Legal
Privacy Policy
We explain what data we collect on dtl.pl and in our services, why we process it, who we entrust it to, and what rights you have.
The Polish version is the binding version. This English translation is provided for information only.
§1. Data controller
The controller of your personal data is LEO WONDER Paweł Pałczyński, ul. gen. Stanisława Maczka 9/32, 05-480 Karczew, Poland, VAT ID PL5321839370, REGON 141209430, trading as DTL Digital.
For matters concerning personal data, write to hello@dtl.pl.
§2. What data we process
Clients and people contacting us: name, company name, tax ID, address, e-mail, phone, content of correspondence, order and payment history.
Visitors to dtl.pl: IP address, device and browser type, language, pages visited, referral source, and cookie data.
Users of the free tools: data entered into the form — in the AI visibility tool this is a website address and a short description of the business; in the VAT checker, a tax ID. We do not ask for an e-mail address or registration.
§3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Performing the contract and fulfilling the order | Art. 6(1)(b) GDPR | Term of the contract + 3 years |
| Issuing invoices and tax settlement | Art. 6(1)(c) GDPR | 5 years (tax law) |
| Responding to a form or chat enquiry | Art. 6(1)(f) GDPR | Up to 12 months |
| Handling complaints | Art. 6(1)(b) and (c) GDPR | 3 years from case closure |
| Statistics and improving the website | Art. 6(1)(f) GDPR | Up to 24 months |
| Pursuing or defending claims | Art. 6(1)(f) GDPR | Until claims become time-barred |
§4. Processing by AI models
Some of our services and tools use third-party language models (including Google Gemini, OpenAI, Anthropic, Perplexity). This applies in particular to the AI agent on dtl.pl and the brand visibility tool.
The rules we apply:
- data is sent to the model solely to generate a response in real time
- we do not send personal data to models where it is not necessary to produce the answer
- in the AI visibility tool, only the website address and industry description are sent to the models — no personal data is transmitted
- model providers do not use the transmitted content to train their models
Processing by AI models may take place outside the European Economic Area. Where it does, it is based on Standard Contractual Clauses (SCC) approved by the European Commission.
§5. Data recipients
We entrust data only to entities necessary for providing our services:
- Stripe Payments Europe, Ltd. — payment processing. We do not store full card data; Stripe processes it under PCI DSS and its own policy (stripe.com/privacy).
- AI model providers — to the extent described in §4.
- Hosting and e-mail providers — storing the website and correspondence.
- Accounting and advisory services — to the extent required by law.
We do not sell personal data and do not share it with third parties for marketing purposes.
§6. Cookies
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
| dtl_lang | Remembering the chosen language | Functional | 1 year |
| dtl_currency | Remembering the currency on the pricing page | Functional | 1 year |
| Stripe cookies | Processing and securing payments | Essential | per Stripe policy |
You can block or delete cookies in your browser settings. Disabling essential cookies may make payment impossible.
§7. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy of it (Art. 15)
- rectification of inaccurate or incomplete data (Art. 16)
- erasure of data where there is no basis for processing it (Art. 17)
- restriction of processing (Art. 18)
- portability of data in a structured format (Art. 20)
- objection to processing based on legitimate interest (Art. 21)
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
To exercise these rights, write to hello@dtl.pl. We respond within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).
§8. Security and voluntary nature
We use transport encryption (HTTPS), limit access to those who need it, and keep software up to date.
Providing data is voluntary but necessary to conclude a contract, issue an invoice or answer an enquiry.
We do not take decisions about you based solely on automated processing that would produce legal effects.
§9. Changes to this policy
We may update this policy if the law or the scope of our services changes. The current version is always available on this page, together with the date of the last update.
LEO WONDER Paweł Pałczyński · trading as DTL Digital · ul. gen. Stanisława Maczka 9/32, 05-480 Karczew · NIP 532-183-93-70