Data processing — impact assessment
A summary of our data protection impact assessment (DPIA) and AI Act compliance.
Last updated: 2026-06-11
Baseline document. The full DPIA is maintained internally and subject to legal review.
1. Why this page
We use two solutions that deserve special attention: quiet behavioural profiling to tailor communication, and an AI voice assistant. Below we explain what we do and what we deliberately do not do.
2. Behavioural profiling
We analyse behaviour signals (e.g. which sections you read, where you came from) to tailor the tone of the first conversation. The result stays with us only.
We do not recognise emotions, use biometrics, perform social scoring or make automated decisions affecting price. A profile is a hint, not a verdict. You can opt out (see the privacy policy).
3. AI voice assistant
When launched, the assistant’s opening line discloses that you are talking to AI and offers to hand the call to a human.
We do not store biometric voice data of the caller. We may analyse the transcript for quality purposes.
4. Voice cloning
The cloned voice used by the assistant belongs to a member of our team, used with their consent. We do not clone third-party voices without written consent.
5. AI Act compliance
Our solutions fall under the limited (transparency) risk category. We label AI-generated content, disclose use of the voice assistant and list the models used in the privacy policy.
6. Contact
Questions about data processing: kontakt@gecko-labs.pl.