Privacy policy

The controller of personal data collected through RiseAgency is Tomasz Muszyński. Correspondence address for personal data matters: ZWM 6, Warsaw, Poland.

For personal data matters, email centrumofert@gmail.com. You can provide the email address used in your application to help locate the matter. Do not send a copy of an identity document in your first message.

In Apply mode, the form requires your name or pseudonym, email address, confirmation that you are an adult, your stage of activity and main challenge, and confirmation that you have read the privacy policy. A phone number, public profile link and message are optional. The phone number provided is used only for contact concerning the application. In Contact mode, we require your name or pseudonym, email, message and confirmation that you have read the policy.

The free consultation form requires your email address, phone number, confirmation that you are an adult, and acknowledgement of the privacy policy. We use these details to handle your request and arrange a conversation. We do not subscribe you to a newsletter or marketing list.

The record also includes an application identifier and the time it was received. We do not require your exact age, an identity document, financial data, an account password or private content. Do not enter information about health, sex life or other particularly sensitive data. A general description of your professional needs is enough.

For direct email contact, we process the sender's address, the correspondence and data voluntarily provided in it. The form's protection mechanism uses a short-lived hash of the IP address to limit abuse; it does not add it to the application content.

Applications concerning collaboration: steps taken at your request before entering into a contract – Article 6(1)(b) GDPR. General correspondence and protecting the website against abuse: the controller's legitimate interests – Article 6(1)(f) GDPR.

Providing the required data is voluntary, but we cannot handle an application through the form without it. You may omit optional fields. Confirming that you have read the policy acknowledges receipt of information; it is neither marketing consent nor the legal basis for processing the application.

This website does not offer newsletter subscriptions. The form does not add your address to a marketing list.

The form saves data in a private, encrypted application inbox outside the website's public directory. Access is used by authorised people to handle applications. Application data is also sent to the agency team by email. When notifications are enabled, the full application, including its identifier and time of receipt, is sent by a bot to the configured team chat on Telegram after being saved. The encrypted record allows an application to be recovered if notification delivery fails.

Copies of applications in the encrypted inbox are periodically deleted after 90 days from submission. If a collaboration begins, information necessary for the agreement will be processed separately, in line with its purpose and relevant obligations. Form safeguards use short-lived IP address hashes and submission attempt counters. Counters reset every minute, and inactive data is deleted periodically.

Application messages in email and Telegram, and subsequent correspondence, are stored separately from the encrypted form copy. Automatically deleting the server copy after 90 days does not delete those messages. The team deletes them separately once the matter has been handled; if some correspondence is necessary for the establishment, exercise or defence of legal claims, it may be retained until the relevant limitation period expires. This does not mean retaining all form applications for that period.

Data may be received by authorised people handling applications and by hosting, IT infrastructure, email and, when notifications are enabled, Telegram service providers (Telegram Messenger Inc.), to the extent needed to handle applications. We also disclose data to competent authorities where required by law.

The contact address uses Gmail. When you email us directly or we correspond with you, messages are handled by that email provider. The form automatically sends applications through OVHcloud's hosting email service to the agency inbox at onlystarpoland@gmail.com.

When the integration is enabled, Telegram receives the full contents of the form fields, the application identifier and its time of receipt. The message is available to people with access to the designated chat. Bot messages use Telegram's cloud; they do not have the end-to-end encryption used in secret chats. You do not need a Telegram account to submit the form.

Using providers that operate globally, including Google and Telegram, may involve processing outside the European Economic Area. In such cases, a transfer basis provided for by the GDPR is required, including an appropriate European Commission decision or suitable safeguards. Telegram's policy describes sharing data with group companies in locations including the United Arab Emirates and the British Virgin Islands. Information about the transfer basis used when handling your application, safeguards and how to obtain a copy of them is available from RiseAgency.

Subject to the conditions set out in the GDPR, you have the rights of access to and a copy of your data, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.

You may also lodge a complaint with the President of the Polish Personal Data Protection Office. Contact the controller to exercise your rights. The scope of individual rights depends on the legal basis and circumstances of processing.

We do not make decisions about collaboration solely by automated means or use profiling that produces legal or similarly significant effects concerning you. Automated form safeguards limit abuse but do not assess your application.

The website does not enable external analytics or marketing cookies by default. Details are described in the cookies policy. Changes to tools or processing methods will require the information to be updated appropriately. The current version of this policy is available at a permanent address.