Privacy Policy

This Privacy Policy explains how personal data may be handled when you visit this website, contact Thiry Origin by email, or discuss a potential or ongoing project.

1. Controller

Name: David Liam Thiry

Address: Grabowa 14, 72-343 Karnice, Poland

Email: hello@thiryorigin.com

2. What data may be processed

Depending on the situation, the following categories of data may be processed:

contact details such as name, email address and the information you provide in your message,
project-related information you choose to share,
basic technical server data that may arise when this website is accessed, such as IP address, date and time of access, requested pages, browser and device information, and related server log data,
files or source material submitted for project review, discussion, delivery or project work.

3. Purpose of processing

Personal data may be processed for the following purposes:

to respond to enquiries and communicate about potential projects,
to prepare, organise and carry out project work,
to deliver outputs and maintain necessary project records,
to protect the security and technical operation of the website and related systems,
to comply with legal obligations where applicable.

4. Legal basis

Depending on the context, personal data may be processed on one or more of the following bases:

to take steps at your request before entering into a contract or to perform a contract,
for legitimate interests, including secure communication, project administration, website security and protection against misuse,
to comply with legal obligations where applicable,
on the basis of consent where this is specifically required.

5. Website analytics and cookies

At the time of writing, this website does not use analytics tools, advertising trackers or marketing cookies.

Basic technical server logs may still be processed by the hosting environment for security, stability and operational reasons.

6. Project material and sensitive content

Thiry Origin may work with complex personal, archival or mixed-source material, including documents, scans, photographs, audio, video and digital file collections. Sensitive or substantial material should only be shared after direct contact and clear agreement on handling, delivery and scope.

Where appropriate, material may be transferred digitally through a controlled upload workflow or physically by post. Deletion of source material or working copies can be arranged where required.

7. Recipients and processors

Personal data may be disclosed only where necessary to service providers involved in website hosting, email handling, secure file transfer, storage, backup or technical maintenance, and only to the extent needed for those purposes.

Data may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.

8. International transfers

If any service used for email, hosting, storage or related technical infrastructure involves processing outside the European Economic Area, appropriate safeguards should apply in accordance with applicable data protection law.

9. Retention

Personal data is kept only for as long as reasonably necessary for communication, project handling, delivery, legal compliance, record-keeping or the protection of legitimate interests.

Project-related source material is not intended to be retained indefinitely by default. Where relevant, deletion or post-delivery handling can be agreed on a project-specific basis.

10. Your rights

Subject to applicable law, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, or to object to certain processing activities. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11. Complaint

If you believe your personal data has been processed unlawfully, you may lodge a complaint with the competent supervisory authority.

12. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse or unlawful disclosure. However, no method of transmission or storage can be guaranteed to be completely secure in every case.

13. Changes to this policy

This Privacy Policy may be updated from time to time to reflect legal, technical or operational changes. The current version published on this website is the applicable version.

14. Contact

For privacy-related enquiries, please contact hello@thiryorigin.com.