Maurelius
Privacy Policy
Below we explain what personal data we process in connection with your use of maurelius.pl, why we process it, and what rights you have in relation to that processing.
Last updated: June 14, 2026
1. Data controller
The controller of your personal data is MAURELIUS Sp. z o.o., with its registered office at ul. Nowogrodzka 31, 00-511 Warsaw, Poland.
For privacy-related matters, you can contact us at: kontakt@maurelius.pl.
This policy applies to data processing connected with your use of maurelius.pl, in particular contact forms, demo forms, report downloads, newsletter signup, cookies, and website analytics.
2. What data we collect
Depending on how you use the website, we may process the following categories of data:
- contact form: full name, business email address, company name, team size, phone number, and message content;
- demo form: full name, company, phone number, email address, company size, referral source, and the demo request message generated from the form;
- report and newsletter forms: full name or first name, business email address, consent status for processing data to send the report, and newsletter consent status;
- technical and security data: IP address, browser or device data, timestamps, request data, server logs, and information needed to prevent abuse, such as rate-limiting data;
- cookie and consent data: language preference, stored cookie choices, data required for the website to work, and, after consent, Microsoft Clarity analytics data.
3. Purposes and legal bases
We process data only where we have an appropriate legal basis. The main purposes and legal bases are:
- handling contact and demo inquiries, preparing responses, and taking steps before entering into a contract: Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, meaning our legitimate interest in handling inquiries;
- sending the requested report and communicating directly in connection with the requested material: Article 6(1)(a) GDPR where consent is the basis, or Article 6(1)(f) GDPR for the technical and organisational handling of the request;
- sending newsletters and marketing information: Article 6(1)(a) GDPR, meaning your consent;
- website analytics using Microsoft Clarity: Article 6(1)(a) GDPR, meaning your consent to analytics cookies;
- ensuring website security, diagnosing errors, protecting against abuse, and keeping logs: Article 6(1)(f) GDPR, meaning our legitimate interest.
4. Cookies
The website uses necessary cookies and, with your consent, analytics cookies. Necessary cookies are required for the website to work properly and cannot be disabled through our consent banner.
- necessary cookies: these may include NEXT_LOCALE, which stores your language preference, maurelius_cookie_consent, which stores your cookie choices for up to 180 days, and site-auth if you use a part of the website that requires authentication;
- analytics cookies: after you give consent, Microsoft Clarity may set cookies including _clck and _clsk. Microsoft may also use additional Clarity-related cookies in accordance with its documentation.
You can return to your consent settings at any time by selecting “Manage cookies” in the website footer.
5. Microsoft Clarity
We use Microsoft Clarity to better understand how visitors use the website and to improve it. Clarity may help us analyze clicks, scrolling, page views, session behavior, and basic technical data about the device, browser, and interactions with the website.
Microsoft Clarity is loaded only after you consent to analytics cookies. If you do not give consent or if you withdraw it, the analytics script should not be loaded during your visit.
6. Recipients and processors
We may use external service providers that support the operation of the website and communication handling. These providers process data according to our instructions or as independent controllers where this follows from the nature of their service and applicable law.
- Cloudflare: hosting, website delivery, security, and infrastructure support;
- Resend: sending emails, handling contact forms, confirmations, newsletters, and recipient lists where newsletter features are active;
- Microsoft Clarity: website analytics loaded only after consent to analytics cookies.
We do not transfer data to CRM tools or other marketing systems unless we actually use them in a given process.
7. Transfers outside the EEA
Some service providers we use may process data outside the European Economic Area. In such cases, appropriate safeguards under the GDPR are used, in particular standard contractual clauses, Data Privacy Framework mechanisms, or other lawful transfer safeguards.
You can find more information about selected providers’ data protection terms in the Cloudflare, Resend, and Microsoft documentation.
8. Data retention
We keep data only for as long as needed to fulfil the purpose for which it was collected or for as long as required by law. In particular:
- data from contact, demo, and report forms is kept for the time needed to handle the inquiry or request and then for the limitation period for possible claims;
- newsletter data is kept until consent is withdrawn, you unsubscribe, or we stop operating the newsletter;
- information about your cookie choices is stored in the maurelius_cookie_consent cookie for up to 180 days;
- analytics cookies and Microsoft Clarity data are retained according to Microsoft Clarity settings and Microsoft documentation;
- server, technical, and security logs are kept for a short operational period needed for diagnostics, security, and abuse prevention, unless longer retention is necessary to investigate an incident or pursue claims.
9. Your rights
You have the right to access your data, rectify it, delete it, restrict processing, transfer data, object to processing, and withdraw consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. For cookies, you can change your choices through “Manage cookies” in the website footer.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland. More information is available at uodo.gov.pl.
10. Voluntary provision of data
Providing data in forms is voluntary, but failure to provide required data may prevent you from sending an inquiry, subscribing to the newsletter, requesting the report, or booking a presentation.
Consent to analytics cookies is voluntary and is not required to use the basic functions of the website.
11. Changes to this privacy policy
We may update this privacy policy if the website features, tools, service providers, or applicable laws change. The current version of the policy is always available at /en/polityka-prywatnosci.