Privacy Policy

Last updated: 24 October 2026

This Privacy Policy explains how Michał Pyc, operating under the brand name Mike Avelli and running the website avellimike.com (“I”, “me”, “my”), processes personal data. This document covers data collected from website visitors, e-commerce customers buying digital products, and models or clients participating in photo and video sessions.

I am the data controller for the personal data described below. You can contact me at avellimike@gmail.com.

1. What personal data I collect

I process different types of data depending on your interaction with me and my website.

A. Website Visitors and E-commerce Customers

If you browse my website or purchase digital products (such as a masterclass, presets, or Photoshop actions), I collect:

• Identity and contact data: name, surname, email address, and billing details provided during checkout.
• Transaction data: information about the products you purchased. I do not collect or store your credit card details. All payments are processed securely by third-party payment providers (Stripe or PayPal).
• Technical and usage data: technical information such as IP address and browser type, collected through Google Analytics.

B. Models and Photography Clients

If we work together on a shoot and sign a Model Release, I collect:

• Identity and contact data: name, surname, email address, phone number, and physical address.
• Image and video data: photographs, films, audio recordings, and metadata captured during the session.
• Contract data: the signed Model Release and our related communication.

I do not deliberately collect special categories of personal data (such as race or ethnicity, health data, sexual orientation, political opinions, religious or philosophical beliefs, or trade union membership). If any such data appears incidentally in a photograph or video, it is not processed for any purpose other than the general purposes described in this policy.

2. Purposes and legal bases for processing

I process your personal data for specific reasons and under valid legal bases under the General Data Protection Regulation (GDPR):

• Performance of a contract (Art. 6(1)(b) GDPR): to process your orders, deliver digital products, provide customer support, and execute the rights and obligations outlined in a signed Model Release.
• Legitimate interests (Art. 6(1)(f) GDPR): to keep the website secure, manage my photography portfolio, and protect my rights and defend against legal claims.
• Legal obligations (Art. 6(1)(c) GDPR): to comply with tax, accounting, and consumer protection laws.
• Consent (Art. 6(1)(a) GDPR): where required by applicable law, including the ePrivacy rules, I process analytics data collected via Google Analytics only after you have given your consent through the cookie banner. You may withdraw your consent at any time.

Where you purchase digital content that is not supplied on a tangible medium, you may be asked to expressly consent to immediate delivery and acknowledge that you lose your right of withdrawal once delivery begins.

3. Recipients of your personal data

I share your data only with services necessary to run my business and website:

• Wfolio: the platform hosting my website and managing the underlying infrastructure.
• Payment processors (Stripe and PayPal): when you buy a product, your payment data goes directly to these processors. They handle your financial information according to their own privacy policies.
• Google: I use Google Drive to store signed Model Releases, shoot documents, and media files. I also use Google Analytics to understand website traffic, subject to your consent where required.
• Public and regulatory authorities: only if required by law for tax, accounting, or other legal purposes.

I do not sell your personal data to third parties.

4. Cookies and tracking technologies

My website uses cookies to function properly and to analyze traffic.

• Essential cookies: required for the website to work, including keeping items in your shopping cart and facilitating the checkout process.
• Analytics cookies: Google Analytics places cookies on your device to collect data about website visits. These cookies are loaded only after you give consent through the cookie banner, where required by law. You can withdraw your consent or block these cookies in your browser settings at any time.

5. International data transfers

Some of the services I use (such as Google, Stripe, and PayPal) process data outside the European Economic Area (EEA), primarily in the United States. These companies use approved legal mechanisms, such as Standard Contractual Clauses, to protect your data according to European standards.

6. Data retention

I keep your data only for as long as necessary:

• E-commerce data: billing and transaction records are kept for the period required by tax laws.
• Model Releases and shoot data: retained for as long as necessary to fulfil the purposes set out in the signed Release (including portfolio use, publication, and commercial exploitation), and thereafter for the period necessary to establish, exercise, or defend legal claims, taking into account that certain personality-right claims under Polish law are not subject to statutory limitation.
• Analytics data: retained according to standard Google Analytics expiration settings, after which it is automatically deleted.

7. Your rights

Under the GDPR, you have the right to:

• access the personal data I hold about you;
• request correction of inaccurate data;
• request deletion of your data (right to be forgotten), unless I have a legal obligation or overriding legitimate interest to keep it (such as tax records or a binding Model Release);
• restrict or object to the processing of your data;
• request a copy of your data in a machine-readable format;
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email me at avellimike@gmail.com. I will respond within one month, subject to any extension permitted by law. You also have the right to lodge a complaint with the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO).

8. Changes to this policy

I may update this document to reflect changes in my business or legal requirements. The current version will always be available at avellimike.com/legal-privacy, and the date of the last update will be indicated at the top of the page.