Legal

Privacy Policy

Last updated: 10.11.2026

This policy explains how AI EXPERTS Sp. z o.o. processes personal data in line with Regulation (EU) 2016/679 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.

1. Data controller

The controller is AI EXPERTS Sp. z o.o., Nowy Świat 54, 00-363 Warszawa, Poland, KRS 0001177141, NIP 5253049482, REGON 541969080. Contact: info@aiexperts.pl, +48 697 247 378.

2. What data we collect

Contact data you give us (name, e-mail, phone, company, message content).

Order and invoicing data (company name, address, tax ID, contact person).

Technical data (IP address, browser type, pages visited) collected through cookies, subject to your consent where required.

3. Purposes and legal bases

Answering enquiries and preparing offers — Art. 6(1)(b) and (f) GDPR.

Performing contracts and providing services — Art. 6(1)(b) GDPR.

Accounting, tax and anti-money-laundering obligations — Art. 6(1)(c) GDPR.

Analytics and marketing — Art. 6(1)(a) GDPR (consent), which you may withdraw at any time.

Establishing and defending legal claims — Art. 6(1)(f) GDPR.

4. Retention

Enquiries: up to 12 months after the last contact.

Contract and accounting records: 5 years from the end of the calendar year in which the tax obligation arose.

AML/KYC records: 5 years from the end of the business relationship.

Consent-based data: until consent is withdrawn.

5. Recipients

Hosting, IT, e-mail and CRM providers, accounting and legal advisers, payment providers — only under data processing agreements. Public authorities where required by law.

6. Transfers outside the EEA

Where a provider is located outside the EEA, we transfer data only on the basis of an adequacy decision (including the EU–US Data Privacy Framework) or Standard Contractual Clauses.

7. Your rights

Access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.

8. Automated decisions

We do not make decisions producing legal effects solely by automated means, including profiling.

9. Security

We apply encryption in transit, access control, role-based permissions and regular reviews of our providers.