Privacy Policy

Last updated: 31.07.2026

1. General provisions

  1. The controller of personal data is Piotr Michałowski, NIP (tax ID) 8212442422, ul. Jana Nowaka-Jeziorańskiego 47/143, 03-982 Warszawa, Poland (the "Controller").
  2. Contact on privacy matters: kontakt@piotrmichalowski.com.
  3. The website operates at: piotrmichalowski.com (the "Website").
  4. The Controller processes data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. What data do I collect and why?

Data appears on the Website in several places. Each of them is described separately below.

A) Technical data (hosting)

The Website is hosted on Vercel. Every page view leaves technical data in the server logs: IP address, information about the browser and device, the address of the page opened, and the date and time.

Purpose: delivering the page, error diagnostics, and security.

B) Analytics data (only after consent)

If you agree to analytics cookies, Google Analytics 4 collects: an identifier assigned by that tool, approximate location (country, region, city), device and browser type, the entry source, the pages opened, and selected events (for example, clicking a button to book a call or submitting a form).

Purpose: visit statistics and improvement of the Website. Without consent this tool does not run at all (details in section 6).

C) Material forms

On the material pages (including /ai-start, /ai-value, /ai-pilot, /ai-ready) you provide your name and business e-mail address. Depending on the form, this may also include the company name or company size, and optionally the number of AI initiatives underway and your role. I also record the entry source, that is, which link led you to the page (a parameter in the URL).

Purpose: sending the requested material and the related e-mail series, and audience segmentation.

D) Quiz on the /ai-readiness page

The quiz is run in the Tally tool. You provide your name, e-mail address, optionally the company name, and you answer questions about the situation in your organization (including the number and stage of AI initiatives, the main blocker, company size, and role).

Purpose: showing a result matched to your answers and sending a summary to your e-mail.

E) Programme interest list (/ai-operator)

E-mail address, an indication of whether you are applying as a company or solo, an optional open answer, and the entry source.

Purpose: contact about the programme once it starts.

F) Newsletter (separate consent)

E-mail address and name (the same as provided in the form), together with the fact that consent was given and its date.

Purpose: sending the newsletter. Details in section 5.

G) E-mail contact

E-mail address and the content of the message you send.

Purpose: reply and further correspondence.

H) Booking meetings (Calendly)

The data you enter in the Calendly form (for example, name, e-mail, company or role, answers to questions, chosen time slot).

Purpose: organizing the meeting and communication about the time.

Providing data is voluntary. However, without a name and e-mail address it is not possible to send a material or book a meeting.

3. Legal bases for processing

  • Article 6(1)(a) GDPR - consent: analytics cookies and Google Analytics 4, sending the requested material together with the related e-mail series, taking part in the quiz and sending its summary, joining the programme interest list, the newsletter (consent separate from the rest),
  • Article 6(1)(b) GDPR - steps taken before entering into a contract and performance of a contract: contact regarding cooperation, booking and holding a call,
  • Article 6(1)(f) GDPR - the Controller's legitimate interest: delivery and security of the Website (hosting logs), handling correspondence unrelated to cooperation, and the establishment and defence of claims.

You can withdraw any consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

4. Materials and e-mail series (Brevo)

  1. Signing up for a material means sending that material and a related, limited e-mail series.
  2. Contact lists and delivery are handled by the Brevo platform.
  3. Data from the form (including company size, number of AI initiatives, role, entry source) is saved as contact attributes and used for audience segmentation.
  4. You can opt out of the correspondence at any time: an unsubscribe link is in every message, and you can also write to kontakt@piotrmichalowski.com.

5. Newsletter

  1. The newsletter is a separate purpose of processing, independent of sending materials.
  2. Consent to the newsletter is separate, voluntary, and unchecked by default. The lack of this consent does not block receipt of the requested material.
  3. I record the e-mail address, the name, and the fact that consent was given together with its date.
  4. Newsletter delivery is handled by the Brevo platform.
  5. You can withdraw consent at any time: via the unsubscribe link in a message or by e-mail to kontakt@piotrmichalowski.com. Withdrawing consent to the newsletter does not affect the receipt of materials requested earlier.

6. Analytics (Google Analytics 4)

  1. Google Analytics 4 does not run before your consent. Before you click "Accept" on the cookie banner, the Google script is not loaded and does not send any data, including when moving between pages.
  2. After consent, the tool works in Google Consent Mode v2: only analytics data consent is enabled. Advertising signals remain permanently disabled.
  3. I do not run remarketing or advertising based on data from the Website. There are no advertising pixels or other tracking tools on the Website.
  4. You can withdraw consent at any time via the "Cookie settings" link in the footer of every page. After withdrawal, the Website deletes Google Analytics cookies and returns to a state without analytics.
  5. Analytics data is used solely for statistics and improvement of the Website.

7. Quiz (Tally)

  1. The quiz on the /ai-readiness page is hosted in the Tally tool and opens on tally.so, where that provider's privacy policy also applies.
  2. After the form is submitted, the answers go to Tally and from there, automatically, to Brevo together with the e-mail address and the calculated result.
  3. The result (segment) is calculated automatically from your answers in order to show you the right summary and select the content of the message.

8. Booking meetings (Calendly)

  1. The booking buttons lead to the Calendly tool. The reservation form opens on that provider's site.
  2. Data entered in Calendly is processed for the purpose of organizing the meeting and communication about the time.

9. Who do I share data with?

  1. I do not sell data and do not share it for the marketing purposes of other entities.
  2. I entrust data to service providers that the Website actually uses:
    • Brevo - contact lists and delivery of materials, e-mail series, and the newsletter,
    • Vercel - hosting of the Website (technical data in server logs),
    • Google - Google Analytics 4 (only after consent),
    • Tally - the quiz form on the /ai-readiness page,
    • Calendly - booking meeting slots.
  3. With providers that process data on my behalf (Brevo, Google, Tally, Vercel, Calendly) I have concluded data processing agreements (DPAs) as required by Article 28 GDPR.
  4. Data may also be disclosed to entities authorized under applicable law.
  5. Some providers process data outside the European Economic Area (for example, in the USA). The transfer then takes place on the basis of the mechanisms provided for in the GDPR that those providers apply (including standard contractual clauses).

10. How long do I keep data?

  • Contacts in Brevo (materials, e-mail series, newsletter): until consent is withdrawn or you unsubscribe from the correspondence. After opting out, the contact is deleted or remains only on the list of unsubscribed users so as not to receive further messages.
  • Quiz answers: in the Tally tool until they are deleted by the Controller, and the result and contact attributes in Brevo on the terms above.
  • Analytics data: in Google Analytics 4, event data and user data are kept for 14 months (the counter resets on new user activity), after which they are deleted automatically.
  • Hosting logs: for the log retention period at the hosting provider.
  • E-mail correspondence: for the time needed to handle the matter, and then for the time needed to establish or defend claims.
  • Data from Calendly: for the period needed to hold the meeting and any further correspondence.

11. Automated decisions and profiling

I do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. The quiz result is calculated automatically, but it serves solely to show a summary and select the content of the message.

12. Your rights

You have the right to:

  • access your data,
  • rectify your data,
  • erase your data,
  • restrict processing,
  • data portability,
  • object to processing (where the basis is legitimate interest),
  • withdraw consent at any time (where processing is based on consent).

To exercise these rights, write to kontakt@piotrmichalowski.com.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

13. Cookies

The Website uses cookies and similar technologies. Analytics cookies are enabled only after your consent. Details can be found in the Cookie Policy.

14. Changes to the policy

I update the policy when the way the Website works or the list of tools used changes. The date of the last update is given at the top of the page.

15. Contact on privacy matters

For privacy matters, write to: kontakt@piotrmichalowski.com.