Privacy Policy
Effective from 18 September 2026
1. Data controller
The controller of personal data is Silvanos Sp. z o.o., with its registered office in Zielona Góra, ul. Kazimierza Wielkiego 7/5, 65-047 Zielona Góra, entered in the register of entrepreneurs of the National Court Register (Krajowy Rejestr Sądowy) under KRS 0000894596, NIP 9731077051, REGON 388648447 (hereinafter: “the Controller”). Contact in matters concerning personal data: info@silvanos.ai.
2. What data we process and where we obtain it
We process the data that you provide to us voluntarily through the contact form on the silvanos.ai website: your e-mail address (mandatory), telephone number (optional) and the content of your message. The website does not require you to create an account. Cookies, usage measurement and browser storage are described in section 3.
3. Cookies, usage measurement and browser storage
We start measuring the use of the website only with your consent, given by clicking the “I accept” button in the window that we display on your first visit and after every change to this policy. Until that click, the website does not load any measurement tool and does not send any data to its providers. If you click “I do not accept”, the website works in the same way — only without measurement. The legal basis for measurement — to the extent that it concerns personal data — is your consent (Art. 6(1)(a) GDPR).
With your consent, we use two tools:
- Google Analytics 4 (provider: Google). It stores the
_gaand_ga_<identyfikator>cookies on your device, which distinguish visitors and maintain the session; both expire 2 years after the last visit (your browser may shorten this period). Google does not store the IP address of visitors from the European Union — it uses it to determine an approximate location and deletes it immediately. We retain measurement data in Google Analytics for 14 months. The website does not allow Google to use this data for advertising — consent for advertising purposes is permanently refused in the website’s code. - PostHog, in a mode without cookies and without a persistent identifier: the event identifier is random and disappears when the page is reloaded, so we do not recognise you on your next visit. Events pass through our server, which does not pass your IP address on to the tool; the data is stored on servers in the European Union.
In both tools we count page views and clicks on selected elements (buttons and links, opening a question in the FAQ section, submitting the form — without the content of the message or contact details; in the case of the order form, we record only the range of typical order value selected from the list). The following are sent together with the event: the address of the visited page without parameters, the language of the website, the address of the page from which the visit originated, and basic technical data of the browser (browser type, operating system, device type, screen size). We do not create a profile of you and do not link this data to your name, e-mail address or any other information by which we could identify you. However, Google Analytics recognises your browser on subsequent visits — the cookie described above is used for this purpose. We do this for one purpose only — to improve the website.
You may withdraw your consent at any time, as easily as you gave it: using the button below, which opens the same consent window. After you withdraw consent, the website stops loading both tools; you may delete the Google Analytics cookies that have already been stored by clearing the site data in your browser. Withdrawal does not affect the lawfulness of measurement carried out before that moment. You may also block measurement in your browser settings or with a script-blocking extension — the website then works normally.
Withdraw consent to measurement
We use browser storage (localStorage and sessionStorage) solely for the operation of the website: we remember your decision from the consent window together with the version of this policy to which it relates (after the policy changes, we will ask again), the fact that the intro animation has already been played, and the language switch. These entries do not contain an identifier, are not sent to the server, and you can delete them by clearing the site data in your browser.
4. Purposes and legal bases of processing
- Responding to your message and conducting correspondence — Art. 6(1)(f) GDPR (the Controller’s legitimate interest in communicating with persons interested in our services), and where the correspondence is aimed at concluding a contract — Art. 6(1)(b) GDPR.
- Booking a call at a time chosen by you and conducting it — Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract), and in other respects — Art. 6(1)(f) GDPR (the Controller’s legitimate interest in communicating with persons interested in our services).
- Measurement of use of the website and its improvement — Art. 6(1)(a) GDPR (your consent given in the consent window; the scope and manner of measurement are described in section 3).
- Establishing, pursuing or defending claims — Art. 6(1)(f) GDPR.
5. Recipients of data
Data from the form goes directly to our system for receiving submissions, maintained on the servers of our hosting provider (a company from the European Union), and to our e-mail inbox. Fonts and other resources of the website are served from our server. The website connects to external providers in only one case: to the measurement tools described in section 3 — only after you have given your consent. The providers act on the basis of data processing agreements or their own terms as independent controllers with regard to their services. In the case of providers from outside the European Economic Area, the transfer takes place on the basis of standard contractual clauses (Art. 46 GDPR) or an adequacy decision. The measurement data described in section 3 goes — only after you have given your consent — to the provider of the PostHog tool (servers in the European Union, without your IP address) and to Google (Google Ireland Limited) as the provider of Google Analytics, which processes it on our behalf. Google may transfer data to the United States on the basis of the European Commission’s decision on the EU–US data protection framework (Data Privacy Framework), and where this basis does not apply — on the basis of standard contractual clauses (Art. 46 GDPR). We do not sell data and do not disclose it to third parties for marketing purposes.
6. Retention period
We retain correspondence for the time necessary to handle the matter, and then until the expiry of the limitation period for potential claims (as a rule, no longer than 3 years from the end of the correspondence), unless we commence cooperation — in which case the data is processed for the duration of that cooperation and for the periods required by law (e.g. tax regulations). We delete form submissions from the system 12 months after they are submitted, unless we commence cooperation during that time.
Google Analytics cookies expire 2 years after the last visit (your browser may shorten this period), and we retain measurement data in Google Analytics for 14 months. Your decision from the consent window is remembered in the browser until you change it, delete the site data, or the version of this policy changes.
7. Your rights
You have the right to: access to your data, rectification, erasure, restriction of processing, data portability, objection to processing based on a legitimate interest, and withdrawal of your consent to measurement at any time (section 3) — without affecting the lawfulness of processing carried out before the withdrawal. To exercise your rights, write to info@silvanos.ai. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych; ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
8. Voluntary nature of providing data
Providing data is voluntary, but without an e-mail address we will not be able to respond to your message.
9. Automated decision-making and profiling
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects.
10. Changes to the policy
The policy may be updated (e.g. when new functions of the website are launched). The effective date of the current version is given under the title of this policy; after every change we will ask for your consent to measurement again (section 3). The current version is always available at silvanos.ai/polityka-prywatnosci.