Privacy policy
Last updated: 27 October 2026
1. Who we are
HIDROCIBALAE d.o.o., Jurja Dalmatinca 33, 32100 Vinkovci, Croatia, OIB 38874770240 ("Hidrocibalae", "we") is responsible for the personal data handled through Marelia: this website, the Marelia web platform and the Marelia desktop application. Our data protection officer can be reached at dpo@hidrocibalae.hr.
2. What we collect and why
Your survey data stays on your computers: Marelia processes it locally and does not upload it to us. We do not sell personal data.
Demo requests
Your name, email address and company, anything else you write in the form, and which link brought you to it. We use this to answer you and, if it comes to that, to prepare an offer (Art. 6(1)(b) and (f) GDPR). We need your name, email address and company to reply. To stop spam, our server uses your IP address to limit requests; it is not saved with your request.
Accounts, devices and licences
Your name, email address, organisation, role, last sign-in and a one-way hash of your password, and for each activated device its hardware identifier, computer name, operating system, IP address and check-in times. We use this to provide the service your organisation licensed, enforce its seats and prevent misuse (Art. 6(1)(b) and (f) GDPR).
Usage data
If your organisation enables usage sync, the desktop application reports each tool run: the tool and version, when it ran, how long it took and whether it succeeded, including error messages, which can contain file names. Your organisation's administrators and our support team use it (Art. 6(1)(f) GDPR). Your organisation can switch it off, and you can object by writing to dpo@hidrocibalae.hr.
Website statistics
Only if you allow statistics cookies, Google Analytics records which pages are viewed, how visitors arrived, the device and browser, the approximate location and whether a demo request was sent, never what is typed into the form. The basis is your consent (Art. 6(1)(a) GDPR). Until you allow it, Google's script is not loaded.
Cookie choices
Each choice in the cookie banner is recorded as proof of consent: a consent ID, the choice, the time, the page, the banner text, the browser and a shortened IP address (Art. 7(1) and 6(1)(c) GDPR).
Security logs
Our servers record IP addresses and request times to keep the service secure and limit abuse (Art. 6(1)(f) GDPR).
4. Your organisation's data
For the personal data of your organisation's users described above, we are the controller. Where we process personal data only on your organisation's instructions, we act as a processor and sign a data processing agreement on request: hello@marelia.eu.
5. Who receives it
- Hetzner Online GmbH, Germany: hosting of the platform, its database and files, in the EU.
- Resend, United States: delivery of emails such as invitations, password resets and demo request notifications, under the EU Standard Contractual Clauses.
- Google Ireland Limited: website statistics, only if you allow them. Google may process the data in the United States under the EU-US Data Privacy Framework.
We also disclose data where the law requires it, and to our legal and tax advisers where needed.
6. How long we keep it
- Demo requests: as long as the conversation lasts plus one year, or the contract plus five years if it leads to one.
- Newsletter: until you withdraw consent.
- Accounts, devices and usage data: while your organisation's licence is active, then deleted or anonymised within 90 days, unless accounting or tax law requires longer.
- Website statistics: 14 months.
- Cookie choices: 12 months after the consent ends.
- Security logs: a short period, then deleted.
7. Your rights
You can ask for access to your data, its correction or erasure, restricted processing or a portable copy, object to processing based on legitimate interest, and withdraw consent at any time (Art. 7(3) and 15-21 GDPR). Write to dpo@hidrocibalae.hr and we will answer within one month. You can also complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr.
8. Changes
We publish changes here and update the date at the top, and tell account holders about significant changes by email. See also our terms of service.