Privacy Policy of the AH4AI website

COOKIES

GENERAL INFORMATION

The website uses information stored using 'Cookie' files, i.e. computer data stored on the end devices of users intended for using websites. These files allow the user's device to be recognized and the website to be displayed accordingly to individual preferences. They usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.

TYPES OF COOKIES USED

The service uses the following Cookies:

• necessary: necessary for the proper functioning of the service - files processed based on the legitimate interest of the administrator (Article 6(1)(f) GDPR);

• statistical: they allow to examine the traffic on the website, get to know the preferences of our users, analyze their behavior on the website and enable interactions with external networks and platforms - files processed based on the voluntary consent of the user (Article 6(1)(a) GDPR);

• marketing: they allow to adjust the displayed advertisements and content to the preferences of our users and to conduct personalized marketing campaigns - files processed based on the voluntary consent of the user (Article 6(1)(a) GDPR).

COOKIE STORAGE TIME

The Cookies used by the service are stored in accordance with the following information:

• necessary: these are permanent, session (deleted after closing the window) and stored for 30 days;

• statistical: these are session (deleted after closing the window) and stored from 1 day to 2 years;

• marketing: these are session (deleted after closing the window) and stored from 1 day to 1 year.

DETAILED INFORMATION

Normally, most of the Internet browsers available on the market by default accept the storage of Cookies.

The user has the ability to set the conditions for using Cookies:

• using the settings of their own web browser - this means that they can, for example, partially restrict (e.g. temporarily) or completely disable the ability to store Cookies on their device - in the latter case, however, this may affect some functionalities of the Service;

• using the Cookie management panel available when loading the service

Detailed information on changing Cookie settings and their individual removal in the most popular web browsers is available in the browser's help section.

The service uses the Google Analytics service - detailed information on how Google uses data collected during the use of websites and applications of our partners is available at: www.google.com/policies/privacy/partners/

PRIVACY POLICY

GENERAL PROVISIONS

The data controller is S&S Sp. z o.o., with its registered office in Warsaw at ul. Lektykarskiej 46, 01-687 Warszawa, hereinafter referred to as the 'Administrator', who is also the Service Provider.

All questions and requests regarding the exercise of your rights, please submit to the address of our Data Protection Officer [email protected].

Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

We take special care to protect the interests of the persons whose data is concerned, and in particular we ensure that the data we collect is:

• processed in accordance with the law;

• collected for specified, lawful purposes and not subjected to further processing incompatible with those purposes;

• substantively correct and adequate in relation to the purposes for which they are processed and stored in a form that allows identification of the persons to whom they relate, no longer than is necessary to achieve the purpose of processing.

SCOPE OF DATA COLLECTED

Your personal data is collected and processed only on the basis of appropriate legal bases, and their scope depends on the type of service provided.

The personal data processed by the Administrator are primarily: name and surname, email address, telephone number, data necessary to issue an invoice and data contained in the content of the message sent to us, which we receive from you as a result of your voluntary consent.

PURPOSES AND LEGAL BASES FOR DATA COLLECTION

Your personal data is processed in order to:

• take actions at your request before concluding a contract and perform the contract on the terms described in the Regulations - processing based on Article 6(1)(b) GDPR, i.e. carrying out actions necessary to conclude a contract or actions taken before its conclusion; fulfilling the legal obligations incumbent on the Administrator, in the field of finance and accounting - processing based on Article 6(1)(c) GDPR;

• provide a response to inquiries made to us by phone and sent via the contact form available on the website - the processing is based on Article 6(1)(f) GDPR, i.e. the implementation of the legitimate interest of the administrator related to building and developing relationships with our customers and striving to sell goods and services;

• send marketing content through the communication channel for which you have voluntarily given your marketing consent, i.e. by email to the indicated email address and/or phone notifications (SMS/MMS), in order to present offers and commercial terms - processing based on Article 6(1)(f) GDPR, i.e. the legitimate interest of the Administrator;

• pursue and defend any claims - the processing is based on Article 6(1)(f) GDPR, i.e. the implementation of the legitimate interest of the Administrator;

• conduct surveys on the data security market, the level of data security and protection implementation or satisfaction surveys - the processing is based on Article 6(1)(f) GDPR, i.e. the implementation of the legitimate interest of the Administrator.

PROCESSING PERIOD

Your personal data will be processed only for the period necessary to achieve the purpose for which it was collected, i.e.

• for the period necessary to provide electronic services (maintaining the User Account) and to fulfill the Order, and after that time for the period of limitation of claims, i.e. up to 6 years calculated from the date of account deletion or settlement;

• for the period necessary to respond to the inquiry received by phone or sent via the contact form, but no longer than 6 months from the moment of the last contact.

In the case of data processing based on the legitimate interest of the Administrator, your data will be processed until the purpose of processing ceases (e.g. limitation of claims) or until an effective objection is filed.

In the case of a clear closure of the conversation on your part, the data will be deleted immediately from the working system databases, and from the backup copies within 30 days.

DATA RECIPIENTS

The Administrator may transfer personal data only to trusted recipients, such as entities providing and servicing IT systems or solutions, entities supporting the operation of the website, marketing service providers and law firms providing services to S&S Sp. z o.o.

In the case of making a purchase, the data will be transferred to online payment operators with whom the administrator has concluded appropriate cooperation agreements.

RIGHTS OF PERSONS

At any time, you have the ability to:

• withdraw consent to processing;

• request access to your personal data;

• request rectification of your personal data;

• request deletion or restriction of processing of your personal data;

• object to the processing of data.

To exercise your rights, we encourage you to contact our Data Protection Officer directly by email: [email protected]

If you wish to withdraw your consent, we suggest sending a message from the same email address or phone number that you receive marketing content from us. The sole consequence of withdrawing consent will be that you will no longer be able to receive information about our offer and other marketing content from us. Withdrawal of consent does not affect the legality of the processing of your data that took place before this withdrawal.

If you have any doubts about the respect of your rights, you have the possibility to file a complaint with the supervisory authority (UODO).