AS Consulting Privacy Policy

Privacy Policy

AI disclosure: this content, including any imagery, was artificially generated.

AS Consulting Agnieszka Weiner Privacy Policy

Last Updated: 3rd November 2026

INTRODUCTION

This privacy policy (“Policy”) describes how AS Consulting Agnieszka Weiner, ul. Grodeckiego 31, 05-822 Milanówek, Poland (“Company,” “we,” and “our”) processes, collects, uses, and shares personal data when using this website: https://www.asconsulting.top/ (the “Site”). Please read the following information carefully to understand our practices regarding your personal data and how we will process it.


Purposes of Processing

What is personal data?

We collect information about you in a range of forms, including personal data. As used in this Policy, “personal data” is as defined in the General Data Protection Regulation (GDPR). This includes any information which, either alone or in combination with other information we process about you, identifies you as an individual. Examples include your name, postal address, email address, and telephone number.

Why do we need your personal data?

We process your personal data only in accordance with applicable data protection and privacy laws. We need certain personal data to provide you with access to our Site and services. If you register with us, you will be asked to consent to provide this information to access our services, purchase our products, or view our content. You may withdraw your consent at any time. If you do not agree to our use of your personal data in line with this Policy, please do not use our Site.

Where we rely on legitimate interests as our lawful basis (for example, B2B marketing activities), you have the right to object to such processing at any time by contacting us at the details below.


Collecting Your Personal Data

We collect personal data in the following ways:

Information You Provide Directly:

  • Personal data you provide when you register on our Site, including name, postal address, email address, telephone number, and account login details.
  • Personal data you provide in connection with our promotions, rewards programs, or customer support services.
  • Any personal data you provide when reporting a problem with our Site.
  • Personal data associated with transactions made on our Site.

Information from Social Networking Sites (SNS):

Our Site may include integrations with social networking platforms (e.g., Facebook, LinkedIn, Twitter). When you connect to a SNS through our Site, you authorize us to access and use the information based on your SNS account settings. You may revoke access at any time via your SNS account settings.

Automatically Collected Information:

We automatically collect certain data when you visit our Site, including:

  • Device and browser information (operating system, browser type, IP address, screen resolution, etc.).
  • Website analytics data (pages viewed, visit duration, referring sites, etc.).
  • Cookie-based tracking information (explained below).

Use of Cookies and Similar Technologies

For the full cookie inventory and granular consent controls, see our dedicated Cookie Policy.

Cookies are small text files that are stored on your computer or mobile device. We use cookies to provide a better user experience, analyze traffic, and deliver personalized content. You can manage or disable cookies through your browser settings.

For details on the types of cookies we use, refer to the Cookies section below.


Automated Decision-Making and Profiling

We may engage in automated processing of data, including profiling, to improve our services or comply with legal obligations. You may object to such processing where permitted by law.


Cookies We Use

Types of Cookies:

We use the following types of cookies on our Site:

  1. Essential Cookies – Necessary for core website functionality, such as logging in.
  2. Functionality Cookies – Store user preferences to provide a personalized experience.
  3. Analytics Cookies – Help us understand how visitors interact with our Site (e.g., Google Analytics).
  4. Advertising and Targeting Cookies – Track browsing habits to deliver relevant ads.
  5. Social Media Cookies – Enable social media integrations and sharing functionalities.

For details on managing your cookie preferences, refer to Your Online Choices.


Using Your Personal Data

We may use your personal data for:

  • Website operation, maintenance, and security.
  • Account management and customer support.
  • Email communications (transactional or marketing emails).
  • Payment processing for purchases made through our Site.
  • Compliance with legal obligations.
  • Targeted marketing based on browsing behavior.

Sharing Your Personal Data

We may share your personal data with:

  1. Service Providers – Third-party vendors assisting with data processing, analytics, payment processing, etc.
  2. Advertising Partners – Online marketing agencies and data vendors using tracking technologies to provide targeted ads.
  3. Legal and Compliance Entities – When required by law or in response to legal requests.
  4. Social Media Platforms – When you interact with social plugins on our Site.

Service providers are described by category in the sections below; we will name them on request.


Your Rights Under GDPR

Under the GDPR, you have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Withdraw consent at any time.
  • Request deletion of your personal data (“Right to be Forgotten”).
  • Object to data processing for direct marketing purposes.
  • Restrict processing in certain circumstances.
  • Lodge a complaint with a data protection authority if you believe your rights are violated.
  • Data portability — receive your personal data in a structured, commonly used, machine-readable format.
  • Not be subject to automated decision-making (Article 22) — including profiling that produces legal or similarly significant effects.

To exercise these rights, please contact us at [email protected]


Security and Data Retention

We implement security measures to protect personal data. However, no transmission method is 100% secure. Data is retained as long as necessary for the purposes outlined in this Policy or as required by law.


International Data Transfers

Some of our service providers process personal data outside the UK and the European Economic Area, including in the United States. Where they do, we rely on a safeguard the law recognises, such as an adequacy decision, the EU–US Data Privacy Framework (with its UK Extension), or the European Commission’s Standard Contractual Clauses with the UK International Data Transfer Addendum. You can ask us which safeguard applies to your data.


Our Policy on Children

Our Site is not directed to individuals under the age of 16. If we become aware that a child has provided personal data without parental consent, we will delete such data.


Cold Email & Outreach Data

If you have received a cold email from AS Consulting and are wondering how we obtained your details, this section explains it.

Data we hold: name, business email address, job role, company name, and any notes relevant to the outreach (for example, company website, business directory listing).

Source of data: publicly available business sources — typically LeadScrape (business directory aggregator), IcyPeas (email verification), public company websites, business directories, LinkedIn business profiles, or manual research of publicly listed business contacts.

Why we contacted you: we believe AS Consulting’s services may be relevant to your professional role based on public information about your business.

Lawful basis: legitimate interests (EU GDPR / UK GDPR Article 6(1)(f)). A Legitimate Interest Assessment for this processing is available on request.

Retention: prospect data is held for up to 12 months from last contact if there is no engagement. Engaged contacts may be held longer. Data is deleted at the end of the retention period or upon request.

Your right to object: you have an absolute right under Article 21(2) to object to processing for direct marketing. To stop all further communication, reply STOP to any email from us, or submit a request via our GDPR User Request Form. Your data will be added to our suppression list within 24 hours and deleted from our active records within 30 days.

Data sharing: we do not sell, rent, or share your data with third parties for their own marketing purposes. Data is processed using ReachInbox (email sending platform) and stored on encrypted business systems.


Visitor Identification

Visitor identification: we do not currently use any tools to identify the people or companies visiting this website.


Phone Calls to Our AI Assistant

If you call us on +44 2046 202432 (UK) or +1 202 795 3386 (US), your call is answered by an AI assistant, not a person. The assistant’s greeting tells you this, and that the call is recorded.

Data we hold: your phone number (caller ID), a recording of the call, a written transcript and a short summary of your enquiry. Anything you say on the call, such as your name, will be in the recording and transcript.

Why we use it: to understand your enquiry and get back to you.

Lawful basis: legitimate interests (EU GDPR / UK GDPR Article 6(1)(f)), namely responding to business enquiries made to us. You can object to this processing at any time.

Who handles it: the phone line is run for us by an AI phone-answering provider based in the European Union, which stores call data in the EU. To answer the call, it uses speech-recognition, voice and AI language-model providers that may process data outside the UK and the European Economic Area, including in the United States. We have asked our provider to confirm the safeguards that cover these transfers. Our provider states that it may use call recordings and transcripts, in anonymised form, to improve its AI models. For that purpose it acts on its own behalf, not on our instructions. Call recordings, transcripts and summaries are also emailed to us and stored with Google (Gmail) and Microsoft (Outlook/Hotmail).

Automated decisions: no decisions about you are made automatically. Simon reviews every enquiry personally.

Retention: we delete call recordings, transcripts and summaries within 90 days of the call, from our phone provider’s account and from our email. If your enquiry becomes a business relationship, we keep the summary and your contact details for as long as that relationship needs. The recording is still deleted within 90 days.

Sensitive information: please don’t share sensitive personal details on the call (for example health, financial or legal case details). The assistant only takes enquiries.

If you don’t want to be recorded: you can end the call at any time and email us at [email protected] instead. On our US line, if you tell the assistant you don’t agree to recording, it ends the call.

Your rights: you can ask for a copy of your call recording, or ask us to delete it, using our GDPR User Request Form or by emailing us. To help us find your call, give us the number you called from and the date and time of the call. We will delete it from our email and our phone provider’s account. Our provider says this also removes it from its database. We cannot confirm deletion by our provider’s own sub-providers, or of anonymised copies already used for training. On request, we will tell you the name of every provider that has received your data. To complain, see the Supervisory Authority section below.


Messages to Our AI Assistant (WhatsApp and Website Chat)

If you message us on WhatsApp or through the chat on this Site, the replies come from an AI assistant, not a person. The assistant tells you this in its first reply and links to this section.

Data we hold: your name and profile details as shown by WhatsApp or the chat, your phone number (WhatsApp), your messages and any files you send, and a short summary of your enquiry. If you book a call, your booking details.

Why we use it: to answer your enquiry, book calls, and pass anything the assistant cannot answer to Simon.

Lawful basis: legitimate interests (EU GDPR / UK GDPR Article 6(1)(f)), namely responding to messages you send us. When you book a call, taking steps at your request before a contract (Article 6(1)(b)). You can object at any time.

Who handles it: the assistant runs on a messaging platform provided by a company based in the Netherlands, which stores conversation data on servers in the European Union. To write each reply, the text of your message is sent to AI language-model providers in the United States, under the European Commission’s Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum. The platform states that neither it nor its AI providers use your messages to train AI models. WhatsApp is run by Meta, which also processes your messages under its own terms.

Automated decisions: no decisions with legal or similarly significant effects are made about you automatically. Simon reviews every enquiry personally.

Retention: conversations are deleted automatically 12 months after the last activity. If your enquiry becomes a business relationship, we keep your contact details and the relevant correspondence in our business records for as long as that relationship needs. Deleted data may remain in the platform’s backups for up to 90 days.

Sensitive information: please don’t send sensitive personal details in a message (for example health, financial or legal case details). The assistant only takes enquiries.

If you would rather deal with a person: ask the assistant to pass you to Simon, or email [email protected].

Your rights: you can ask for a copy of your conversation, or ask us to delete it, using our GDPR User Request Form or by emailing us. Tell us the number or chat you messaged from. On request, we will tell you the name of every provider that has received your data. To complain, see the Supervisory Authority section below.


Changes to This Policy

We may update this Policy periodically. The “Last Updated” date at the top of this page reflects the latest revision. We encourage you to review this Policy regularly.


Supervisory Authority

AS Consulting is established in Poland, so our lead supervisory authority is the Urząd Ochrony Danych Osobowych (UODO) — the Polish Data Protection Authority.

You also have the right to lodge a complaint with the supervisory authority in your own country of residence:


Contact Information

For any questions regarding this Privacy Policy, please contact us at:

📧 Email: [email protected]
🌍 Website: https://www.asconsulting.top/

[wpgdprPP]