Privacy Policy

Who is responsible

The controller of the personal data described here is Nyreon sp. z o.o., with its registered office at ul. Jesionowa 1, 83-300 Kartuzy, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court (Sąd Rejonowy Gdańsk-Północ w Gdańsku, VIII Wydział Gospodarczy Krajowego Rejestru Sądowego), under KRS number 0001267764, NIP 5892115085, REGON 545756658, share capital 5 000,00 PLN. You can reach us about anything in this policy at hello@ais-aftermarket.com.

What we collect

When you fill in the contact form, we receive what you type into it:

• your name
• your work email address
• your company: required for AIS enquiries, optional for consulting
• for AIS enquiries: what you are asking for, your type of business and, if you give them, your role, your approximate number of active SKUs and stocking locations, the modules you are interested in and the systems your data is in
• your message
• the time you selected in the calendar, if you selected one, and the timezone your browser reports, so the time we confirm is the time you meant

The form also contains a hidden field that real visitors never see or fill in. If it arrives filled in, the submission is treated as automated and discarded. That is the only thing on the page that behaves like a check on you, and it stores nothing.

When you request the AIS demo, we receive your name and work email address, and your company and role if you give them. We use them to email you the link to the demo and to follow up with you about AIS. Your browser then remembers, on your device only, that you filled the form in, so the demo opens directly on your next visit. If you take the guided tour, we also receive which modules you chose to see.

The AIS video on the home page is hosted on YouTube and loads only when you press play. From that moment Google Ireland Limited receives your IP address and the usual technical details of the request, under its own privacy policy. We use YouTube's privacy-enhanced mode, which does not set cookies before you play the video.

Separately, our hosting provider records the ordinary technical details of any web request: the IP address it came from, the browser's user-agent string, the address requested and the time. We use these only to keep the site available and to investigate faults and abuse.

Cookies and browser storage

The site stores the following in your browser:

• SITE_LOCALE: a first-party cookie set when you pick a language in the switcher. It holds only the language code (en, pl or de) and expires after 12 months.
• site-theme: a local storage entry set when you switch between the dark and light theme. It holds only the word light or dark and stays until you clear your browser data.
• CookieConsent: set by our consent tool, Cookiebot, to remember your choice in the cookie banner. It expires after 12 months.
• Google cookies (for example _ga and _gcl_au), set by tags that load through Google Tag Manager: set only if you accept statistics or marketing cookies. Statistics cookies count visits and show which pages are used. Marketing cookies let us see whether a visit from one of our ads led to an enquiry or a demo request, and let us show our ads to people who visited the site.

The first three are needed for features you use and need no consent. Until you accept statistics or marketing cookies, Google tags set no cookies in your browser and receives only signals without cookies, such as that a page was loaded. You can change or withdraw your choice at any time with the Cookie settings link at the bottom of every page, or delete cookies in your browser settings.

What we do not collect

There is no social media pixel and no embedded third-party widget. The only measurement and advertising technology is Google's, described above. Fonts, images and video are served from this domain.

We do not sell personal data, and we do not make automated decisions or build profiles about you.

Why we use it, and on what basis

• To answer your enquiry and arrange the call you asked for. Where that enquiry is a step towards working together, the basis is the performance of, or preparation for, a contract (GDPR Article 6(1)(b)); otherwise it is our legitimate interest in responding to people who contact us (Article 6(1)(f)).
• To keep the site and our systems secure and working, using the technical records described above. The basis is our legitimate interest in the security and integrity of our own service (Article 6(1)(f)).
• To meet legal obligations, such as retaining records where the law requires it (Article 6(1)(c)).
• With your consent (Article 6(1)(a)), to count visits to the site, measure the results of our Google Ads campaigns and show our ads to people who visited the site. You can withdraw consent at any time with the Cookie settings link; withdrawal does not affect processing that took place before it.

Who else sees it

We share personal data only with the service providers we need in order to run the site and reply to you, and only for that purpose. Each acts on our instructions under a data processing agreement:

• Google Ireland Limited, whose Workspace hosts our mail and carries the contact form's messages to us
• Google Ireland Limited, for Google Tag Manager, visit statistics and Google Ads measurement and advertising, only with your consent. For this data Google also acts as a controller in its own right; see policies.google.com/privacy.
• Cybot A/S (Cookiebot), Denmark, which records your cookie choice.

We may also disclose personal data where we are legally required to. We do not share it with anyone else.

Where it is processed

We aim to keep processing within the European Economic Area. Where a provider named above processes data outside the EEA, that transfer relies on an adequacy decision by the European Commission or on the Commission's standard contractual clauses, together with any additional safeguards the transfer requires. Write to hello@ais-aftermarket.com for details of the safeguards that apply. Google may transfer advertising data to the United States, relying on the EU-US Data Privacy Framework.

How long we keep it

We keep enquiry correspondence for as long as it takes to deal with your enquiry, and then for up to 24 months in case you or we return to the conversation, after which it is deleted. Technical records held by our hosting provider are kept for 30 days. Where the law sets a longer period, we keep what it requires for as long as it requires.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct it, if it is wrong or incomplete
• delete it
• restrict how we use it
• provide it in a portable, machine-readable form

You can also object to our processing where we rely on legitimate interests, and withdraw consent at any time where we have relied on consent. Write to hello@ais-aftermarket.com and we will respond within one month.

If you think we have handled your personal data improperly, you can complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw. You may also complain to the authority where you live or work.

Children

This is a business website and is not directed at children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top of it. Where a change materially affects you, we will say so here rather than quietly amend the text.

Contact

Questions, requests and complaints about this policy all go to hello@ais-aftermarket.com.