Legal / GDPR

Privacy Policy

This policy explains how MetricsRoom processes personal data in line with Regulation (EU) 2016/679 (GDPR) and Polish data protection law.

Last updated: 11 September 2026

1. Data controller

Natalia Kowalińska Marketing Online, Lawendowa 4D lok. 1, 55-002 Kamieniec Wrocławski, Poland. NIP 8961641827, REGON 529255696.

Contact for all privacy matters: hello@metricsroom.com.

2. What data we collect

Enquiry data you send through the contact form: name, work email, company website, annual revenue and monthly marketing budget ranges, preferred start date and a description of your challenge.

Client account data: email address and sign-in details for the client dashboard, billing details, and the campaign and analytics data we process on your behalf.

Technical data: IP address, device and browser type, pages viewed and referring source, collected through privacy-focused website analytics.

3. Why we process it and on what legal basis

To answer enquiries and prepare proposals — performance of a contract or steps prior to it (Art. 6(1)(b) GDPR).

To deliver contracted services, invoicing and support — contract performance and legal obligations (Art. 6(1)(b) and (c) GDPR).

To secure, measure and improve our website — legitimate interest (Art. 6(1)(f) GDPR).

To send marketing emails where you opted in — consent (Art. 6(1)(a) GDPR), withdrawable at any time.

4. Cookies and analytics

Essential cookies keep the site working and remember your language choice. Analytics are aggregated and used only to understand traffic volume and page performance.

Non-essential cookies are set only with your consent, which you can withdraw at any time in your browser settings.

5. Who we share data with

Service providers acting as processors under written agreements: hosting and application infrastructure, email delivery, analytics, accounting and advertising platforms used to run client campaigns.

We never sell personal data. Public authorities receive data only where legally required.

6. International transfers

Some providers process data outside the European Economic Area. Where that happens, transfers rely on European Commission adequacy decisions or Standard Contractual Clauses with additional safeguards.

7. How long we keep data

Enquiries that do not become engagements: up to 24 months.

Client and accounting records: for the duration of the contract and then 5 years from the end of the tax year, as required by Polish law.

Analytics data: up to 14 months in aggregated form.

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any right, write to hello@metricsroom.com. We respond within one month.

You may lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

9. Security and automated decisions

We apply access controls, encryption in transit and least-privilege practices for all systems holding personal data.

We do not make decisions producing legal effects about you based solely on automated processing.