Last updated: 27 October 2026
Privacy Notice
Who is responsible
This website is the personal architecture and interior design portfolio of Anna Tellenbach, an individual based in Poland. It is not operated by a registered company. Anna Tellenbach is the controller of any personal data you share through this website.
What is collected
Contact form: your name, email address, your message and any optional details you choose to include. Nothing is sent unless you submit the form.
Technical data: when you visit, the hosting provider briefly processes standard technical data, such as your IP address, browser type and the time of your request. This is needed to deliver the website securely and to protect the contact form from abuse.
No tracking: this website uses no analytics, advertising or tracking cookies and does not profile visitors. Its typeface is served from this website itself, not from a third-party font service.
Why it is used and the legal basis
To reply to your enquiry and continue the conversation you start, for example about employment or collaboration opportunities. The legal basis is legitimate interest in responding to you (Article 6(1)(f) GDPR) and, where your enquiry concerns possible work together, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
To keep the website secure and protect the form from spam, based on legitimate interest (Article 6(1)(f) GDPR).
Your data is never sold, never used for marketing and never shared beyond the providers below.
Service providers
Website hosting: Lovable (Lovable Labs Incorporated AB, Sweden), with infrastructure and content delivery by Cloudflare, Inc.
Email delivery: an enquiry submitted through the contact form is transmitted to and processed by Resend (Plus Five Five, Inc., San Francisco, United States), which passes the message on to the mailbox below. Resend acts only as a processor, under a data processing agreement that includes the European Commission's Standard Contractual Clauses, and states that it is certified under the EU–US Data Privacy Framework (its public listing was active at the time of writing). Its own service providers, such as Amazon Web Services, are in the United States, and it states that account data and email records are stored there.
Receiving email: enquiries are delivered to and stored in a private Gmail mailbox provided by Google (Google Ireland Limited, with processing by Google LLC).
Some of these providers may process data outside the European Economic Area, including in the United States. Cloudflare, Inc., Google LLC and Plus Five Five, Inc. (Resend) are listed as certified under the EU–US Data Privacy Framework, and transfers are additionally covered by the European Commission's Standard Contractual Clauses in the providers' data processing terms.
How long data is kept
Enquiries are kept only as long as needed to handle your request and any follow-up conversation, and are deleted no later than 12 months after the last contact, unless a longer period is required by law or you ask for earlier deletion. Technical security data is kept only for the short periods set by the hosting providers.
Your rights
Under the GDPR you have the right to:
- access a copy of your personal data;
- have it corrected or deleted;
- restrict or object to its processing;
- receive it in a portable format.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl, or with the supervisory authority in the country where you live.
How to exercise your rights
Send a message through the contact form and state that it is a privacy request. You will receive a reply within one month.
Changes
This notice may be updated if the way this website handles personal data changes. The date at the top shows the current version.