Privacy policy

Updated: 4 November 2026.

1. Controller and contact

The controller is Kordian Zadrożny, operating AI Wdrożenia. Email kontakt@ai-wdrozenia.com.pl or call +48 784 261 052.

2. Enquiries and contact

The enquiry form collects your company, name, email, phone number and description. I also record submission time, notice version, your choices, IP address and browser information. The enquiry is stored in the website database and sent to my mailbox. I use it to respond, arrange a call and prepare an offer. Steps requested by you before entering a contract are based on Article 6(1)(b) GDPR. When you represent a company or contact me about another matter, the basis is my legitimate interest in handling correspondence (Article 6(1)(f)).

Providing information is voluntary. Fields marked with an asterisk are needed for the selected contact method. A request for contact concerns this enquiry; it is not permission for future marketing. Acknowledging the privacy notice is not separate consent to processing.

3. The AI assistant and your conversation

The assistant is AI, not a person. Sending a message initiates analysis by Mistral AI; opening the greeting alone does not send a message to the model. Messages and replies are saved in the website database together with IP, browser information, conversation identifiers and activity times. Content is sent to Mistral AI for replies, scope checking and subsequent summarisation and analysis of the enquiry.

If you provide a phone number or email, I may receive an internal alert containing those details and a summary even without a confirmed callback request. The alert is not a booked call or marketing consent. A confirmed callback is a separate request. Do not enter sensitive personal data, passwords, trade secrets or unnecessary information about other people. You can use the form, email or telephone instead.

Handling a conversation you choose to start, checking it and summarising it is based on my legitimate interest in answering questions and dealing with enquiries (Article 6(1)(f)); necessary steps before a contract with you are based on Article 6(1)(b). Supplying contact details in a chat is not treated as marketing consent.

“New chat” clears the current session history in the interface. It does not erase the archived conversation from the database or information stored by the model provider. Email me to request erasure.

4. Optional marketing

The marketing checkbox is optional and unchecked by default. If selected, I may send information about AI services and materials within the scope of your consent. The basis is Article 6(1)(a) GDPR and the consent required for the communication channel. You can withdraw it by emailing kontakt@ai-wdrozenia.com.pl without affecting the enquiry or the lawfulness of earlier processing.

5. Website operation and cookies

The website uses essential Laravel sessions, CSRF protection and request limits. Logs can include IP, time, requested address, response status and browser information. The basis is my legitimate interest in operating and securing the website (Article 6(1)(f)). The current configuration does not load Google Analytics or advertising pixels. See the cookie policy.

Instagram publications appear as cards. Images from Meta infrastructure are blocked until you allow external content. Once allowed, Meta receives connection information such as IP. Enabling the images is based on consent (Article 6(1)(a) GDPR), which you can withdraw through “Privacy settings”. Following Instagram or other external links takes you to services with their own privacy rules. See Instagram’s privacy policy.

6. Recipients and international processing

Recipients may include hosting, database, email, backup and technical support providers as necessary to operate the service. Website hosting is provided by dhosting.pl. The assistant uses the API of Mistral AI SAS, France. See Mistral’s Data Processing Addendum and privacy information. A European provider’s headquarters do not by themselves rule out all transfers outside the EEA.

Where providers or subprocessors process information outside the EEA, safeguards described in their documentation apply, such as an adequacy decision or standard contractual clauses. Contact me for details and how to obtain a copy. Data may be disclosed to authorised authorities where legally required.

7. Retention

• Enquiries, correspondence and assistant conversations are kept while dealing with the matter or cooperation. Afterwards, information needed to document arrangements or establish, exercise or defend claims is kept until the relevant limitation period expires. Other information is removed when its purpose ends.
• Marketing data is retained until consent is withdrawn or the communication ends. Evidence of consent and withdrawal may be retained as necessary to defend claims.
• The browser session expires after 120 minutes of inactivity. This does not erase an enquiry or a conversation stored in the database.
• Technical logs and backups follow the provider’s rotation cycle. Incident evidence may be retained while investigating the incident and resolving related claims.

8. Your rights

Subject to GDPR conditions, you may request access and a copy, rectification, erasure, restriction and, where applicable, portability. You can object to processing based on legitimate interests on grounds relating to your situation. You can object to direct marketing at any time and withdraw consent without affecting lawful earlier processing.

Email kontakt@ai-wdrozenia.com.pl. I normally respond within one month; extensions are possible where the law allows. You may complain to Poland’s Personal Data Protection Office or your competent supervisory authority.

9. Automated decisions

AI may draft replies, classifications and summaries. It does not make binding decisions about you with legal or similarly significant effects. Pricing and cooperation terms require human contact and confirmation. Security tools may automatically block a suspicious request; you can email me if that happens.