Privacy policy
As of November 2026
Data controller
The controller of your personal data is Lilianna Krych. Contact on data matters: liliannakrych@gmail.com.
What data and why
When you send a message through the contact form or by e-mail, I process the data you provide: your name, e-mail address, organisation (if given) and the message itself.
I use it only to reply and to continue the conversation — e.g. about a concert, a collaboration or press materials. Legal basis: legitimate interest in answering correspondence (Art. 6(1)(f) GDPR) and, where the conversation concerns a collaboration, steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).
Providing data is voluntary, but I cannot reply without an e-mail address.
How long
I keep correspondence for as long as it is needed for contact and any collaboration, and afterwards only where the law requires (e.g. accounting), for the period it specifies. You can ask me to delete your message at any time.
Who receives the data
I never sell or share data for marketing. A message sent through the form passes through the website server and an e-mail delivery service, and then reaches my Gmail inbox. The website server does not store it. Technically, only the providers of these services have access: the hosting company (Hetzner), Cloudflare, the e-mail delivery service (Resend) and Google (Gmail). Where any of them processes data outside the European Economic Area, this is based on standard contractual clauses approved by the European Commission.
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Just write to the address above. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
Cookies and statistics
This website uses no cookies, analytics or advertising tools and does not track visitors.
YouTube videos load only after you click “Play”, in privacy-enhanced mode (youtube-nocookie.com). From then on, Google/YouTube privacy rules apply.
Like any web server, ours records technical connection data in its logs (such as IP address, date and page address) solely for security and operation; the logs are deleted automatically.