DEMETRA

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: August 11, 2026

1. Data Controller

The data controller responsible for processing your personal data is:

  • DEMETRA Sp. z o.o.
  • Osiedle Piastów 63G/2, 31-625 Kraków, Poland
  • KRS: 0001065721
  • NIP: 6783211672
  • Email: adziomina@demetra-innovation.com

2. What Data We Collect

We collect the following types of data:

Contact Form

  • Name
  • Work email address
  • Company
  • Role (optional)
  • Engagement type (optional)
  • Target timeline (optional)
  • Description of your technical challenge
  • Partner-enquiry flag (optional)
  • Submission timestamp (generated automatically)

Local Preferences

  • Theme preference (light/dark) — stored in your browser's localStorage
  • Language preference (EN/IT/PL) — stored in your browser's localStorage

These preferences are stored only on your device and are never sent to our servers.

Technical Data Collected With Your Message

  • IP address
  • Country and city (derived from IP address)
  • Browser language preference
  • Browser user agent and device characteristics (screen size, timezone, platform)
  • Referring page

This data is captured only when you submit the contact form — not while you browse the site — and is used to prevent spam and abuse and to help us respond to your enquiry. Geolocation is derived on our own servers from a local database; your IP address is not sent to any third party for this purpose. We do not track your visits or build usage profiles.

3. Purpose and Legal Basis

We process your personal data for the following purposes:

  • To respond to your enquiries and provide the requested services — legal basis: GDPR Art. 6(1)(b) (performance of a contract or pre-contractual measures).
  • To maintain and improve our website — legal basis: GDPR Art. 6(1)(f) (legitimate interest).
  • To prevent spam and abuse of our contact form and protect the security of our website — legal basis: GDPR Art. 6(1)(f) (legitimate interest).

4. Data Retention

  • Contact form submissions are retained for up to 2 years, after which they are deleted.
  • Technical data captured with a contact form submission is stored alongside that submission and deleted together with it.
  • localStorage preferences remain on your device until you clear your browser data.

5. Third-Party Services

Our website uses the following third-party services:

Cloudflare Turnstile — spam protection on our contact form. When you submit the form, a verification token and your IP address are sent to Cloudflare to confirm the submission is genuine. Cloudflare Privacy Policy

WhatsApp Business (Meta) — when you submit the contact form, we receive an internal notification about your enquiry through the WhatsApp Business service, operated by Meta. Meta Privacy Policy

We do not use third-party analytics services, tracking pixels, or advertising cookies, and we do not track visits to our website.

6. Data Sharing

We do not sell, trade, or share your personal data with third parties, except as described in the Third-Party Services section above.

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict processing of your data
  • Data portability
  • Object to processing

You also have the right to lodge a complaint with the Polish supervisory authority:

UODO (Urząd Ochrony Danych Osobowych)
ul. Stawki 2, 00-193 Warszawa
https://uodo.gov.pl

8. Contact

For any privacy-related questions or to exercise your rights, please contact us at:

adziomina@demetra-innovation.com

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.