Privacy Policy

Personal data is a very valuable resource. The Administrator takes care of the protection of personal data it processes. This Policy contains information about the principles, scope, purpose and legal basis for processing personal data and the rights you have.

Data Controller

AdaptifyAI Spółka z ograniczoną odpowiedzialnością (AdaptifyAI Limited Liability Company) with registered office at ul. Franciszka Żwirki i Stanisława Wigury 6C, 38-400 Krosno, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court in Rzeszów, 12th Commercial Division of the KRS, under KRS number: 0001207220, Tax ID (NIP): 6842685622, Company ID (REGON): 543319899, share capital: PLN 5,000.00

Contact with the Administrator

e-mail: office@adaptifyaipl.com

Definitions

  • Administrator – AdaptifyAI Spółka z ograniczoną odpowiedzialnością (AdaptifyAI Limited Liability Company) with registered office at ul. Franciszka Żwirki i Stanisława Wigury 6C, 38-400 Krosno, Poland, KRS: 0001207220, Tax ID (NIP): 6842685622, Company ID (REGON): 543319899, e-mail: office@adaptifyaipl.com
  • Website, Site – AdaptifyAI website and its subpages
  • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data
  • User – a person whose data is processed according to the rules described in this Policy
  • Policy – this Privacy Policy

General Provisions

The data controller ensures transparency of personal data processing. It informs about the processing of personal data, scope, purpose and legal basis for their collection. Providing personal data is voluntary and depends on the User's decision, however, in some cases it may be necessary to use certain services.

The Administrator implements and ensures technical and organizational measures ensuring the protection of processed personal data appropriate to threats, risks and data categories and preventing unauthorized access, acquisition and modification of personal data. All personal data is processed in accordance with applicable data protection regulations, including GDPR.

No Data Protection Officer has been appointed due to the lack of such obligation.

For any questions regarding the privacy policy, you can contact the Administrator at: office@adaptifyaipl.com

Scope, Purpose and Legal Basis for Data Processing

Visiting the Website

What data we process:

  • IP address
  • browser and device data
  • date and time of the visit
  • address of the visited subpage

Purpose, legal basis and processing time:

Data is automatically recorded in server logs by the hosting provider (Netlify) in order to display the Site and ensure its proper functioning and security, based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is website maintenance, for the period the hosting provider retains its logs.

Contacting the Administrator by Email

What data we process:

  • email address
  • first and last name
  • data provided in the message content
  • IP address

Purpose, legal basis and processing time:

Data is processed for the purpose of:

  • enabling contact with the Administrator and ensuring communication continuity based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is ensuring the possibility of contact and communication
  • archiving data to be able to demonstrate facts in the future based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is defense or pursuit of potential claims until the statute of limitations expires, which is usually 3 or 6 years + 1 year depending on whether the data concerns an entrepreneur or an individual

Booking a Meeting (Cal.com)

What data we process:

  • first and last name
  • email address
  • phone number (optional)
  • selected meeting time
  • meeting topic, description of needs and planned budget
  • additional notes (optional)
  • email addresses of additional guests, if the User invites them

Purpose, legal basis and processing time:

Data is processed for the purpose of:

  • arranging and holding a meeting at the User's request prior to entering into a contract based on Article 6(1)(b) GDPR
  • archiving data to be able to demonstrate facts in the future based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is defense or pursuit of potential claims until the statute of limitations expires, which is usually 3 or 6 years + 1 year depending on whether the data concerns an entrepreneur or an individual

Bookings are made on the Cal.com service operated by Cal.com, Inc. Providing data is voluntary but necessary to book a meeting.

Social Media

What data we process:

  • first and last name
  • data available on the User's public profile
  • data contained in message content, comment or post
  • data about user activity on the Administrator's profile

Purpose, legal basis and processing time:

Data is processed for the purpose of:

  • enabling contact with the Administrator and ensuring communication continuity based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is ensuring the possibility of contact and communication until an effective objection is raised by the data subject or the processing purpose is achieved
  • analytical and statistical purposes based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is direct marketing until an effective objection is raised by the data subject or the processing purpose is achieved
  • archiving data to be able to demonstrate facts in the future based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is defense or pursuit of potential claims until the statute of limitations expires, which is usually 3 or 6 years + 1 year depending on whether the data concerns an entrepreneur or an individual

Own Marketing

What data we process:

  • data processed in the "SOCIAL MEDIA" section of this Policy

Purpose, legal basis and processing time:

Data is processed for the purpose of:

  • conducting marketing activities such as publishing content on social media, initiating direct conversation, targeting ads based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is direct marketing until an effective objection is raised or this interest ceases
  • seeking to conclude a contract based on Article 6(1)(b) GDPR
  • analytical and statistical purposes based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is direct marketing until an effective objection is raised by the data subject or the processing purpose is achieved
  • archiving documentation to demonstrate its content in the future based on Article 6(1)(f) GDPR - the legitimate interest of the Administrator, which is the ability to defend or pursue potential claims until the statute of limitations expires, which is usually 3 or 6 years + 1 year depending on whether the data concerns an entrepreneur or an individual

Cookies

The Site does not use cookies or any other tracking technologies, including analytics and advertising tools. When you go to Cal.com to book a meeting, that service's privacy and cookie policies apply.

Profiling

The Administrator does not make decisions based on profiling.

Administrator's Social Media

By using social media, the Administrator automatically obtains personal data available in the public profile of an entity that interacts, e.g., by liking the Administrator's profile, leaving a comment or sending a private message. Sharing this information is voluntary, but is necessary to conduct interaction with the Administrator through social media. The Administrator also processes data provided by the User in the content of private messages.

Personal Data Processing Period

Personal data processing periods are determined individually for each of the above-mentioned processing purposes. After the processing period expires, the Administrator irreversibly deletes or anonymizes personal data. To get more information about individual data storage periods, you can contact the Administrator at: office@adaptifyaipl.com

User Rights

According to GDPR, the data subject has a number of rights regarding the processing of data by the Administrator. To exercise the following rights, you can contact the Administrator at: office@adaptifyaipl.com

User's RightWhat Does It Mean?Legal Basis
Right of access to dataUser has the right to request information whether their personal data is being processed. They also have the right to access this data.Article 15 GDPR
Right to receive a copy of dataUser has the right to receive their personal data processed by the Administrator in a structured, commonly used machine-readable format.Article 15(3) GDPR
Right to rectification of dataUser can request rectification of personal data that is incorrect or completion of incomplete data.Article 16 GDPR
Right to erasure of dataUser can request erasure of personal data if there is no longer a legal basis for their processing or the data is no longer necessary for processing purposes.Article 17 GDPR
Right to restriction of processingUser has the right to request restriction of processing their personal data, among others, when they contest the accuracy of personal data, processing is unlawful or in case of objection to processing personal data.Article 18 GDPR
Right to data portabilityUser has the right to request transfer of their data to another controller (under certain conditions).Article 20 GDPR
Right to object to data processingUser has the right to object to the processing of personal data.Article 21 GDPR
Right to withdraw consent to data processingAt any time and without giving reasons, User can withdraw consent to data processing. Processing of personal data before consent withdrawal remains lawful.Article 7(3) GDPR
Right to lodge a complaintIf User believes that the Administrator processes personal data contrary to applicable regulations, they have the right to lodge a complaint with the supervisory authority.Article 77 GDPR

Contact with Supervisory Authority:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, Tel: +48 22 531 03 00, Website: https://uodo.gov.pl/en. Users can also contact the data protection authority in their country of residence.

Third Party Access

Entities whose services are used for business purposes may have access to personal data collected by the Administrator. Processing of personal data by these entities is carried out in accordance with applicable law, where required - based on data processing agreements. These entities guarantee an appropriate level of personal data protection in light of applicable regulations.

  • Hosting provider: Netlify, Inc.
  • Email service provider: Google LLC (Gmail/Google Workspace)
  • Meeting booking tool: Cal.com, Inc.

Data processing outside the European Economic Area:

  • Google Workspace – Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data is processed based on data processing agreements and may be transferred to the USA.
  • Netlify – Netlify, Inc., USA (Site hosting). Technical data such as IP addresses is processed based on a data processing agreement and may be transferred to the USA.
  • Cal.com – Cal.com, Inc., USA (meeting booking). Data provided when booking a meeting is processed based on a data processing agreement and may be transferred to the USA.
  • Facebook, Instagram – Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02X525, Ireland. Data may be transferred to the USA and Canada.

Privacy Policy Changes

The Administrator has the right to change or supplement this policy if necessary, e.g., in case of changes in applicable regulations, organizational or technical reasons. The date of the last policy update is at the end of this document.

Final Provisions

In matters not regulated in this Policy, the provisions of generally applicable law apply, including data protection laws including GDPR.

Last updated: October 14, 2026