Privacy Policy

This document describes what data MateMatic Solutions collects, for what purpose and what rights you have over it. We do not use templates from the internet: every statement below matches what actually happens on this website and in our processes. It also contains the information notice required by the GDPR (Article 13).

01Data controller

02What data we collect

AI Potential Audit (the test on the Reliability Audit page). Your answers and score are processed only locally in your browser. They do not reach our servers unless you click "Send result" yourself and confirm sending the email from your own mailbox.

Email correspondence. If you write to [email protected], we receive your address, your name (if you give it) and the content of the message. We use this data only to carry on the conversation.

Technical data. The hosting (Cloudflare Pages) keeps standard server logs: IP address, browser headers and request time. They serve to detect failures and attacks. We do not use them for profiling or marketing.

Visit statistics. We want to know which content people need, so we count page visits and file downloads. For each visit we record only:

• the time of the visit and the address of the page visited, including when the page does not exist,
• the campaign label from the link (the src or utm_source parameter), if the link has one,
• where the visit came from - only the name of the service (e.g. LinkedIn, a search engine, an AI assistant), and for a file download also our page from which the click came,
• country, device type (phone or computer) and the first language set in the browser,
• who visited: a person, an AI assistant fetching the page at someone's request, or another automated agent (e.g. a search engine),
• network type: home or office, or data centre.

Cloudflare determines the country and network type from the IP address at the moment of the visit, but the IP address itself does not enter the statistics. We use no cookies or identifiers here and we do not link visits into one person's history. We record the network operator's number (the so-called ASN) only when the visit comes from an automated agent or a data centre. For visits from home and office networks we leave it out, because in a small firm with its own network it could point to a specific office.

Page views and page speed. The pages also run the Cloudflare Web Analytics script. It counts page views and measures how fast the page loads: it records the page address, the source of the visit, the browser and device type and the country. It uses no cookies or browser storage and does not track you on other companies' websites.

Repertorium search (on the home page and on the Repertorium page). We do not store the text of the queries you enter. A query passes through our server to the corpus and returns with results. Only data without content remains: the kind and approximate length of the query, the chosen scope (Polish law or EU law), the number of results and the response time, recorded under one shared label for the website, without a name, IP address or personal identifier.

To prevent abuse of the search without an account, we count a daily query limit. For this we record a hash of the IP address (SHA-256) with the date, not the address itself.

Do not enter client data or case details in the search field. It searches public sources of law and is not a place for information covered by professional secrecy.

03Legal basis and purpose of processing

We process data on the basis of:

• Article 6(1)(b) GDPR - steps taken at your request before entering into a contract (e.g. replying to an enquiry, preparing an offer)
• Article 6(1)(f) GDPR - our legitimate interest (contact with people who wrote to us themselves; defence against claims; infrastructure security; visit statistics that tell us which content and tools to develop; measuring the quality of the Repertorium search and protecting it against abuse)

04Recipients of data

Your data may be shared only with entities necessary for the service to work:

• Cloudflare, Inc. - website hosting, server logs, protection against attacks, storage of visit statistics (Cloudflare Analytics Engine) and of the Repertorium search counter and content-free statistics. Cloudflare is our processor under the EU standard contractual clauses (SCC).
• Google LLC - operator of the [email protected] mailbox (Google Workspace). This concerns only correspondence sent to that address.

We do not sell data. We do not share it for third-party marketing. Transfers to the USA take place on the basis of the EU standard contractual clauses approved by the European Commission.

05Retention period

• Email correspondence: up to 24 months from the last contact (unless you request earlier deletion)
• Cloudflare technical logs: according to Cloudflare's policy (usually 30 days)
• Visit statistics: up to 3 months, after which Cloudflare deletes them automatically
• IP address hash for counting the daily search limit: up to 48 hours
• Contract data (after signing): 6 years (accounting requirements and limitation of claims)

06Your rights

You have the right to:

• access your data and receive a copy
• rectification of your data
• erasure ("the right to be forgotten")
• restriction of processing
• object to processing based on Article 6(1)(f)
• lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl)

To exercise any of these rights, write to [email protected]. We reply within 30 days.

07Cookies and browser storage

The website does not use cookies to track users. We have no Google Analytics, Facebook Pixel, Hotjar or any other marketing tracker. The visit statistics described in section 02 run on the server side, and the Cloudflare script for page views and speed runs in the browser, but neither stores anything in it.

Academy modules may store your learning progress, meaning the steps you have ticked, in your browser (the localStorage mechanism), so that you do not lose it when the page reloads. This data stays only with you and you can delete it at any time in your browser settings.

08Automated decisions and profiling

We do not make automated decisions about you or profile you within the meaning of Article 22 GDPR. The visit statistics create no profiles: we count each visit separately, without a personal identifier.

09Voluntary provision of data

Providing data is voluntary, but necessary to receive a reply to an enquiry or to prepare an offer.

10Changes to this policy

This document may be updated. The date of the last update and the version number are given at the bottom of the page.

What PATRON, Repertorium and this website do with data, with evidence in the code for every statement and a list of what is only planned: Where your data is.