Legal
Privacy Policy
Last updated: 10.11.2026
This policy explains how AI EXPERTS Sp. z o.o. processes personal data in line with Regulation (EU) 2016/679 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.
1. Data controller
The controller is AI EXPERTS Sp. z o.o., Nowy Świat 54, 00-363 Warszawa, Poland, KRS 0001177141, NIP 5253049482, REGON 541969080. Contact: info@aiexperts.pl, +48 697 247 378.
2. What data we collect
Contact data you give us (name, e-mail, phone, company, message content).
Order and invoicing data (company name, address, tax ID, contact person).
Technical data (IP address, browser type, pages visited) collected through cookies, subject to your consent where required.
3. Purposes and legal bases
Answering enquiries and preparing offers — Art. 6(1)(b) and (f) GDPR.
Performing contracts and providing services — Art. 6(1)(b) GDPR.
Accounting, tax and anti-money-laundering obligations — Art. 6(1)(c) GDPR.
Analytics and marketing — Art. 6(1)(a) GDPR (consent), which you may withdraw at any time.
Establishing and defending legal claims — Art. 6(1)(f) GDPR.
4. Retention
Enquiries: up to 12 months after the last contact.
Contract and accounting records: 5 years from the end of the calendar year in which the tax obligation arose.
AML/KYC records: 5 years from the end of the business relationship.
Consent-based data: until consent is withdrawn.
5. Recipients
Hosting, IT, e-mail and CRM providers, accounting and legal advisers, payment providers — only under data processing agreements. Public authorities where required by law.
6. Transfers outside the EEA
Where a provider is located outside the EEA, we transfer data only on the basis of an adequacy decision (including the EU–US Data Privacy Framework) or Standard Contractual Clauses.
7. Your rights
Access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.
8. Automated decisions
We do not make decisions producing legal effects solely by automated means, including profiling.
9. Security
We apply encryption in transit, access control, role-based permissions and regular reviews of our providers.