Privacy Policy
How we collect, use, and protect your personal data.

Last updated: March 2, 2026
1. Data Controller
The data controller responsible for processing your personal data is:
- DEMETRA Sp. z o.o.
- Osiedle Piastów 63G/2, 31-625 Kraków, Poland
- KRS: 0001065721
- NIP: 6783211672
- Email: demetra.innowacja@gmail.com
2. What Data We Collect
We collect the following types of data:
Contact Form
- Name
- Email address
- Service interested in
- Message content
- Submission timestamp (generated automatically)
Local Preferences
- Theme preference (light/dark) — stored in your browser's localStorage
- Language preference (EN/IT/PL) — stored in your browser's localStorage
These preferences are stored only on your device and are never sent to our servers.
Visitor Analytics
- IP address
- Country (derived from IP address)
- Browser language preference
- Pages visited and visit timestamps
- Referrer URL and browser user agent
This data is collected automatically when you visit our website and is used solely for internal analytics purposes.
3. Purpose and Legal Basis
We process your personal data for the following purposes:
- To respond to your inquiries and provide the requested services — legal basis: GDPR Art. 6(1)(b) (performance of a contract or pre-contractual measures).
- To maintain and improve our website — legal basis: GDPR Art. 6(1)(f) (legitimate interest).
- To analyze website usage and visitor statistics for improving our services — legal basis: GDPR Art. 6(1)(f) (legitimate interest).
4. Data Retention
- Contact form submissions are retained for up to 2 years, after which they are deleted.
- Visitor analytics data (IP addresses, page views, visit logs) is retained for up to 1 year.
- localStorage preferences remain on your device until you clear your browser data.
5. Third-Party Services
Our website uses the following third-party services:
Google Maps — Google Maps — an embedded map is displayed on our Contact page. When you load this page, Google may collect data according to their own privacy policy. Google Privacy Policy
We do not use third-party analytics services, tracking pixels, or advertising cookies. Our visitor analytics are processed entirely on our own servers.
6. Data Sharing
We do not sell, trade, or share your personal data with third parties, except as described in the Third-Party Services section above.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict processing of your data
- Data portability
- Object to processing
You also have the right to lodge a complaint with the Polish supervisory authority:
UODO (Urząd Ochrony Danych Osobowych)
ul. Stawki 2, 00-193 Warszawa
https://uodo.gov.pl
8. Contact
For any privacy-related questions or to exercise your rights, please contact us at:
9. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.