PRIVACY POLICY

 

PRIVACY POLICY

Last Updated: September 30, 2025

1. Data Administrator

The administrator of your personal data is:
Daria Chuprina Lazysoft
NIP: 8982319083
REGON: 541390054
Contact: info@lazysoft.pl

1. What Data We Collect

We collect and process the following types of personal data:

Account Data:
Email address, name, registration date and account activity.

Technical Data:
IP address, session ID, browser type and version, device information, access logs.

Cookies and Analytics:
Functional cookies (necessary for site operation), analytics cookies (Google Analytics) - you can opt-out via our Cookie Policy page, cookie preferences.

Form Data:
Any information you submit through contact forms, feedback forms, or other input fields on our website.

AI Interaction Data:
Anonymous text queries submitted to our AI News and RAG Consultant features. These queries are stored WITHOUT any user identification (no email, name, user ID, or IP address). Retention period: 7 days, then automatically deleted. Purpose: improving AI model accuracy and performance.

1. Legal Basis for Processing

We process your personal data based on:

Consent (GDPR Art. 6.1.a): When you register, subscribe, or accept cookies.
Contract performance (GDPR Art. 6.1.b): To provide services you requested.
Legitimate interest (GDPR Art. 6.1.f): For analytics, security, and service improvement.
Legal obligation (GDPR Art. 6.1.c): When required by EU or Polish law.

1. AI Features and Data Usage

RAG Consultant and AI News:
Our website includes AI-powered features that process user queries. Here’s how we handle this data:

When you interact with AI features, your text query is processed in real-time. Queries are stored anonymously (without any personal identifiers) for 7 days. Purpose: training and improving our AI model accuracy. After 7 days, all queries are automatically and permanently deleted. No profiling or automated decision-making is performed. AI processing occurs on servers located in EU (Germany).

1. Third-Party Services

We share limited data with the following third parties:

Google Analytics:
Purpose: website traffic analysis and user behavior statistics. Data shared: anonymized IP address, device info, page views. Location: EU and USA (Standard Contractual Clauses applied). You can opt-out via Cookie Policy page.

Telegram:
Purpose: admin notifications about new user requests and inquiries. Data shared: notification content (may include form submission data). Location: varies (Telegram infrastructure). Only for internal admin purposes.

Hetzner (Hosting Provider):
Purpose: website hosting and data storage. Data shared: all website data. Location: Nuremberg, Germany (EU). GDPR-compliant data processing agreement in place.

1. Cookies

We use cookies for essential functionality and analytics. For detailed information about cookie types, purposes, and how to manage your preferences, please visit our dedicated Cookie Policy page.

You can disable cookies in your browser settings, but this may limit website functionality.

1. Your Rights Under GDPR/RODO

You have the following rights regarding your personal data:

Right of access: Request a copy of your personal data.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure (right to be forgotten): Request deletion of your data.
Right to restriction: Limit how we use your data.
Right to data portability: Receive your data in machine-readable format.
Right to object: Object to processing based on legitimate interest.
Right to withdraw consent: Withdraw consent at any time (doesn’t affect prior processing).
Right to lodge a complaint: File a complaint with supervisory authority.

For Poland (RODO): You can lodge a complaint with Urząd Ochrony Danych Osobowych (UODO): [www.uodo.gov.pl](http://www.uodo.gov.pl)

For EU: Contact your local Data Protection Authority.

1. Data Retention

We retain your data for the following periods:

Account data: Until account deletion or 3 years of inactivity.
AI queries: 7 days, then automatic deletion.
Analytics data: 26 months (Google Analytics default).
Form submissions: As long as necessary to respond, then deleted or anonymized.
Cookies: According to settings in Cookie Policy (typically 1-24 months).
Legal obligations: As required by applicable law.

1. Data Security

We implement appropriate technical and organizational measures to protect your data:

SSL/TLS encryption for data transmission. Secure hosting infrastructure (Hetzner, Germany). Regular security updates and monitoring. Access controls and authentication. Regular backups with encryption.

1. International Data Transfers

Your data is primarily stored and processed within the EU (Germany). When we use services with potential international transfers (e.g., Google Analytics), we ensure adequate safeguards through:

Standard Contractual Clauses (SCCs). Adequacy decisions by EU Commission. Additional security measures.

1. Children’s Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

1. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last Updated” date. Significant changes will be communicated via email or prominent website notice.

1. Contact Us

For questions, concerns, or to exercise your rights regarding personal data:

Email: info@lazysoft.pl
Data Administrator: Daria Chuprina Lazysoft
NIP: 8982319083
REGON: 541390054