Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

• Company: SYHI Digital sp. z o.o.
• Address: ul. Dworcowa 2/2, 38-500 Sanok, Poland
• Email: marcin@syhi.digital

2. Data We Collect

We may collect the following personal data when you use our website:

• Technical data: IP address, browser type, operating system, referring URLs, pages viewed, and access timestamps — collected automatically by our web server for security and performance.
• AI Chat data: Messages you send to our AI assistant are processed by Google Gemini API to generate responses. We do not store chat transcripts on our servers.
• Contact data: Name, email address, and any information you provide when reaching out to us via email or booking a consultation.
• Cookie data: Information collected via cookies as described in our Cookie Policy.

3. Purposes and Legal Basis

We process your personal data for the following purposes under GDPR Article 6(1):

• Website functionality (Art. 6(1)(f)): Legitimate interest in operating our website securely and efficiently.
• AI Chat assistance (Art. 6(1)(a)): Based on your consent, by voluntarily using the AI chat feature.
• Analytics (Art. 6(1)(a)): With your explicit consent via cookie preferences, we may collect analytics data in the future.
• Business communication (Art. 6(1)(b)/(f)): To respond to your inquiries and provide our services.

4. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). We ensure appropriate safeguards are in place:

• Google LLC (Gemini API) — AI chat processing. Data transfers under EU Standard Contractual Clauses (SCC). Google Cloud compliant with EU-US Data Privacy Framework.
• Vercel Inc. — Website hosting infrastructure. Compliant with EU-US Data Privacy Framework and SOC 2 Type II certified.

5. Data Retention

We retain personal data only as long as necessary for the purposes described above. Technical server logs are automatically deleted after 30 days. AI chat sessions are not stored beyond the active session. Contact data is retained for the duration of our business relationship plus any legally required period.

6. Your Rights (GDPR Art. 15–22)

Under GDPR, you have the following rights regarding your personal data:

• Right of access — obtain confirmation of whether your data is processed and request a copy (Art. 15)
• Right to rectification — correct inaccurate or incomplete personal data (Art. 16)
• Right to erasure — request deletion of your data (Art. 17)
• Right to restriction of processing — limit how we use your data (Art. 18)
• Right to data portability — receive your data in a structured, machine-readable format (Art. 20)
• Right to object — object to processing based on legitimate interests (Art. 21)
• Right to withdraw consent — withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
• Right to lodge a complaint — file a complaint with your national data protection authority (UODO in Poland, BfDI in Germany, AEPD in Spain)

To exercise any of these rights, please email us at marcin@syhi.digital. We will respond within 30 days.

7. Cookies

Our website uses cookies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date. We encourage you to review this page periodically.