Privacy policy of aibusiness.center

This document sets out the rules for the processing and protection of the personal data of people visiting the website https://aibusiness.center/ (hereinafter the “Website”).

The controller of your personal data in connection with your use of the Website is the AI Business Center Foundation, with its registered office in Katowice at ul. Mickiewicza 29, 40-085 Katowice, National Court Register (KRS): 0001223578, NIP 6343067656 (hereinafter the “Foundation”).

In all matters relating to the processing of personal data by the Website, you can contact us at: hello@aibusiness.center.

The rules for processing your data differ depending on whether you are a visitor to the Website who is not logged in, or whether you have established a relationship with us by signing up for the newsletter. To make things easier, we have therefore divided this document into three parts:

• Cookies and other technologies
• Processing of the personal data of people visiting the Website
• Other situations in which personal data are processed – newsletter

If you are short of time, click the link to the part that interests you most. If you have a little more time, we encourage you to read the whole text.

COOKIES AND OTHER TECHNOLOGIES

We use cookies and other similar mechanisms to learn how users use our Website and for marketing purposes, including to display advertisements to them elsewhere on the Internet.

What are cookies?

A cookie is a small text file saved by a website on your computer, phone or any other device. A cookie contains data about your use of that website.

By default, web browsers allow cookies to be stored on your device and allow external access to those files. Some cookies are necessary for the Website to function. In other cases, when you first visit our Website, we ask you to consent to the installation of cookies.

How can you manage cookie consents?

You can change your cookie settings at any time by changing your web browser settings. You can also always return to the cookie consent management panel by using the “Manage cookies” link visible in the footer of our Website.

If you block specific cookies to which you previously consented, this will be treated as a withdrawal of consent, and once consent has been withdrawn we will stop processing your data to that extent.

Below you can read exactly which cookies we use and to which companies your data may be transferred in this connection.

Which cookies do we use?

A. Necessary cookies

These cookies are used for the proper functioning of the site. Unfortunately, you cannot disable them, because if they are disabled our Website will simply not work properly.

For this purpose we use our own privacy settings panel. If tools that require your consent are active on our Website, the panel stores your choices in the “aibc_consent” cookie (for 12 months). It saves and restores your consent, or lack of consent, to the activation of particular types of cookies on our Website each time you visit it.

Other necessary cookies on our Website are used for its proper functioning, e.g. to manage the activation of other tracking tools to which you consent. We also use the Cloudflare tool for the purpose of ensuring the security of the Website, including, among other things, protection against various attacks from the network. The contact form is protected against automated spam by the Cloudflare Turnstile service, which checks that the form is being filled in by a human.

B. Statistical analysis of our Website

We use tools that collect statistical data, thanks to which we can understand how users use our Website. The data we receive from these tools do not give us information about a specific person.

We use Google Analytics. The information that Google Analytics collects about users includes, for example: how many times a user visits the site; the date of the first and last visit; the duration of the visit; the page from which the user came to the site; the search engine the user uses; the link that was clicked; the place in the world from which the user accesses the site, etc.

Google assigns each user its own identifier (the so-called Google ID) and collects on its servers data obtained from cookies from various websites. We – as the owner of the Website – may receive from Google reports (statistics) relating exclusively to traffic on our Website. These reports, of course, cover only people who have consented on our Website to the recording of their visits by Google Analytics.

You can find further detailed information about how Google Analytics works here (opens in a new window) and here (opens in a new window).

You can also permanently prevent Google Analytics from recording information originating from your browser by installing a special plug-in available here (opens in a new window).

We also use the HotJar tool to collect statistical data, thanks to which we can understand how users use our Website. The information that HotJar collects about users includes, for example: the places clicked within the page area, the user’s navigation paths and activity on the site, and the type of browser used.
For the purposes of Website analytics we also use the following tools: (i) Inspectlet, which is used for the anonymous study of user behaviour on websites, so-called heatmaps, and (ii) Islaymetrics.

C. E-mail marketing

For the purposes of the newsletter we use a tool provided to us by an external company – MailChimp.

The e-mail marketing system places cookies on our Website that are used to display subscription forms, to save data from the subscription form and to measure the effectiveness of these forms (the conversion rate, i.e. the percentage of users who have subscribed).

D. Google Ads – behavioural advertising and other Google tools

Google collects on its servers data obtained by placing cookies on your device and uses this information to display advertisements on other sites you visit. These data are collected on all sites on which you have allowed the use of cookies (including our Website), as well as from advertisements you have clicked on. Cookies from Google usually expire after 3 months.

As advertisers using Google’s services, we do not have access to the data from the cookies saved on your device, but we can commission advertisements to audiences selected by us, e.g. to all people who have visited our website (or a specific subpage of it) within the last 7 days.

For us, these data constitute only statistical material, and we commission advertisements only on the basis of aggregate criteria (to specific target groups, not to a specific user).

You can read more about how Google uses cookies to display advertisements and how you can manage your advertising settings here (opens in a new window).

We also use Google Marketing Platform tools, which make it possible to measure the effectiveness of advertising campaigns run through Google Ads and to analyse their results.

E. Meta conversion pixel (Facebook and Instagram)

We use the so-called “conversion pixel” (remarketing pixel) of Meta in order to manage advertisements on the Facebook and Instagram platforms.

If you consent to the use of this cookie on our Website, then by means of this tool the Meta Platforms services obtain information that you have visited our Website. This information is assigned to your profile on the service in question, if you have one. If you are not a user of these services, the information is assigned to the so-called “Facebook ID” created for you.

This allows us to commission advertisements on Facebook and Instagram to people who have already visited our Website or individual subpages of it (remarketing). We then receive from Meta Platforms only statistical data on the effectiveness of the advertisements (e.g. how many people saw our advertisement, how many people clicked on it), without reference to specific users.

If you have an account on Facebook or Instagram, we encourage you to read further information about data protection on these services here (opens in a new window) and here (opens in a new window).

You can read more about the Meta remarketing pixel itself here (opens in a new window).

F. OpenAI advertising (ChatGPT Ads) – measurement pixel

1. We advertise in ChatGPT (OpenAI Ads) and use the so-called OpenAI measurement pixel. This is a tool of OpenAI that transmits the information that, after seeing or clicking on our advertisement, you performed a specific action on our Website. We use it to establish which advertisements lead to people learning about the activities and offer of the Foundation, including descriptions of services, analyses and events, and to sending us an enquiry via the contact form.

2. We are implementing the tool in stages. You can always find the current list of tools operating on the Website in the privacy settings on this site – a tool that is not listed there is not used on the Website.

3. The tool operates only if you consent to it in the privacy settings (the “OpenAI Ads” item). Until you give your consent, the OpenAI script is not downloaded or run at all, we do not send any requests to OpenAI and we do not save any identifiers of this tool on your device.

4. If you come to our Website from an advertisement, the page address may contain the “oppref” parameter – an advertisement click identifier. Once you have given your consent, the OpenAI tool saves two first-party cookies on your device:

a) “__oppref” – the advertisement click identifier, stored for 30 days; it makes it possible to link your subsequent visits during that period to the same advertisement click;

b) “__obref” – an identifier of your browser generated by the OpenAI tool, stored for 365 days; it makes it possible to recognise the same browser on subsequent visits, regardless of whether you came to us from an advertisement.

Neither of these identifiers contains your first name, surname, e-mail address or telephone number. After you withdraw your consent, the OpenAI tool itself deletes the “__oppref” file; the “__obref” file remains on your device until it expires or until you delete it in your browser settings – see the section “How can you manage cookie consents?”.

5. The events that our own code sends to OpenAI are: opening a page, viewing an event page or content, starting a registration (clicking the sign-up button), completing a registration for an event or for the newsletter, and sending a message via the contact form. Together with the event, our code transmits: the event identifier (which ensures that a single action is not counted twice), the event category required by OpenAI and – when content is viewed and when a registration is started – the identifier of the event or content to which the event relates. We do not send the content of your message, your e-mail address or your telephone number.

Regardless of what our code sends, the OpenAI tool itself attaches to each event it sends:

a) the full address of the page visited, together with all parameters contained in the address – including campaign parameters (e.g. “utm_source”) and the “oppref” click identifier – as well as the address of the page from which you came to us;

b) the identifier of the pixel assigned to the Website. Our code does not send a separate indication of the page language – the language follows from the page address referred to under letter a);

c) the identifiers stored in the cookies described in point 4, and a timestamp;

d) the data described in point 6, if the tool detects them.

In addition, the OpenAI tool sends its own technical events that are not triggered by any action of yours on our Website: a tool start-up event each time a page is opened, and diagnostic events concerning its configuration and consent status.

6. Automatic advanced matching. We are informing you directly of how the OpenAI tool itself works – regardless of what our own code sends. Once you have given your consent and the script has been loaded, the OpenAI tool itself listens to your interactions with the page (typing text, clicks, selecting a value in a field, submitting a form) and in doing so reads the form fields together with their content, as well as the technical data that the page makes available to analytics tools. The tool attaches the data detected in this way to the events it sends in two ways:

a) e-mail address, telephone number, first name and surname – transformed in your browser using the one-way SHA-256 hash function, i.e. in the form of an irreversible hash;

b) country, city, region and postcode – in unprocessed form, without being transformed by the hash function.

We draw your attention to three things: (i) hashed data are still personal data – a hash function is not anonymisation; (ii) transformation by the hash function covers the identification data listed under letter a), but does not cover the location data listed under letter b); (iii) only OpenAI controls the switch for this function – for our pixel it is enabled on OpenAI’s side, and OpenAI can enable or disable it without any change on our side. That is why the only real safeguard available to us is not loading this script until you give your consent – and that is exactly how it works on our Website.

7. The recipient of the data transmitted by this tool is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland – the entity responsible for OpenAI services in the European Economic Area. The data may be transferred to OpenAI group entities established outside the European Economic Area, including in the United States. OpenAI states that it bases such transfers on standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR).

8. We do not store the events sent to OpenAI ourselves – they go directly from your browser to OpenAI. The retention period for these data on OpenAI’s side is determined by OpenAI’s privacy rules. The “attribution window” used in our advertising panel (30 days from the click) indicates how long after an advertisement is clicked your action on the Website (e.g. sending an enquiry or signing up for an event) will still be attributed to that advertisement – it is a reporting parameter, not a data retention period. The retention periods for identifiers on your device are determined by the cookies described in point 4: “__oppref” – 30 days, “__obref” – 365 days.

9. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time – see the section “How can you manage cookie consents?”. You can read more about OpenAI’s privacy rules here (opens in a new window), and about the measurement pixel itself here (opens in a new window).

G. Social media

On our Website we have placed links to our profiles on social media: Facebook / Linkedin / X. If you visit our profile on a given service, the owner of that service will receive – as in the case of users moving from any other website to another website – information that you came to these services from our Website.

Details of the processing of data by these social networking services can be found on the websites of the providers of these services:

• Facebook and Instagram – https://www.facebook.com/privacy/center/ (opens in a new window)
• Linkedin – https://pl.linkedin.com/legal/privacy-policy (opens in a new window)
• X – https://x.com/en/privacy (opens in a new window)

We also use marketing tools provided by the above-mentioned social networking services, as well as by the TikTok service. These tools allow us to commission advertisements on social networking services to people who have already visited our Website or individual subpages of it (remarketing). We then receive from the owners of the above-mentioned services only statistical data on the effectiveness of the advertisements (e.g. how many people saw our advertisement, how many people clicked on it), without reference to specific users

H. Videos

Some videos on the Website are embedded by means of plug-ins from the YouTube service (a service owned by Google). When you play such a video on our Website, Google receives information about this from your browser, even if you do not have a Google/YouTube profile or are not currently logged in. If you have previously logged in to the above-mentioned service, that service provider will be able to assign the playback of the video directly to your profile.

If you wish to prevent Google from collecting information about your activity on our Website, you can:

• not play the video (we inform you of this before each playback of a video if you have not previously given general consent on the Website to cookies from the YouTube service. We will treat consent to the playback of a video as consent also covering other videos on our Website – until you withdraw it, i.e. change your cookie choices),
• not consent to cookies from this service on our Website,
• or log out of this service.

You can find more information about the processing of data by the YouTube service here (opens in a new window).

Legal issues relating to cookies

The legal basis for our use of necessary cookies (indicated above under letter A) is our legitimate interest, i.e. the right to run a Website supporting our business, and the need to maintain its security. The legal basis for our use of the other cookies is your consent.

In connection with our processing of your personal data by means of cookies, you are entitled at any time to the rights described below in the section “Your rights in connection with the processing of your data by the Website”.

Our use of cookies, in particular for the purposes of behavioural advertising, may involve so-called profiling. This means that we, or the marketing companies whose services we use, may create a user profile on the basis of the information collected (e.g. e-mail address, order history, the site from which the user came to the Shop) and, on that basis, formulate purchasing forecasts for the future. This allows us to decide what content (including advertisements) to display on our own and other websites.

PROCESSING OF THE PERSONAL DATA OF PEOPLE VISITING THE WEBSITE

What data do we process and for what purposes?

In connection with your use of the Website, we will process the following data of yours:

Purpose of processing	Type of data	Legal basis
Contacting you, handling enquiries sent via the contact form or by e-mail	Identification data and other information that you provide to us in correspondence. Correspondence history.	Our legitimate interest in ensuring communication with people who send us an enquiry /correspondence – Art. 6(1)(f) GDPR
Newsletter	E-mail address. Statistical data relating to the messages sent, including open history.	Our legitimate interest arising from the marketing consent you have given – Art. 6(1)(f) GDPR

Providing the above data is not mandatory, but it is necessary in order for us to contact you by e-mail and/or by telephone to respond to your enquiry. Providing data for marketing purposes (newsletter) is always voluntary.

How long do we process data?

We will process data for the time necessary to achieve the purposes listed in the table above (that is, until our legal interest enabling us to process them ceases, or until you withdraw the marketing consent in question). Further processing will be possible only where we, as controller, are subject to such a legal obligation.

In addition to processing customer data for the time necessary to achieve the purposes listed in the table above, we will then store them, appropriately recorded and protected, for such period of time as our liability could arise from having entered into any legal relationship with you. Once any potential claims have become time-barred, depending on each case, we will proceed to erase the personal data.

To whom do we transfer your data?

In our activities we use the services of other cooperating companies, which is why your data may be entrusted by us to: the hosting provider of our Website, the hosting provider of our e-mail, the provider of the e-mail marketing system, and other companies whose services and marketing tools we use.

In particular, the data you enter in the contact form is processed on our behalf by:

• Vercel Inc. – the hosting provider of our Website, on whose servers the contact form runs;
• Resend – the e-mail delivery service that delivers the message from the form to our mailbox; we send messages through its infrastructure in the European Union (Ireland);
• Cloudflare, Inc. – the provider of the Cloudflare Turnstile service, which protects the form against spam.

For the purposes of the marketing activities described above in the “Cookies” section, we use services provided by entities based in the USA (Google). Consequently, personal data may be transferred to third countries that are not members of the European Union. An adequate level of protection of your data is ensured by the Data Privacy Framework programme, about which you can read more here (opens in a new window).

We also use services of entities based in the USA (Vercel, Resend, Cloudflare) to operate the Website and the contact form, so in this respect too personal data may be transferred to third countries. Such a transfer is based on the European Commission’s adequacy decision under the Data Privacy Framework programme and, for any entity that does not participate in that programme, on the standard contractual clauses approved by the European Commission.

Your rights in connection with the processing of your data by the Website

We undertake to respect the confidentiality of your personal data and to guarantee you the ability to exercise your rights. You can exercise your rights without incurring any costs by sending us an e-mail or by contacting us in another way.

Please remember that in connection with the processing of your data you have the right to:

• request from us access to the data we hold concerning you;
• rectification of your data;
• erasure of your data if they are no longer needed for the purposes for which they were processed, or if we have no other legal basis for processing them;
• restriction of the processing of data;
• request the portability of your personal data;
• lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that your data are being processed by us unlawfully.

OTHER SITUATIONS IN WHICH PERSONAL DATA ARE PROCESSED – NEWSLETTER

Additional information for newsletter subscribers

• Regardless of whether you are our client or partner, you may voluntarily leave us your personal data if you sign up for our newsletter. If you have signed up for our newsletter, we will send you marketing information about our services, e.g. about new additions to our offer, special promotions or training materials we have prepared. Given the nature of the Foundation, one of whose statutory objectives is the integration of the industry, in the newsletter we will also send information about companies supporting the Foundation or cooperating with our Foundation, invitations to events organised by the Foundation and companies cooperating with it, market trends and analyses, reports and information about opportunities to finance (e.g. from EU funds) the technological transformation of your company.
• The basis for our processing of your data in that case is our legitimate interest arising from such marketing consent of yours.
• For the purpose of sending you the newsletter, your data (e-mail address, e-mail open history) will be entrusted by us to a company providing e-mail marketing services.
• We will process your data for as long as you do not withdraw the consent you have given us; however, in the case of the newsletter we may remove your address from our database (with additional prior notice) if you have not opened any messages from us for more than 18 months.
• In connection with our processing of your personal data for the purposes of the newsletter, you are entitled at any time to the same rights that we described above in the section “Your rights in connection with the processing of your data by the Website”.
• You can unsubscribe at any time by clicking the link contained in every newsletter.
• A modern e-mail marketing system makes it possible to analyse recipients’ actions, i.e. it tells us whether a given message has been opened by you. We analyse such information in order to better tailor the content of the newsletter to your interests and to send you personalised messages (profiling). You may object to such processing of your data by us at any time.
• Your data are not used by us to make decisions based on automated processing of data which could affect your legal situation or produce other similarly significant effects for you.

Further legal information on the rules under which we send the newsletter can be found in the Newsletter Terms and Conditions.