Legal information

Privacy and Cookie Policy

Effective from 16 October 2026

This policy explains how MENTERIS sp. z o.o. processes personal data in connection with the menteris.com website, its contact form and website analytics. It does not govern video monitoring at customers’ plants or personal data processing within projects delivered by Menteris. Those activities require separate arrangements and information.

1. Data controller

The controller of your personal data is:

MENTERIS sp. z o.o.ul. Świerkowa 1, 11-042 Jonkowo, PolandNIP: 7394030592 · KRS: 0001228343contact@menteris.com

We have not appointed a Data Protection Officer. Please send privacy questions and requests directly to the email address above.

2. What data we process

  • contact form details: first name or full name, email address, company name and the content of your message and, optionally, phone number, plant location and number of shifts;
  • correspondence and booking details when you contact us by email or use the external appointment booking link;
  • technical and security data, such as IP address, request time, browser and device information, requested URL and server logs;
  • analytics data, such as visited pages, referring source, approximate location, device and browser information and online identifiers, only after consent.

We generally receive this information directly from you or automatically from your browser and the infrastructure that serves the website. Please do not send recordings, employee data, camera passwords or access credentials through the contact form.

3. Purposes and legal bases

PurposeLegal basis
Responding to an enquiry, assessing whether we can help and taking requested steps before a possible agreementArticle 6(1)(b) GDPR where you request pre-contractual steps; Article 6(1)(f) GDPR for B2B correspondence with company representatives
Business correspondence, service quality, establishing or defending claimsArticle 6(1)(f) GDPR: our legitimate interest in conducting and protecting our business
Website security, abuse prevention and diagnosticsArticle 6(1)(f) GDPR: our legitimate interest in securing the website and services
Compliance with tax, accounting or other legal obligationsArticle 6(1)(c) GDPR
Google Analytics measurement and improvement of the websiteArticle 6(1)(a) GDPR: your consent

We do not currently send newsletters or use contact form data for electronic direct marketing. We do not send form contents to Google Analytics.

4. Recipients and service providers

  • authorised Menteris staff and management who need the data to handle an enquiry or correspondence;
  • Supabase, which hosts the enquiry database in the Ireland region;
  • Vercel, which provides website hosting and technical infrastructure;
  • Google Workspace, which provides the company email service;
  • Google Analytics, only if you consent to analytics;
  • Cal.com, if you choose to book a meeting through the external link;
  • professional advisers and public authorities where required by law or necessary to establish, exercise or defend claims.

Providers process data under their contracts and data protection terms. We do not sell personal data.

5. Transfers outside the EEA

Some providers or their subprocessors may access data from outside the European Economic Area, including the United States. Where this occurs, the transfer is based on a lawful safeguard used by the relevant provider, such as an adequacy decision or the European Commission’s Standard Contractual Clauses. You can contact us for more information about the safeguards applicable to your data.

6. Retention periods

We keep:

  • enquiries and related correspondence where no agreement is concluded: 12 months from the last contact;
  • data connected with an agreement, accounting or claims: for the duration required to perform the agreement and then for the period resulting from legal duties or limitation periods;
  • security and technical logs: for the period needed to diagnose incidents and protect the service, according to the relevant provider settings, after which they are deleted or anonymised;
  • Google Analytics user- and event-level data: according to the GA4 setting, no longer than 14 months; analytics cookies: up to 12 months;
  • the analytics consent choice: 12 months, unless you change it earlier.

7. Your rights

Depending on the legal basis and circumstances, you may:

  • access your data and receive a copy;
  • have your data rectified or erased, or its processing restricted;
  • object to processing based on our legitimate interests;
  • receive or transfer data where the right to portability applies;
  • withdraw analytics consent at any time;
  • lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

To exercise your rights, email contact@menteris.com.

8. Voluntary provision of data and automated decisions

Providing data in the form is voluntary, but without the required fields we cannot respond to your enquiry. We do not use website data for automated decision-making that produces legal or similarly significant effects, and we do not use Google Analytics for advertising or remarketing.

9. Cookies and similar technologies

We use browser storage that is necessary to remember your choice and, only after your consent, Google Analytics cookies. Rejecting analytics does not limit the website.

NameTypePurposeProviderRetention
menteris.analytics-consent.v1Local storageRemembers whether you accepted or rejected analyticsMenteris12 months
_gaAnalytics cookieDistinguishes visitors and supports website usage statisticsGoogle AnalyticsUp to 12 months from the last update
_ga_<container-id>Analytics cookieMaintains the session state for the GA4 propertyGoogle AnalyticsUp to 12 months from the last update

Your decision applies for 12 months. After that time, or after a material change to the analytics setup, we will ask you again. You can withdraw or change your consent at any time using the “Cookie settings” button visible on the website. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

Google Privacy Policy

10. External services and links

The website contains a link to Cal.com, where you can book an appointment. After you open that link, the service operates under its own privacy and cookie rules. Menteris receives the information needed to arrange and conduct the meeting. The website may also link to other third-party websites, whose privacy practices we do not control.

11. Security

We apply organisational and technical safeguards appropriate to the nature of the website data, including access restrictions and encrypted connections. No online service can guarantee absolute security, so please use the form only for the information it requests.

Changes to this policy

We may update this policy if the website, providers or legal requirements change. The current version and its effective date will always be published here.