Privacy Policy
Last updated: 22 September 2026
This policy explains what Nyreon does with personal data when you visit this website or get in touch through it. It is deliberately short, because the site collects very little: there are no tracking cookies, no analytics and no third-party trackers on it.
Who is responsible
The controller of the personal data described here is Nyreon sp. z o.o., with its registered office at ul. Jesionowa 1, 83-300 Kartuzy, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court (Sąd Rejonowy Gdańsk-Północ w Gdańsku, VIII Wydział Gospodarczy Krajowego Rejestru Sądowego), under KRS number 0001267764, NIP 5892115085, REGON 545756658, share capital 5 000,00 PLN. You can reach us about anything in this policy at hello@nyreon.io.
What we collect
When you fill in the contact form, we receive what you type into it:
- your name
- your work email address
- your company: required for AIS enquiries, optional for consulting
- for AIS enquiries: what you are asking for, your type of business and, if you give them, your role, your approximate number of active SKUs and stocking locations, the modules you are interested in and the systems your data is in
- your message
- the time you selected in the calendar, if you selected one, and the timezone your browser reports, so the time we confirm is the time you meant
The form also contains a hidden field that real visitors never see or fill in. If it arrives filled in, the submission is treated as automated and discarded. That is the only thing on the page that behaves like a check on you, and it stores nothing.
When you request the AIS demo, we receive your name and work email address, and your company and role if you give them. We use them to email you the link to the demo and to follow up with you about AIS. Your browser then remembers, on your device only, that you filled the form in, so the demo opens directly on your next visit. If you take the guided tour, we also receive which modules you chose to see.
The AIS video on the home page is hosted on YouTube and loads only when you press play. From that moment Google Ireland Limited receives your IP address and the usual technical details of the request, under its own privacy policy. We use YouTube's privacy-enhanced mode, which does not set cookies before you play the video.
Separately, our hosting provider records the ordinary technical details of any web request: the IP address it came from, the browser's user-agent string, the address requested and the time. We use these only to keep the site available and to investigate faults and abuse.
Cookies and browser storage
Simply visiting this site stores nothing in your browser. Two small preferences are saved only if you change them yourself, so the site remembers your choice on your next visit:
- NYREON_LOCALE - a first-party cookie set when you pick a language in the switcher. It holds only the language code (en, pl or de) and expires after 12 months.
- nyreon-theme - a local storage entry set when you switch between the dark and light theme. It holds only the word light or dark and stays until you clear your browser data.
Neither identifies you, neither is sent to anyone but this site, and both exist only to provide a feature you asked for, which is why they need no consent and there is no cookie banner. You can delete them at any time in your browser settings; the site then falls back to its defaults.
What we do not collect
There is no analytics, no advertising or tracking technology, no social media pixel and no embedded third-party widget. Fonts, images and video are served from this domain, so simply loading a page does not tell anyone else that you were here.
We do not sell personal data, we do not use it for advertising, and we do not make automated decisions or build profiles about you.
Why we use it, and on what basis
- To answer your enquiry and arrange the call you asked for. Where that enquiry is a step towards working together, the basis is the performance of, or preparation for, a contract (GDPR Article 6(1)(b)); otherwise it is our legitimate interest in responding to people who contact us (Article 6(1)(f)).
- To keep the site and our systems secure and working, using the technical records described above. The basis is our legitimate interest in the security and integrity of our own service (Article 6(1)(f)).
- To meet legal obligations, such as retaining records where the law requires it (Article 6(1)(c)).
Who else sees it
We share personal data only with the service providers we need in order to run the site and reply to you, and only for that purpose. Each acts on our instructions under a data processing agreement:
- Google Ireland Limited, whose Workspace hosts our mail and carries the contact form's messages to us
We may also disclose personal data where we are legally required to. We do not share it with anyone else.
Where it is processed
We aim to keep processing within the European Economic Area. Where a provider named above processes data outside the EEA, that transfer relies on an adequacy decision by the European Commission or on the Commission's standard contractual clauses, together with any additional safeguards the transfer requires. Write to hello@nyreon.io for details of the safeguards that apply.
How long we keep it
We keep enquiry correspondence for as long as it takes to deal with your enquiry, and then for up to 24 months in case you or we return to the conversation, after which it is deleted. Technical records held by our hosting provider are kept for 30 days. Where the law sets a longer period, we keep what it requires for as long as it requires.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct it, if it is wrong or incomplete
- delete it
- restrict how we use it
- provide it in a portable, machine-readable form
You can also object to our processing where we rely on legitimate interests, and withdraw consent at any time where we have relied on consent. Write to hello@nyreon.io and we will respond within one month.
If you think we have handled your personal data improperly, you can complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw. You may also complain to the authority where you live or work.
Children
This is a business website and is not directed at children. We do not knowingly collect personal data from anyone under 16.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top of it. Where a change materially affects you, we will say so here rather than quietly amend the text.
Contact
Questions, requests and complaints about this policy all go to hello@nyreon.io.