Privacy Policy

Last updated: October 2026

This Privacy Policy explains how Walewska Films Sp. z o.o. (the "Controller," "we," or "us") processes personal data in connection with the operation of our website. We are committed to protecting your privacy and ensuring transparency in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the laws of the Republic of Poland.

1. Data Controller Information

The Data Controller responsible for the processing of your personal data is:

Company: Walewska Films Sp. z o.o.

Registered Address: Ul. Złota 75A/7, 00-819 Warsaw, Poland

NIP (Tax Identification Number): 5272981902

KRS (National Court Register Number): 0000939431

REGON (Statistical Identification Number): 52074691000000

Contact for Privacy Matters: privacy@orianrights.com

2. Scope of Data Processing

Our website operates strictly as an informational B2B portfolio and relies on a "privacy-by-design" architecture. We do not use user accounts, contact forms, newsletters, or tracking cookies. Our infrastructure is engineered to minimize data processing and avoid the collection of any personally identifiable information directly through the website interface.

3. Information Collected & Legal Basis

A. Direct Communication (mailto: links)

We do not collect personal data directly on this website. Contact with our team is initiated solely via a mailto:link, which opens your device’s default email client.

When you choose to send us an email, we process the personal data you voluntarily provide in your correspondence (such as your email address, name, professional signature, and the contents of your inquiry). We process this data for the following purposes:

  • Business Communication: To respond to your inquiries and maintain B2B relations. The legal basis is our legitimate interest in conducting business correspondence (Art. 6(1)(f) GDPR).

  • Pre-contractual Steps & Fulfillment: If your inquiry relates to establishing a commercial agreement, the processing is necessary to take steps at your request prior to entering into a contract, or for the performance of a contract (Art. 6(1)(b) GDPR).

B. Technical Log Data

When you visit our website, standard web server log data (including IP address, browser type, operating system, referring URL, and date/time of access) is automatically processed temporarily by our domain and hosting infrastructure providers (EuroDNS and Framer). This technical data is processed strictly for the legal purpose of ensuring website performance, network stability, and IT security (Art. 6(1)(f) GDPR).

4. Third-Party Services & Analytics

To provide a fast and secure browsing experience without compromising your privacy, we utilize the following third-party integrations:

  • Website Analytics (Framer): The website is built and hosted on Framer. We utilize Framer’s built-in, server-side analytics. This service is strictly anonymous and cookieless. No personally identifiable information, IP addresses, or cross-site tracking data is processed or stored.

  • Media Embeds (Vimeo): We embed film trailers using Vimeo. To protect your privacy, all Vimeo players on our site are implemented using the "Do Not Track" (?dnt=1) parameter. This suppresses Vimeo’s tracking cookies and prevents the loading of targeted advertising scripts during playback. Please note that initiating trailer playback establishes a direct connection to Vimeo's servers (Vimeo.com, Inc., USA), which processes standard network metadata (such as your IP address). Any international transfer of personal data to Vimeo outside the European Economic Area (EEA) is safeguarded under EU Standard Contractual Clauses (SCCs).

5. Data Retention

Because we do not collect data directly on the website, our retention policies apply exclusively to the email correspondence you initiate.

  • Business Correspondence: We retain business emails for the duration of our commercial relationship or until the correspondence has conclusively ended and there is no legitimate reason to retain it.

  • Contractual & Statutory Records: If our communication results in a contract or financial transaction, relevant personal data will be retained for the periods required by Polish accounting and tax laws (typically 5 years from the end of the calendar year in which the tax deadline passed) or until the expiration of civil claims.

6. Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data processed by us:

  • Right of Access: You may request confirmation as to whether we are processing your personal data and obtain a copy of it.

  • Right to Rectification: You may request the correction of inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data when it is no longer necessary for the purposes collected, or if you object to the processing.

  • Right to Restriction of Processing: You may request that we limit the processing of your data under specific conditions.

  • Right to Data Portability: You may request to receive your data in a structured, commonly used, and machine-readable format.

  • Right to Object: You may object to the processing of your personal data based on our legitimate interests (Art. 6(1)(f) GDPR).

To exercise any of these rights, please contact us at privacy@orianrights.com.

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych - UODO).

7. Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, specifically concerning the protection of our email communications and IT hardware. These measures include access controls, encryption of hardware, and secure email hosting environments designed to protect your data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure.