Privacy Policy
-
1. Controller
The controller of personal data is ConsultAI Grzegorz Hankus, based in Katowice, Poland, VAT ID PL5532022080. For personal data matters: [email protected].
-
2. What data and why
(a) Contact form: full name, company, email, phone (if provided), message content - to reply to the enquiry and possibly prepare an offer (Art. 6(1)(b) GDPR - steps prior to entering into a contract; Art. 6(1)(f) - legitimate interest in conducting correspondence).
(b) Newsletter: email address - on the basis of consent (Art. 6(1)(a)); consent can be withdrawn at any time via the link in the footer of each message, without affecting the lawfulness of earlier processing.
(c) Site statistics: we use analytics without cookies and without identifying users (Cloudflare Web Analytics) - only aggregated data is collected: page views, traffic sources, country, device type.
-
3. Recipients of data
Service providers with whom data processing agreements have been concluded: website hosting (Cloudflare), email and documents (Google Workspace), the newsletter and contact-form email tool - Brevo (Sendinblue SAS, France; data processed in the EU). Data is not sold or shared for third-party marketing.
-
4. Transfers outside the EEA
Some providers process data in the United States; transfers are based on the European Commission’s adequacy decision (Data Privacy Framework) or standard contractual clauses. A copy of the safeguards can be obtained by writing to [email protected].
-
5. How long
Form correspondence: up to 3 years from the last contact (limitation period for claims), and if cooperation follows - for its duration and the period required by tax and accounting law. Newsletter: until consent is withdrawn. Statistics: aggregated data, no retention period for personal data because it contains none.
-
6. Your rights
Access to data, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, withdrawal of consent. Requests: [email protected]. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
-
7. Voluntary provision
Providing data is voluntary, but without it we cannot reply to the enquiry or send the newsletter. We do not make decisions based solely on automated processing, including profiling.
-
8. Cookies
The site does not use cookies for analytics or marketing. Only strictly necessary files may be used (e.g. remembering the chosen language version), which do not require consent.
-
9. Changes
This policy applies from 09.10.2026. We will announce material changes on this page.