perorowisko
ENPL

Privacy Policy

Version 4 · published 3 November 2026

In plain language

The Privacy Policy in brief – plain language

This summary is meant to help you understand quickly what we do with your data. It does not replace the Privacy Policy. If in doubt, the full Polish text applies.

Who is responsible for your data

  • The controller is dioica Konrad Rzentarzewski, ul. Tadeusza Joteyki 13/44, Warsaw, Poland.
  • For data matters, write to kontakt@pero.ro or call +48 505 431 337.

What data we collect

  • For your account and bookings: name, e-mail, phone, company details for invoicing, booking history, and which version of the Terms you accepted.
  • For payments: status, amount and transaction number. We never see full card details; the payment operator handles them.
  • When you write to us, chat with the on-site assistant or send a request from the knowledge base: the content of your message and any contact details you give.
  • Your recordings: they sit on the studio devices for at most 3 business days. We don't listen to them and don't use them for anything.
  • Camera images from the entrance and inside the studio, without sound.
  • On the website: IP address, browser data, server logs and cookies.

Why we need this data

  • To run your account, accept a booking, remind you about a session, and handle rescheduling, refunds and complaints.
  • To issue an invoice and settle taxes, because the law requires it.
  • To answer a question asked via the assistant or the form.
  • To protect people and equipment in the studio (cameras) and to pursue claims if something happens.
  • To list your podcast's name or logo among our clients. You can say no at any time.
  • Visit statistics, error reports and YouTube videos on the website work only with your consent in the cookie settings.
  • We make no automated decisions about you. The assistant answers from our published content, and every quote is prepared by a human.

Who we share data with

  • Paynow (payments), Google (e-mail, calendar, YouTube, Analytics with consent), Cloudflare (website hosting and security), Postmark (e-mails from the portal), wfirma.pl (invoices), Sentry (error reports, with consent), and the EU-based server provider that stores the camera footage.
  • Some of them may process data in the USA. We rely on the European Commission's adequacy decision (Data Privacy Framework) or standard contractual clauses.
  • We disclose data to public authorities only when the law requires it. We don't sell data.

How long we keep data

  • Account: until you delete it or we delete it after prolonged inactivity, then until claims expire.
  • Bookings, payments, invoices: 5 years from the end of the tax year, as the law requires.
  • Correspondence and complaints: until the matter is closed, then until claims expire.
  • Assistant conversations and form requests: up to [12 months].
  • Session recordings: up to 3 business days.
  • Camera footage: up to 90 days, then overwritten automatically. Longer only if it is evidence in a case.
  • Server logs: up to [90 days]. Your cookie choice: 12 months.

Cameras in the studio

  • One camera is in front of the entrance, several are inside the studio, and two video doorbells record images and work as a video intercom.
  • We record images only, no sound. Nobody watches sessions or judges your recordings. The footage is never made public.
  • We look at footage only when something happens: damaged equipment, a breach of the Terms, a safety threat. We hand it over only to authorised authorities.
  • A notice about the cameras is at the entrance. Tell your guests about them.

Your rights

  • You can ask for access to your data, a copy of it, correction, deletion, restriction of processing or transfer.
  • You can object to processing based on our legitimate interest, including the cameras and being listed among our clients.
  • You can withdraw cookie consent at any time via "Cookie settings" in the website footer.
  • We respond within a month. You can also complain to the President of the Polish Personal Data Protection Office (UODO).

Changes

  • When the law, our providers or the way the website works change, we update the Policy. We notify account holders of important changes by e-mail.

This summary does not replace the full text below.

Perorowisko Studio Privacy Policy

This English version is provided for convenience. In the event of any discrepancy, the Polish version (Polityka prywatności) is binding.

This Privacy Policy describes how we process the personal data of people who use the pero.ro website, the client portal, the on-site assistant and Perorowisko Studio at ul. Kaliska 20 in Warsaw, including data from video surveillance.

1. Data controller

The controller of your personal data is Konrad Rzentarzewski, conducting business under the name dioica Konrad Rzentarzewski, ul. Tadeusza Joteyki 13/44, 02-317 Warsaw, Poland, tax ID (NIP) 5222570858, statistical number (REGON) 140566954 (the "Controller", "we").

Contact for data protection matters: e-mail kontakt@pero.ro, phone +48 505 431 337. We have not appointed a data protection officer.

2. What data we process and where it comes from

  • Portal account and bookings
    • Data: name, e-mail address, phone number, company name and tax ID (if provided), booking history, date and version of the Terms you accepted
    • Source: from you, or from the person who designated you as a user on behalf of a client
  • Payments
    • Data: payment status, amount, transaction ID, payment method; we do not receive full card details, which are handled by the payment operator
    • Source: payment operator
  • Invoices
    • Data: data required by tax law (name, address, tax ID)
    • Source: from you
  • Contact and complaints
    • Data: content of correspondence, e-mail address, phone number
    • Source: from you
  • On-site assistant
    • Data: conversation content, browser session identifier, contact details if you provide them
    • Source: from you
  • Knowledge base support form
    • Data: name, e-mail address, phone number, message content
    • Source: from you
  • Recordings made in the studio
    • Data: audio and video files saved on studio devices
    • Source: created during your session
  • Video surveillance
    • Data: images from cameras in front of the entrance and inside the studio, without sound
    • Source: cameras
  • Website
    • Data: IP address, browser and device data, server logs, cookies (section 9)
    • Source: your browser

Providing data is voluntary, but without the data marked as required in the forms we cannot create an account, accept a booking or respond to a request.

3. Purposes and legal bases of processing

  • Creating and maintaining an account, accepting and fulfilling bookings, contact regarding sessions, reminders, handling rescheduling and refunds – performance of a contract (Article 6(1)(b) GDPR)
  • Issuing invoices, bookkeeping, tax settlements – legal obligation (Article 6(1)(c) GDPR)
  • Handling complaints and consumer rights – legal obligation and performance of a contract (Article 6(1)(b) and (c) GDPR)
  • Answering questions asked via the assistant or form, preparing a quote – legitimate interest: handling enquiries from people interested in our services (Article 6(1)(f) GDPR), and once a contract is concluded, its performance (point (b))
  • Temporary storage of recordings on studio devices and making them available for download – performance of a contract (Article 6(1)(b) GDPR); we do not listen to recordings or use them for our own purposes
  • Video surveillance – legitimate interest: protection of people and property (Article 6(1)(f) GDPR)
  • Establishing, pursuing and defending claims – legitimate interest (Article 6(1)(f) GDPR)
  • Listing a client's name, podcast title or logo in our client list – legitimate interest: presenting references (Article 6(1)(f) GDPR); you may object at any time
  • Ensuring the security and operation of the website and portal – legitimate interest (Article 6(1)(f) GDPR)
  • Analytics, error monitoring and the video player on the website – your consent (Article 6(1)(a) GDPR), given in the cookie settings

We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. The on-site assistant answers questions based on the content and price list we have published; every quote is prepared by a human.

4. Data recipients

We entrust data to entities that help us run the studio and the website. They act on our instructions, under data processing agreements or their own terms providing for data protection:

  • mElements S.A., spółka z grupy mBank (paynow.pl) (Poland) – online payment processing;
  • Google Ireland Ltd. – e-mail and calendar (Google Workspace), the YouTube player and, with your consent, Google Analytics;
  • Cloudflare, Inc. (USA) – hosting, content delivery network and security for the website and portal;
  • ActiveCampaign, LLC (Postmark) (USA) – sending e-mails from the portal (confirmations, invitations, notifications);
  • Web INnovative Software sp. z o.o. (wfirma.pl) (Poland) – invoicing and bookkeeping;
  • Functional Software, Inc. (Sentry) (USA) – with your consent, website error monitoring;
  • the provider of the storage service for surveillance recordings, with servers located in the European Union.

Data may also be disclosed to authorised public authorities where required by law. We do not sell personal data.

5. Transfers outside the European Economic Area

Some of our providers (Cloudflare, Postmark, Sentry, as well as companies in the Google and Paynow groups) may process data in the United States. Transfers take place on the basis of the European Commission's adequacy decision (Data Privacy Framework) for providers that hold certification, or on the basis of standard contractual clauses adopted by the European Commission. A copy of the relevant safeguards is available on request.

6. How long we keep data

  • Portal account – until the account is deleted at your request or by us after prolonged inactivity, and then until the limitation periods for claims expire
  • Bookings, payments, invoices – 5 years from the end of the tax year in which the document was issued
  • Correspondence, complaints – until the matter is closed, and then until the limitation periods for claims expire
  • Conversations with the on-site assistant – [12 months] from the conversation
  • Support form requests – until the matter is closed, no longer than [12 months]
  • Recordings on studio devices – up to 3 business days from the session; we do not archive recordings
  • Video surveillance – no longer than 90 days, after which recordings are automatically overwritten, unless they constitute evidence in proceedings, in which case until those proceedings end
  • Server logs – up to [90 days]
  • Cookie consent – 12 months

7. Your rights

You have the right to:

  • access your data and obtain a copy of it;
  • rectify your data;
  • erase your data where it is no longer needed for the purposes for which we collected it and we are not obliged to keep it;
  • restrict processing;
  • data portability for data processed on the basis of a contract or consent;
  • object to processing based on legitimate interest, including surveillance and being listed among our clients, on grounds relating to your particular situation;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise your rights, write to kontakt@pero.ro. We respond within one month; in complex cases we may extend this by a further two months, in which case we will inform you.

8. Video surveillance

  1. Where the cameras are. An exterior camera is located in front of the entrance, above the gate. Interior cameras are located inside the studio premises. Two video doorbells at the entrance record images and also serve as a video intercom when someone rings the bell.
  2. What we record. Images only. Sound is not recorded. The surveillance is not used to watch clients or to assess or use the content of their recordings, and the footage is not published anywhere.
  3. Why. To protect people in the studio and to protect property and equipment, including in connection with earlier acts of vandalism at the entrance. The basis is our legitimate interest (Article 6(1)(f) GDPR).
  4. Who has access. The Controller and persons authorised by the Controller. We review footage only when a specific event requires it, e.g. damage to or loss of equipment, a breach of the Terms or a safety threat. We disclose it only to authorised authorities on the basis of legal provisions.
  5. Where and for how long. Recordings are automatically sent to a server located in the European Union and stored for no longer than 90 days, after which they are overwritten. If a recording constitutes evidence in proceedings, we keep it until those proceedings end.
  6. Your rights. You have the rights described in section 7, including the right of access, restriction, objection and complaint to the President of the Personal Data Protection Office. The right of access to footage may be limited where required to protect the data of other people visible in the footage, or for the pursuit of claims and proceedings conducted by authorised authorities.
  7. Signage. A notice about the surveillance is displayed at the studio entrance. The client booking a session informs the people they invite to the studio about the surveillance.

9. Cookies and similar technologies

The website stores information in your browser (cookies, local storage) or reads it from there. Essential elements always work; the others only with your consent, given separately for each category.

Essential (no consent required):

  • c15t (cookie and local storage, up to 12 months) – remembers your cookie choice. We also save the choice itself on our server, with a masked IP address, as proof of consent.
  • __visitor_session (cookie, until the browser is closed) – created only when you send a message to the assistant; lets you continue the conversation.
  • theme (cookie, until the browser is closed) – only if you change the theme (light/dark).
  • kb-feedback-… (local storage) – only if you rate an article in the knowledge base; prevents double rating.
  • client portal session cookie (until logout) – keeps you logged in to the portal.

With consent:

  • Analytics – Google Analytics (Google Ireland Ltd.): anonymous visit statistics; cookies _ga, _ga_* (up to 2 years).
  • Error monitoring – Sentry (Functional Software, Inc.): when something breaks on the website, a technical report of the error or slowdown and a replay of the steps that led to it (clicks, page transitions), only from visits in which an error occurred. Text, typed data and images are hidden; this is not a video recording. Data in browser memory for the duration of the session.
  • Videos – YouTube player (Google Ireland Ltd., domain youtube-nocookie.com): loaded only after consent; until then a button is shown instead of the video.

You can change or withdraw your consent at any time via "Cookie settings" in the website footer. You can also change the cookie storage settings in your browser. Your choice is valid for 12 months, after which we will ask again.

10. Changes to this Privacy Policy

We may update this Policy when the law, our providers or the way the website or studio operates change. The current version is always available at pero.ro together with its effective date. We will notify clients holding an account of significant changes by e-mail.