Last updated: 14 October 2026.
1. Data controller and contact
The data controller for this website is Hubert Peczeniuk, operating under the name Crimson Griffin Studio. Controller's address: 15 Lutego 15A/A 9, 72-200 Nowogard, Poland. For privacy requests, email privacy@crimsongriffinstudio.com. For general enquiries, email support@crimsongriffinstudio.com.
2. About this website
crimsongriffinstudio.com is an informational and currently non-commercial website. It does not currently offer user accounts or purchases. The contact form creates a draft in the visitor's own email application using a mailto: link; it does not submit the message directly to the website server. Future applications will have their own privacy notices.
3. Information processed and legal grounds
- Email correspondence: a sender's email address, message and any attachments are used to respond and manage enquiries. Depending on the circumstances, the basis may be legitimate interests (GDPR Article 6(1)(f)) or steps prior to entering into a contract (Article 6(1)(b)).
- Website operation and security: the hosting provider may process IP addresses, timestamps, browser information and technical logs for the operation and security of the site. The website operator may rely on legitimate interests (GDPR Article 6(1)(f)).
- Google Analytics 4: only after a visitor opts in, the website loads the Google Analytics tag (measurement ID
G-876HTZSYV5). Analytics may process visited pages, general location, device information and analytics identifiers. Optional analytics is based on consent (GDPR Article 6(1)(a)). The GA4 script is not loaded after a visitor declines. - Language selection: the website stores a language preference (
cgs-language) locally in the browser. On the first visit to the home address, the browser may contactapi.country.isto determine the country from the public IP address; that service receives the IP address to respond to the request. Poland defaults to Polish and other countries to English. A manual selection takes precedence, and the browser language is used if the lookup fails. - Privacy preferences: the analytics choice is stored locally (
cgs-analytics-consent-v1). This is not used for advertising.
4. Recipients and international processing
OVHcloud provides hosting and email infrastructure. Google may receive analytics data if the visitor consents. api.country.is receives the request necessary to estimate the visitor's country. Depending on the service provider, some processing may take place outside the European Economic Area; relevant legal safeguards should be assessed in light of the provider's terms.
5. Data retention
Email correspondence is retained as long as necessary to deal with the enquiry, and longer when justified by legal duties or the protection of rights. Technical server logs are also subject to the hosting provider's arrangements. GA4 retention depends on the property's settings and Google's policies; those settings should reflect genuine analytics needs.
6. Your rights
Where the GDPR applies, you may have rights to access, correction, erasure, restriction, portability and objection. You can withdraw analytics consent at any time through Cookie settings in the footer, without affecting the lawfulness of processing before withdrawal. You may also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).
7. Updates
We will update this notice if the website, its services or applicable legal requirements change. The latest version will appear on this page.