Effective from: December 4, 2025
Version: 2.0
Applies to the service:
https://fotoferia.pl
Personal data administrator / service owner:
ODART RAFAŁ KOWALKOWSKI
ul. Tadeusza Makowskiego 3
78-100 Kołobrzeg, POLAND
NIP: 5791020696
REGON: 320889738
Website: https://odart.pl
The mission of the Fotoferia photography portal (hereinafter referred to as the Service), operated by ODART RAFAŁ KOWALKOWSKI (hereinafter referred to as the Administrator), is to publish and promote photographs created by photographers from around the world, both professionals and amateurs.
Creating a photography community involves collecting data, which creates an obligation to maintain transparency regarding the data collected about the User, how it is used and shared.
This Privacy Policy applies when using the Service. The User has the ability to choose regarding the processing of data that we collect, use and share in accordance with this Privacy Policy.
The purpose of the Privacy Policy is to define the actions taken by the Administrator regarding personal data collected through the website www.fotoferia.pl and related services and tools used by Users to perform activities such as registration in the Service, posting or viewing comments and photos, and performing a number of other related activities.
All subject activities are subject to applicable legal provisions regarding data protection. This Privacy Policy is subject to Polish law and GDPR regulations.
The User who uses the Service and uses related services and tools confirms that they have read the provisions of this Privacy Policy and the Service Terms and Conditions and understand their content, and agrees to the use of their personal data in accordance with the Service Terms and Conditions and this Privacy Policy.
By publishing any photo in the Service, the User declares that they have all copyrights to the published image and have consent for the publication of the image of persons depicted in it.
The User acknowledges that by clicking on links posted in the Service, they may be redirected to external services of other entities, located outside the managed Service environment, where the data collection process takes place outside the direct control of the Service. The privacy protection policy applicable in external entity services or applications applies to data obtained by these entities.
Administrator (Service) – ODART RAFAŁ KOWALKOWSKI, conducting business under the above name, based in Kołobrzeg, being the owner and administrator of the www.fotoferia.pl service.
Personal data – all information about an identified or identifiable natural person through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, internet identifier and information collected through cookies and other similar technology.
Policy – this Privacy Policy.
GDPR (RODO, DSGVO) – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Service – the website operated by the Administrator at www.fotoferia.pl.
User – any natural person visiting the Service or using one or more services or functionalities described in the Policy.
The administrator of personal data of Users who are natural persons is:
ODART RAFAŁ KOWALKOWSKI
ul. Tadeusza Makowskiego 3
78-100 Kołobrzeg, Poland
NIP: 5791020696
REGON: 320889738
The Administrator operates the Fotoferia Service in Polish (www.fotoferia.pl) and English versions, hereinafter collectively referred to as the Service.
Each User registering in the Service may submit their photographs for evaluation by other Service Users and use the Service's social functionalities, in accordance with the Terms and Conditions.
In connection with the User's use of the Service, the Administrator collects data to the extent necessary to provide individual services offered, as well as information about the User's activity in the Service. Below are described detailed rules and purposes of processing personal data collected during the User's use of the Service.
Personal data of all persons using the Service (including IP address or other identifiers and information collected through cookies or other similar technologies), who are not registered Users (i.e., persons without a profile in the Service) are processed by the Administrator:
User activity in the Service, including their personal data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and actions related to the information system used to provide services by the Administrator). Information collected in logs is processed primarily for purposes related to service provision. The Administrator also processes them for technical, administrative purposes, to ensure the security of the information system and manage this system, as well as for analytical and statistical purposes – in this respect, the legal basis for processing is the Administrator's legally justified interest (Art. 6(1)(f) GDPR).
Persons who register in the Service are asked to provide data necessary to create and operate an account. To facilitate service, the User may provide additional data, thereby expressing consent to their processing. Such data can be deleted at any time. Providing data is required to create and operate an account, and failure to provide it results in the inability to create an account.
Users creating an account in the Service are required to provide specific information, such as:
The above data will be automatically entered into the Service's user database. The following data are visible to other Users:
This data can be edited in portfolio settings, from which only the login can remain visible to other Users.
Personal data are processed:
It is possible that the Service will be required to disclose information about the User when required by law, in the case of a court summons or other legal process, or if disclosure is reasonably necessary to:
The Administrator – to the extent possible – may notify the User of legal requests regarding their personal data when justified, unless prohibited by law or court order or when the request is urgent. The Administrator may object to such requests when it believes that the requests are exaggerated, unclear or do not come from the appropriate authority, however, it is not committed to challenging every request.
The User bears sole responsibility for any third-party claims for infringement of copyrights, moral rights or any third-party rights in connection with using the Service and publishing their photographs on the Service pages. The Administrator is exempt from liability regarding any third-party claims for infringement of these rights. In the event of third parties making any claims for infringement of their rights as a result of the User publishing photographs, analyses or comments in the Service, solely the User will be obligated to bear the costs of any court proceedings, legal representation costs and damages awarded or established through settlement.
The Service, after obtaining voluntary and revocable consent from the User, may publish User photographs on public profiles in social media services, including Facebook, Instagram, X and YouTube.
The Administrator processes personal data of Users visiting the Administrator's profiles maintained on social media (Facebook, YouTube, Instagram, X). This data is processed solely in connection with maintaining the profile, including to inform Users about the Administrator's activity and promote various types of events, services and products, as well as to communicate with Users through functionalities available on social media. The legal basis for processing personal data by the Administrator for this purpose is its legitimate interest (Art. 6(1)(f) GDPR) consisting in promoting its own brand and building and maintaining a community related to the brand.
Created profiles enable contact between Users. Users share information on their public profiles at their own responsibility. The User should carefully consider the risk of making personal data public, in particular location.
The User creating an account in the Service indicates a unique identifier and password for using the Service. The User is obligated not to disclose data used for authorization in the Service to third parties and bears responsibility for all consequences of disclosing the identifier or password.
The Service allows maintaining constant contact with other registered Users through creating internal clubs and connecting in friend groups. The Service may continuously inform about events and information related to photography and photographers and influence improving Users' photographic skills. The Service may use the User's content, login and avatar to create portal messages.
Stored data may be used for communication between the Administrator and the User regarding in particular:
The Service contacts Users via email address, messages in the Service, information on Service pages and surveys. Messages concern Service operation, updates, security, fixes, instructions and promotional materials of the Service and partners.
Photography contests may be organized within the Service. The Administrator may collect User personal data (e.g., name and surname and contact details) when they participate in contests organized in the Service or by Service partners.
This particularly applies to international contests under the patronage of photography organizations, where photographs and participant personal data may appear in galleries and post-contest materials (e.g., reports, exhibitions, albums). The scope of data and rules for their processing within a specific contest are defined by the contest regulations.
The Administrator within the Service may collect personal data of Users contacting via email address, which are necessary to fulfill the User's request and contact them if necessary. Contact will also be possible through data placed for this purpose on the User's account. The Administrator is entitled to collect other data regarding communication with Users, e.g., information about support requests or feedback from Users.
Information shown in the User's profile, such as photography achievements, professional experience, skills, photography, city or area, recommendations – depend solely on the User. The User does not have to provide additional information on their profile; however, profile information helps promote the photographer.
The User decides what to include in the profile and what information to place. The User should not publish or add personal data to their profile if they do not want it to be publicly available. The User's profile is visible on the web to everyone, including non-logged Internet users and external search engines.
We collect data when the User publishes photos, comments on photos, publishes forum posts, rates photos, fills out forms and surveys. The User does not have to do this, however, resigning from the listed activities lowers the value of the User's portfolio.
Other Users may insert content related to a given person in the Service. We log User visits and page views in the Service, this also applies to User statistics and mobile devices.
We monitor content usage, mobile applications and their installations. We use logins, cookies, device information and have access to User IP addresses.
Cookies are small text files installed on the User's device browsing the Service. Cookies collect information facilitating Service use – e.g., by remembering User visits to the Service and actions performed by them.
They are saved on the User's end device (computer, smartphone, tablet, etc.). Thanks to saving these files, it is possible, among others:
If the User does not agree to saving cookies on their device, they should appropriately configure browser settings or delete saved cookies each time after using the Service.
Disabling or limiting cookies may, however, make it difficult or impossible to use the Service.
The Administrator uses so-called service cookies primarily for:
The Administrator and external entities providing analytical and statistical services on its behalf may use cookies storing information or accessing information stored on the User's end device.
Cookies used in the Service include, among others:
Cookies from other websites – such as Facebook, Instagram, X, YouTube – may be transmitted while browsing the Service and serve, e.g., to:
The Administrator has no influence on external entity cookies. The User should familiarize themselves with the privacy policies of these services.
The Service uses Google Analytics to analyze Service usage and create statistical reports.
The analytics service provider generates statistical information using cookie files.
Detailed Google privacy policy is available at:
https://www.google.com/policies/privacy/
The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of service provision or order fulfillment, until:
The data processing period may be extended each time when processing is necessary to establish and pursue possible claims or defense against them, and after this time – only in the case and to the extent required by legal provisions.
After the processing period expires, data is irreversibly deleted or anonymized.
The User has the right to access the content of their data and request their rectification, deletion, processing restriction, right to data portability, as well as the right to object to data processing and the right to file a complaint with the supervisory authority dealing with personal data protection.
To the extent that User data is processed on the basis of consent, this consent may be withdrawn at any time by contacting the Administrator or using functionalities provided in the Service, including writing to the email address: [email protected].
The User has the right to object to data processing for marketing purposes, if processing takes place in connection with the Administrator's legitimate interest, and also – for reasons related to the User's particular situation – in other cases where the basis for data processing is the Administrator's legitimate interest (e.g., in connection with analytical and statistical purposes).
Users who have created an account in the Service have the right to view, edit and delete data provided by themselves in the profile or through contact via email address [email protected].
The Administrator enables:
If the User decides to close their account, they should send information to the email address
[email protected].
The account will be deleted within 3 business days.
The Service may offer paid services (e.g., premium account, contest fees or other additional services).
Payments may be made using:
Payment data is processed solely to the extent necessary to fulfill the order or payment and in accordance with payment operator security principles.
In connection with service provision, User personal data may be disclosed to external entities, in particular:
In case of obtaining User consent, their data may also be made available to other entities for their own purposes, including marketing purposes.
The Administrator reserves the right to disclose selected information about the User to appropriate authorities or third parties who submit a request for such information, based on appropriate legal basis and in accordance with applicable law.
The Administrator does not make User personal data available to unrelated entities without the consent of interested Users. The Administrator undertakes not to lend or sell User personal data.
The level of personal data protection outside the European Economic Area (EEA) may differ from that provided by European law. For this reason, the Administrator transfers personal data outside the EEA only when necessary and with appropriate protection level, in particular through:
The Administrator informs about the intention to transfer personal data outside the EEA at the stage of their collection.
The Administrator ensures personal data security by applying appropriate technical and organizational measures aimed at preventing:
The Administrator takes particular care to ensure that personal data are:
The Administrator continuously conducts risk analysis to ensure that personal data is processed securely – only authorized persons have access, solely to the extent necessary to perform assigned tasks.
The Administrator ensures that subcontractors and other cooperating entities apply appropriate security measures required by law.
The Privacy Policy is continuously verified and updated as needed. The Administrator may introduce changes to the Policy in case of changes in legal provisions, Service functionality or personal data processing method.
Users will be informed about Privacy Policy changes through the Service.
Contact with the Administrator is possible through:
Email address:
[email protected]
Correspondence address:
ODART RAFAŁ KOWALKOWSKI
ul. Tadeusza Makowskiego 3
78-100 Kołobrzeg
POLAND