Privacy Policy
Last updated: August 1, 2025
This Privacy Policy outlines how your personal data is processed by the data controller, Mariusz Kolanko conducting business under the name Mariusz Kolanko Consulting and Marcin Rojek conducting business under the name Marcin Rojek Consulting as partners of the civil partnership byteLAKE M.Kolanko, M.Rojek s.c. (hereinafter: “byteLAKE s.c.”), in connection with your use of the websites byteLAKE.com and/or www.byteLAKE.pl, including our AI-powered chatbot and related UI plugins. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the Polish Personal Data Protection Act (Ustawa o ochronie danych osobowych, RODO), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), the CAN-SPAM Act, and the California Bot Disclosure Law.
1. Data Controller
The data controller of your personal data is:
byteLAKE s.c.
Mariusz Kolanko Consulting and Marcin Rojek Consulting
Address: Plac Solny 14 lok. 3, 50-062 Wrocław, Poland
Email: gdpr@byteLAKE.com
Phone: +48 508 091 885, +48 505 322 282
2. Purposes and Legal Basis for Data Processing
We process your personal data for the following purposes:
- Contact
regarding inquiries: Based on your consent (Art. 6(1)(a) GDPR/RODO) to
respond to inquiries submitted via the contact form or chatbot on
byteLAKE.com and/or byteLAKE.pl.
- Marketing
communications: Based on your consent (Art. 6(1)(a) GDPR/RODO) to send
promotional emails or chatbot-initiated messages, if you have opted in, in
compliance with CAN-SPAM Act requirements (e.g., unsubscribe option,
physical address).
- Analytics
and service improvement: Based on our legitimate interest (Art.
6(1)(f) GDPR/RODO) to analyze website and chatbot usage (e.g., via cookies
or UI plugins) to improve functionality.
- Chatbot
functionality: Based on your consent (Art. 6(1)(a) GDPR/RODO) or our
legitimate interest (Art. 6(1)(f) GDPR/RODO) to provide customer support,
process inquiries, or personalize interactions via our AI-powered chatbot
(powered by OpenAI).
3. Categories of Personal Data Collected
We collect the following categories of personal data:
- Identification
Information: Email address, name, surname, phone number, or other data
you voluntarily provide via the contact form or chatbot.
- Chatbot
Interaction Data: User inputs, conversation history, IP address,
device information (e.g., browser type, operating system) collected during
chatbot use.
- Analytical
Data: Data on website/chatbot usage (e.g., clicks, time spent)
collected via cookies or UI plugins.
- Sensitive
Data: We do not seek sensitive data (e.g., health, political opinions)
unless required for specific services (e.g., AI Agents in legal/medical
sectors). If provided voluntarily, it is processed with your consent.
Per CCPA/CPRA, these categories may be shared with service providers (e.g., OpenAI, hosting providers) under data processing agreements but are not sold.
4. Data Recipients
Your data may be shared with:
- Service
Providers: Entities providing hosting, analytical tools (e.g., Google
Analytics), email services, or chatbot technology (e.g., OpenAI) under
data processing agreements. OpenAI processes chatbot data in compliance
with GDPR/RODO/CCPA safeguards (e.g., encryption, Standard Contractual
Clauses for non-EEA transfers).
- Public
Authorities: If required by law (e.g., tax authorities).
We do not transfer data outside the European Economic Area (EEA) unless necessary, ensuring adequate protection (e.g., Standard Contractual Clauses).
5. Data Retention Period
- Contact
Form/Chatbot Data: Retained for the period necessary to fulfill the
purpose (e.g., until correspondence is completed), but no longer than 3
years from the last contact, unless you consent to further processing or
request deletion.
- Marketing
Data: Retained until you withdraw consent or unsubscribe.
- Analytical
Data: Retained for up to 2 years, as specified by analytical tools
(e.g., Google Analytics).
- Chatbot
Conversation Data: Stored for up to 3 years or until you request
deletion, per CCPA/GDPR/RODO rights.
6. Your Rights
Under GDPR/RODO, the Polish Personal Data Protection Act (Ustawa o ochronie danych osobowych, RODO), and CCPA/CPRA, you have the following rights:
- Right
to Access: View your data or receive a copy.
- Right
to Rectify: Correct inaccurate data.
- Right
to Erasure: Delete your data (“right to be forgotten”).
- Right
to Restrict Processing: Limit how your data is used.
- Right
to Data Portability: Transfer your data to another provider.
- Right
to Object: Oppose processing based on legitimate interest.
- Right
to Withdraw Consent: Revoke consent at any time (without affecting
prior processing).
- Right
to Opt-Out (CCPA): Opt out of data sales/sharing via the Do Not Sell
or Share My Personal Information link or by contacting gdpr@byteLAKE.com.
- Right
to Non-Discrimination (CCPA): We will not discriminate against you for
exercising your rights.
- Right
to Lodge a Complaint: Contact a supervisory authority (e.g., Prezes
Urzędu Ochrony Danych Osobowych (PUODO) in Poland or California Privacy
Protection Agency).
To exercise these rights, contact us at gdpr@byteLAKE.com or submit a request via our Data Request Form. We verify your identity for CCPA/GDPR/RODO requests, using only necessary data for verification.
7. Chatbot Disclosure
Our chatbot, powered by OpenAI, is an AI tool designed to assist with inquiries and provide personalized responses. Per California’s Bot Disclosure Law, we disclose that you are interacting with an automated system. Data collected via the chatbot is used only for stated purposes (e.g., customer support, analytics) and protected with encryption.
8. Unsubscribing from Communications
If you have consented to receive marketing communications, you can unsubscribe by clicking the “Unsubscribe” link in emails or chatbot messages or by contacting gdpr@byteLAKE.com, per CAN-SPAM Act and GDPR/RODO requirements.
9. Data Security
We implement technical and organizational measures (e.g., SSL encryption, role-based access controls) to protect your data from unauthorized access, loss, or alteration. Chatbot data is encrypted during transmission and storage, and OpenAI complies with strict security standards.
10. Contact
For questions about data processing, contact:
byteLAKE s.c.
Address: Plac Solny 14 lok. 3, 50-062 Wrocław, Poland
Email: gdpr@byteLAKE.com
Phone: +48 508 091 885, +48 505 322 282
We reserve the right to update this Privacy Policy. The
current version is always available on byteLAKE.com and byteLAKE.pl.