legal information
Privacy policy
Effective from: 19 October 2026
1. Data controller
The controller of your personal data is Patryk Smakosz, ul. Gospody 5a/36, 80-344 GdaĆsk, Poland, NIP 5871677180. Wishfish Studio is the name the studio works under.
For any matter concerning personal data, write to us at info@wishfishstudio.pl, through the contact form on the Contact page, or by post to the address above.
2. What data we process and why
When you use the contact form, you give us your full name, your e-mail address, your message and, if you pick one, the topic of your wish. With them the website records the date and time, the page the form was sent from and your IP address, and keeps a record of the consent you gave.
We use this data solely to reply to your message and, if applicable, to prepare a collaboration offer. The legal basis is your consent (Art. 6(1)(a) GDPR).
If you accept analytics cookies in the cookie banner, Google Analytics records which pages are visited, how you arrived and basic information about your browser and device, so we can see how the website is used. Here too the legal basis is your consent, which you can withdraw at any time with the Cookie settings link at the bottom of every page. The Cookie policy has the details.
If we start working together, we also process the data because it is necessary to conclude and perform a contract (Art. 6(1)(b) GDPR).
We keep the correspondence and the record of your consent in order to establish or defend claims. The legal basis is the controller's legitimate interest (Art. 6(1)(f) GDPR).
3. How long we keep the data
We keep form data for the duration of the correspondence and then for the period needed to establish or defend any claims, no longer than 12 months after our last contact, unless a contract is concluded.
Google Analytics keeps the data about how the website is used for 14 months. Google signals, which would link it to Google accounts, are switched off.
4. Recipients
The data is stored with the provider that hosts this website and our mailboxes, MyDevil.net, only to the extent necessary for the website and our correspondence to work. A message sent through the contact form or to info@wishfishstudio.pl is also delivered to our Google (Gmail) accounts, where we read and answer it; Google Ireland Limited processes it on our behalf. If you accept analytics cookies, Google Ireland Limited also processes data about how you use the website on our behalf, as the provider of Google Analytics, and may transfer it to the United States under the EU-US Data Privacy Framework. We do not sell or share data with other parties for marketing purposes.
5. Your rights
You have the right to access, rectify and erase your data, restrict its processing, data portability, to object, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
To use any of these rights, write to us at info@wishfishstudio.pl, through the contact form or by post to the controller's address.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).
6. Voluntary provision
Providing data is voluntary but necessary for us to reply to your message. The data is not used for automated decision-making or profiling.