Privacy Policy
Last updated: 13 October 2026
This policy explains how Neoteric sp. z o.o. handles personal data when you visit neoteric.eu, contact us, discuss a project, or request our resources and communications.
1. Who is responsible for your data?
Neoteric sp. z o.o. is the controller of personal data covered by this policy. Our address is Marynarki Polskiej 163, 80-868 Gdańsk, Poland. Our VAT identification number is PL 957-107-23-74. For privacy enquiries and requests to exercise your rights, email hi@neoteric.eu or write to us at the address above. Please indicate that your message concerns personal data protection.
2. Information you provide
When you contact us, we receive the information you choose to provide, such as your name, email address, company details, project description and correspondence. Our project enquiry form asks for your name, email address and a brief description of your idea. Please avoid including sensitive personal data or information about other people unless it is necessary for your enquiry.
When you request a resource, register for an event or subscribe to communications, the relevant form explains the information requested. Providing data is voluntary, but we need the required contact details to respond to your request or deliver the requested material.
3. Information from your visit
Website infrastructure and integrated tools can process technical information such as your IP address, browser and device information, pages visited, referral information, timestamps and cookie identifiers. Analytics and experience measurement tools can also collect information about interactions with the site, such as clicks, scrolling and page navigation.
4. How we use personal data
- Project enquiries and correspondence: to respond, understand your needs and discuss possible cooperation. Depending on the context, processing is necessary for steps you request before a contract (Article 6(1)(b) GDPR) or our legitimate interest in handling business enquiries (Article 6(1)(f)).
- Requested resources and events: to provide the material or participation you request and handle related correspondence. We rely on steps necessary for an agreement with you (Article 6(1)(b)) or our legitimate interest in fulfilling business requests (Article 6(1)(f)), depending on the request. Delivery of a requested resource and ongoing marketing communications are different processing purposes.
- Marketing: to send communications where the required permission has been obtained. Where processing relies on consent, the basis is Article 6(1)(a).
- Website operations and security: to operate the site, diagnose problems and prevent misuse, based on our legitimate interest in maintaining a reliable and secure website (Article 6(1)(f)).
- Legal obligations and claims: to meet applicable obligations (Article 6(1)(c)) and establish, exercise or defend legal claims (Article 6(1)(f)).
5. Cookies and integrated tools
Cookies and similar technologies store or access information on your device. Necessary technologies support website operations and remember privacy choices. Other technologies support analytics, website optimisation and advertising measurement.
The website currently includes integrations for HubSpot, Google Analytics and Google Ads, Meta Pixel, LinkedIn Insight Tag, Microsoft Clarity, Hotjar and VWO. These tools support contact management, usage measurement, advertising or understanding how visitors interact with pages. Google Tag Manager is also present to manage website tags. The data collected depends on the tool and its configuration.
Where optional analytics or advertising technologies require consent, the applicable basis is your consent (Article 6(1)(a) GDPR). Merely visiting the website does not constitute consent. You can withdraw consent and adjust the choices available in the cookie consent interface.
Our consent manager is Pressidium Cookie Consent. Its configured preference cookie expires after 182 days. Browser settings also allow you to delete or block cookies. Blocking cookies may affect some website functions.
6. Who receives information?
Information may be handled by service providers supporting hosting, website maintenance, communications, contact management, analytics and advertising. The integrations listed above identify the main tools present on the website. We may also disclose information to professional advisers or competent authorities when necessary for a lawful purpose.
We do not sell personal data. External websites linked from our site apply their own privacy policies.
7. International transfers
The providers of our website integrations operate internationally. Depending on the service and its configuration, personal data may be processed outside the European Economic Area, including in the United States. Transfers outside the EEA require a lawful transfer mechanism under the GDPR. This may be an applicable European Commission adequacy decision, including the EU-US Data Privacy Framework for a certified recipient, or appropriate safeguards such as standard contractual clauses, with supplementary measures where needed.
You can contact us at hi@neoteric.eu for information about the destination and safeguards applicable to your data and how to obtain a copy of relevant safeguards.
8. How long information is kept
We keep personal data for the purpose for which it was collected, using the following criteria:
- Enquiries and project discussions: for the time needed to handle your request and any resulting correspondence or business relationship. If the enquiry leads to a contract, contractual and statutory retention requirements apply to the relevant records.
- Marketing: for the duration of the subscription or other valid basis for the communication. Withdrawal of consent or an objection ends the relevant marketing use. A limited record of the request may be retained to respect your choice and demonstrate compliance.
- Legal and accounting records: for the periods required by applicable law.
- Claims: for the applicable limitation period and, where a dispute arises, until it is resolved.
- Technical and analytics data: according to the operational purpose, the tool configuration and the expiry of the relevant identifiers. A cookie expiry date is not necessarily the retention period of all associated data.
9. Your rights
Subject to the conditions in data protection law, you may request access, correction, deletion, restriction and data portability, and object to processing based on legitimate interests. You may object to direct marketing at any time. You may withdraw consent without affecting the lawfulness of earlier processing.
You can also complain to the President of the Personal Data Protection Office in Poland or another competent supervisory authority. Information is available on the UODO website.
10. Analytics and profiling
Analytics and advertising tools may associate visits with cookie identifiers, measure conversions and group audiences according to their interactions with the website. This can involve profiling for measurement or advertising. Such audience analysis is distinct from a decision producing legal or similarly significant effects. Contact us if you would like information about automated processing relevant to your data.
11. Security and external services
The website uses HTTPS to encrypt data in transit. The appropriate protection of personal data also depends on access controls, service-provider arrangements and organisational measures. No internet transmission or storage method can offer an absolute guarantee of security.
When you follow a link to another website or interact with an external service, its own privacy information applies to the processing for which that provider is responsible.
12. Changes to this policy
We will publish updates on this page when our practices or relevant requirements change. An update to this policy does not itself constitute consent to a new use of your data.