireland Limited (Ireland). It lets us measure the effectiveness of ads on Facebook and Instagram and target ads to people who have visited the website. It sends Meta information about the pages you visit and the actions you take (e.g. submitting a form), technical data about your browser and device, your IP address and identifiers from cookies. If you have a Facebook or Instagram account, Meta may link this information to your account. The tool runs only with your consent.

With respect to collecting data through the Pixel and transmitting it to Meta, we are joint controllers together with Meta Platforms Ireland Limited (Art. 26 GDPR). The terms of this arrangement are set out in the Meta Controller Addendum. Meta is responsible for any further processing of the data, and you will find the details in the Meta Privacy Policy. You can exercise your rights in this respect against both us and Meta.

Cloudflare Turnstile

Provider: Cloudflare, Inc. (USA). It protects the forms against spam and bots. For verification, it uses, among other things, your IP address, information about your browser and device, and how you interact with the page. According to Cloudflare, data from Turnstile is not used for advertising purposes. More information: Cloudflare Privacy Policy and Turnstile privacy policy.

CookieYes

Provider: CookieYes Limited (United Kingdom). It displays the cookie banner and stores a record of your choices (consent ID, date and time, and the categories selected) so that we can demonstrate that consent was given. The legal basis is our obligation to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). More information: CookieYes Privacy Policy.

5. Who we share data with

Your data may be disclosed to:

• the hosting provider whose servers run the website and whose mail server sends the messages from the forms;
• the email service provider whose mailbox we use to receive messages;
• the providers of the tools described in section 4: Google, Meta, Cloudflare and CookieYes;
• our accounting firm, if we start working together and issue an invoice;
• public authorities, where required by law.

Service providers process data on our behalf under data processing agreements or (to the extent described in section 4) as independent controllers or joint controllers. We do not sell personal data.

6. Data transfers outside the European Economic Area

Using the Google, Meta and Cloudflare tools may involve transferring data to the USA. Such transfers are based on the European Commission’s decision finding an adequate level of data protection under the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) and, in other cases, on standard contractual clauses approved by the European Commission. CookieYes Limited is based in the United Kingdom, for which the European Commission has found an adequate level of data protection.

7. How long we keep data

• Form inquiries and correspondence: for as long as needed to handle the matter, and then for 12 months from the last contact, in case we pick up the conversation again. For a shorter period if you withdraw your consent or object earlier, unless we need the data to establish, exercise or defend legal claims.
• Contract-related data: for the duration of the contract and then until the limitation period for claims expires.
• Accounting documents: for 5 years from the end of the calendar year in which the tax payment deadline passed.
• Google Analytics data: up to 14 months.
• Cookies: for the period given in the table in section 3 or until you delete them in your browser.
• Consent records in CookieYes: for as long as we must be able to demonstrate that consent was given.
• Server logs: no longer than 30 days, unless they are needed to investigate a security incident.

8. Your rights

In connection with the processing of your personal data, you have:

• the right of access to your data and to obtain a copy of it (Art. 15 GDPR),
• the right to rectification of your data (Art. 16 GDPR),
• the right to erasure of your data (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to portability of the data we process on the basis of your consent or a contract (Art. 20 GDPR),
• the right to object to processing based on our legitimate interest (Art. 21 GDPR),
• the right to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal (Art. 7(3) GDPR).

To exercise these rights, write to info@likeness.pl. We will respond without undue delay and within one month at the latest. You can change your cookie consents yourself in the cookie settings.

If you believe that we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

9. Do you have to provide your data?

Providing your data is voluntary. However, the fields marked as required in the forms (including first and last name and email address) are needed for us to respond to your inquiry. Without them, the form cannot be sent. Consent to analytics and marketing cookies is voluntary, and not giving it does not limit your use of the website.

10. Profiling and automated decisions

We do not make decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you. If you consent to analytics and marketing cookies, Google and Meta may analyze your activity on the website, e.g. to tailor the ads they show you. This does not affect your rights or how we respond to inquiries.

11. Security

The website uses an encrypted connection (HTTPS). Only people who need access to the data to handle inquiries and cooperation have it, and we protect the forms against spam and abuse.

12. Links to other websites

The website contains links to our clients’ websites and other websites. Once you go to them, their owners’ privacy policies apply.

13. Changes to this policy

We update this policy when the law or the tools we use change. The current version is always available on this page, and the date of the last change is given at the top.