1. Data controller

The controller of personal data is ASI.studio Artur Sinderman, based in Gdansk, Poland (hereinafter: ASI.studio).

Contact for all matters concerning personal data: contact@asistudio.ai.

2. What data we process and why

We only process data that you provide to us voluntarily:

• Contact form — name, e-mail address, message content. Purpose: responding to your enquiry and further correspondence.
• Consultation booking (Cal.com) — name, e-mail address, selected time slot. Purpose: scheduling and holding the call.
• AI voice assistant — phone number and the course of the conversation. Purpose: handling the call, answering questions about our services and scheduling consultations (details in section 6).
• E-mail and phone correspondence — data provided in its course. Purpose: handling the matter you contact us about.

3. Legal bases for processing

We process data in accordance with the GDPR, on the following bases:

• Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract (responding to an enquiry, scheduling and holding a consultation),
• Art. 6(1)(a) GDPR — consent, to the extent it has been given (e.g. in the contact form),
• Art. 6(1)(f) GDPR — the controller's legitimate interest: ongoing communication, ensuring the security of our services, and establishing or defending potential claims.

4. Data recipients

We never sell personal data or share it for marketing purposes. Access to data — solely to the extent necessary to provide the services — may be granted to providers acting on our behalf:

• Vercel — website hosting and cookieless traffic analytics,
• Formspree — contact form processing,
• Cal.com — consultation booking calendar,
• providers of telecommunications infrastructure and speech processing for the AI voice assistant (including Twilio and ElevenLabs).

Some providers may process data outside the European Economic Area — only with the safeguards required by the GDPR, in particular standard contractual clauses.

5. Data retention

We keep data no longer than necessary for the purpose for which it was collected:

• correspondence and form data — for the time needed to handle the matter, and then for the period necessary to establish or defend potential claims,
• booking data — for the time needed to handle the consultation and any further cooperation,
• recordings and transcripts of conversations with the voice assistant — for a maximum of 90 days (section 6).

6. AI voice assistant

Conversations with the AI voice assistant may be recorded and transcribed for quality assurance and system improvement purposes only. Recordings are not used for marketing.

The assistant operates in a data minimisation mode (Zero-PII): it does not ask for data beyond what is necessary to handle your matter. Please do not share special categories of data (e.g. health information) during the conversation.

Recordings and transcripts are permanently deleted no later than 90 days after the conversation.

7. Rights of data subjects

In connection with the processing of your data, you have the right to:

• access your data and obtain a copy of it,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO).

Requests concerning your data should be sent to contact@asistudio.ai.

8. Automated decision-making and profiling

We do not make decisions based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you. We do not carry out marketing profiling.

9. Cookies

The asistudio.ai website does not use tracking or marketing cookies.

• Visit statistics are collected without cookies (Vercel Web Analytics) — the data is aggregated and does not allow the identification of any individual.
• The site may store a technical cookie that remembers your selected language version.
• The contact form (Formspree) and the booking calendar (Cal.com) process data only when you voluntarily use them.
• Embedded widgets (e.g. the calendar) may store in the browser (localStorage) only technical information necessary for their operation.

10. Changes to this policy

If the scope of our services or the list of providers changes, we will update this document. The current version is always published at asistudio.ai/prywatnosc.