Privacy policy

1. Data controller

The controller of your personal data is COMATI Sp. z o.o., ul. Zajęcza 15, 00-351 Warsaw, Poland, Tax ID (NIP) 5252923592, company register (KRS) 0000991808. For anything concerning your data, write to biuro@comati.pl or to the address above.

2. Cookies and browser storage

The sites do not use cookies, analytics tools, advertising pixels or third-party scripts. We store only the following in your browser:

• site-language (localStorage): the language you chose, saved only when you click PL or EN. It stays until you clear your browser data.
• comati_sid (sessionStorage, comati.pl only): a random identifier of your conversation with the assistant. It is deleted when you close the tab.

On your first visit we pick the page language from your browser's language settings. The choice is made in your browser. Like every browser, yours also sends its preferred languages (the Accept-Language header) with each request to our server; we do not record or store them, and our server logs keep only the browser identification listed in section 5.

3. Contact form

• Data: name, e-mail address, subject and company or dealership name if you give them, and your message.
• Purpose and legal basis: to answer your enquiry and continue the correspondence, based on your consent (Art. 6(1)(a) GDPR); where the enquiry concerns a contract, also to take steps at your request before entering into it (Art. 6(1)(b) GDPR).
• Where it goes: the message is delivered to our Microsoft 365 mailbox.
• How long: the message sent through the form is deleted automatically no later than 12 months after we receive it, unless the enquiry leads to a contract; then we keep it for as long as the contract and the law (for example tax law) require. Any further e-mail correspondence about your enquiry is kept like our other business correspondence: while it is needed to handle the matter or to establish or defend legal claims.
• You can withdraw your consent at any time by writing to biuro@comati.pl. This does not affect processing before the withdrawal.

4. AI assistant (chat on comati.pl)

• Data: the questions you type, the assistant's answers and the random conversation identifier. Please do not share sensitive information in the chat.
• Purpose and legal basis: to answer your questions, keep the context of the conversation, and check and improve the quality of the answers. This is our legitimate interest (Art. 6(1)(f) GDPR).
• Where it is processed: on servers operated by COMATI. The language model runs on our own infrastructure; conversations are not sent to external AI providers.
• How long: the text of conversations is erased after 12 months. Only anonymous statistics remain, such as the number and dates of conversations and answer ratings.
• Answers are generated by AI and may be wrong. The assistant does not take decisions about you.

5. Server logs

• Data: for every request, the IP address, date and time, requested address, response code and browser identification (User-Agent).
• Purpose and legal basis: security of the sites, detecting abuse and diagnosing faults. This is our legitimate interest (Art. 6(1)(f) GDPR).
• How long: up to 12 months.

6. Recipients and transfers outside the EEA

Your data may be processed on our behalf by Microsoft Ireland Operations Limited, which provides hosting (Microsoft Azure, Poland Central region) and e-mail (Microsoft 365) under a data processing agreement, and by IT service providers working for us. We disclose data to public authorities only where the law requires it.

Microsoft may process data outside the European Economic Area, in particular in the United States. Such transfers are based on the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability (for data processed on the basis of consent or a contract), to object to processing based on our legitimate interest, and to withdraw consent at any time. To exercise them, write to biuro@comati.pl.

You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

8. Other information

Giving your data is voluntary, but without it we cannot answer your enquiry. We do not make decisions based solely on automated processing, including profiling, that produce legal effects for you. Links to other services, such as LinkedIn, lead to sites with their own privacy policies.

We will publish any changes to this policy on this page.

Last updated: 3 November 2026