Information Obligation (GDPR)

01 / DATA CONTROLLER

The controller of your personal data collected via the engileanai.com website is EngiLEAN AI Mateusz Mrugała, providing engineering consulting and process optimization services.

02 / PURPOSE & LEGAL BASIS FOR PROCESSING

Your data is processed solely for technical and business purposes:

• [+] Handling the Diagnostic Brief and preparing for a technical scoping call (Art. 6(1)(b) GDPR – steps prior to entering into a contract).
• [+] Pursuing the legitimate interest of securing and archiving engineering correspondence (Art. 6(1)(f) GDPR).

03 / DATA ARCHITECTURE & TRANSFERS (AIR-GAP POLICY)

In line with the engineering principle of data security, your diagnostic brief is delivered directly to the Controller's secured mailbox. The data is not transferred to external cloud CRM systems, does not leave the territory of the European Economic Area (EEA), and is not shared with third parties (SaaS technology corporations). The server infrastructure is based on OVHcloud architecture (Poland/France).

04 / RETENTION PERIOD

Diagnostic-brief data is retained for the period necessary to carry out operational analysis, technical negotiations, or until you object to its further processing, but no longer than the time required to secure any potential legal claims (in accordance with the Polish Civil Code).

05 / USER RIGHTS (ACCESS CONTROL)

You retain full sovereignty over your data, including the right to:

To exercise the above rights, simply send a technical request to the Controller's email address. You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO).

06 / VOLUNTARY PROVISION OF DATA

Providing data in the form is voluntary, but is a technically necessary condition (Poka-Yoke) to perform an initial analysis of the scale of issues in your process and to prepare a dedicated brief with an estimate of potential ROI.