Privacy Policy

1. Data Controller

The controller of your personal data is 30Elevate, a digital agency operated by Mikolaj Motel and Maksymilian Motel.

2. Scope of Data Collected

We collect two categories of data:

1) Data you provide directly - via the contact form:

• full name (or first name only),
• email address,
• message content.

2) Statistical data from Google Analytics 4 - only after you give consent in the cookie banner. This is anonymised traffic data (country, device, referral source, time on site). We do not link it to your identity and do not use it for advertising profiling.

If you decline consent in the banner, GA4 is not loaded. We do not profile users and do not sell data.

3. Purpose of Processing

We process your data for one purpose: to respond to enquiries submitted via the contact form and for any subsequent correspondence regarding a potential collaboration.

4. Legal Basis

Processing is carried out on the basis of Article 6(1)(b) of the GDPR - processing is necessary for the performance of steps taken at your request prior to entering into a contract (responding to a collaboration enquiry).

5. Retention Period

Data submitted through the contact form is retained for the period necessary to handle the enquiry. If the enquiry does not result in a collaboration, data is deleted 12 months after the last contact. If a collaboration is established, data is retained for its duration and for 3 years after its conclusion (documentation obligations).

6. Recipients of Data - Third Parties

Your data is shared with the following external parties solely to the extent necessary for the operation of the website and handling of your enquiry:

• Brevo (Sendinblue SAS, France) - contact form operator and, if you subscribe to our newsletter, email marketing. Data processed on EU servers. Details: Brevo privacy policy.
• Cloudflare, Inc. (USA) - hosting and CDN. Collects basic server logs (IP address, browser, request time) for security and diagnostic purposes. Transfer of data to the USA takes place on the basis of the EU-US Data Privacy Framework. Details: Cloudflare privacy policy.
• Google Ireland Ltd. / Google LLC (USA) - Google Analytics 4. Loaded only after your consent in the cookie banner. Transfer to the USA on the basis of the EU-US Data Privacy Framework. Details: Google privacy policy.
• Anthropic PBC (USA) - language model provider powering the Elev assistant (section 7). Transfer to the USA on the basis of the EU-US Data Privacy Framework. Details: Anthropic privacy policy.
• ElevenLabs, Inc. (USA) - speech engine provider powering the Elev assistant's voice mode (section 7): speech recognition and voice synthesis. Activated only when you start a voice conversation yourself. Transfer to the USA on the basis of the EU-US Data Privacy Framework. Details: ElevenLabs privacy policy.

We do not sell your data. We do not share it with third parties for marketing purposes.

7. Elev AI Assistant

The website features the Elev AI assistant. Elev processes only the content of the current conversation in order to generate a response - it does not store conversations, does not link history to your identity and does not build a user profile.

The language model answering your questions is provided by Anthropic PBC (section 6). The content of your message is sent to the model only for the duration of generating the response.

Voice mode. You can also talk to Elev by voice - by clicking the handset icon and granting your browser access to the microphone. Your voice is processed in real time by ElevenLabs (section 6): converted to text that is sent to the model, and the response back into speech. We do not store audio recordings - the ElevenLabs configuration has voice recording disabled, and conversation transcripts are subject to immediate deletion (zero retention on the ElevenLabs side). The legal basis for processing your voice is your consent (Art. 6(1)(a) GDPR) - you can withdraw it at any time in your browser settings or by ending the conversation.

Please do not share sensitive personal data with Elev (e.g. government IDs, medical data, payment card numbers, passwords, login credentials).

8. Cookies

We use three categories of cookies:

1) Technical (strictly necessary) - work without consent:

• __cf_bm (Cloudflare) - distinguishes human traffic from bots
• cookie-consent - stores your decision in the banner

2) Analytical (Google Analytics 4) - only after your consent:

• _ga, _ga_* - session and user identifier (anonymised)
• validity: up to 2 years (you can delete them in your browser settings)

3) Marketing - we do not use them.

You can withdraw consent to analytical cookies at any time - clear the website's cookies in your browser settings or write to us at [email protected].

9. AI and automated decision-making

The Elev assistant is an AI agent. In accordance with Article 50 of the AI Act we disclose clearly that you are interacting with an artificial intelligence system, not a human. This applies to both text and voice conversations - the voice you hear is also synthesised by AI.

We do not take automated decisions concerning you that produce legal effects or similarly significantly affect you (Article 22 GDPR). Elev answers questions about our services - it does not qualify or evaluate you as a customer.

10. Your Rights

Under the GDPR, you have the following rights:

• Access - you may request a copy of the data we process.
• Rectification - you may request the correction of inaccurate data.
• Erasure - you may request the deletion of your data (where we are not legally required to retain it).
• Restriction of processing - you may request that processing be suspended in certain circumstances.
• Objection - you may object to processing based on our legitimate interests.
• Portability - you may receive your data in a machine-readable format.
• Complaint to the supervisory authority - you have the right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl) or with the supervisory authority in your country of residence.

To exercise any of these rights, send a message to [email protected]. We will respond without undue delay, within 30 days at the latest.

11. Policy Updates

We may update this policy when the scope of data processing or applicable regulations change. We will notify you of material changes by updating the date in the document header. We encourage you to review this page periodically.

12. Contact

For questions regarding privacy and data protection, please contact us at: [email protected]