§1. Data Controller
The controller of your personal data is Eliza Łosiewicz-Lenczewska, operating under the brand operated by FACES OF ART Eliza Losiewicz-Lenczewska, based in Sopot, Poland , address: Kolberga 16B/21, 81-881, Sopot. NIP: PL9710538386
Email: facesofart.no@gmail.com

​

§2. Purposes and Legal Basis of Data Processing
Your personal data may be processed for the following purposes:

Order processing (Article 6(1)(b) GDPR)

Issuing invoices and accounting obligations (Article 6(1)(c) GDPR)

Sending newsletters (Article 6(1)(a) GDPR – consent)

Responding to inquiries submitted via the contact form (Article 6(1)(f) GDPR – legitimate interest)

Analytics and statistics (e.g., Google Analytics, Meta Pixel – Article 6(1)(f) GDPR)

Displaying content from external platforms (e.g., YouTube, Instagram, CapCut)

​

§3. Your Rights
You have the right to:

access your data,

rectify or erase your data,

restrict processing,

object to data processing,

data portability,

withdraw consent at any time (e.g., for the newsletter),

lodge a complaint with your local data protection authority.

​

§4. Data Recipients
Your data may be shared with:

payment processors, accounting or shipping service providers,

IT system providers (e.g., e-learning platforms),

analytics and marketing tool providers (e.g., Google, Meta, YouTube).

Your data will not be sold or transferred to unauthorized third parties.

​

§5. Data Retention Period
Your data is processed:

for the duration of order fulfillment,

for the period required by tax law (e.g., 5 years from the end of the financial year), until you withdraw your consent (in the case of newsletters).

​

Valid from: 24.04.2025