Privacy policy

1. Personal data controller

The controller of your personal data is Mazowieckie Przedsiębiorstwo Usług Pogrzebowych „Terra Levis” Alicja Kępczyk with its registered office in Warsaw, ul. Opaczewska 15 lok. U3, 02-368 Warszawa, NIP (tax ID) 522-167-19-36, REGON 140153732 (hereinafter: “the Administrator” or “Terra Levis”).

For matters concerning data protection you can contact us: by phone on 660 950 600 (open 24 hours) or by e-mail: alicja.kepczyk@terralevis.pl.

2. What data we process

Depending on the form of contact and the scope of the order, we process in particular:

contact details of the person making the enquiry - first name and surname, telephone number, e-mail address and the content of the enquiry;
data necessary to provide the funeral service - the client's data and the data contained in documents (e.g. death certificate, medical certificate of death) needed to organise the funeral and complete the formalities;
details for settlement - invoice details and the information needed to settle the ZUS funeral allowance (in the case of an assignment of the benefit).

The GDPR does not apply to the data of deceased persons; we do, however, process the data of living persons (e.g. the person placing the order, family members) to the extent necessary to perform the service.

2a. Where we obtained your data

Some data reaches us not from you but from the person arranging the funeral — for example the contact details of a family member, of a person authorised to collect documents, or of a person designated to deal with the cemetery or the parish. This is usually a first name and surname, a telephone number, and sometimes an address and the family relationship. We process it only to the extent necessary to arrange the ceremony and complete the formalities, on the basis of Art. 6(1)(b) and (f) GDPR (performance of the contract and our legitimate interest in carrying out the order efficiently). You have all the rights described in the "Your rights" section, including the right to object. If you would like to know who provided your details, please contact us — we will tell you.

3. Purposes and legal bases of processing

We process your data for the following purposes and on the following legal bases (GDPR):

responding to the enquiry and preparing a quote - Art. 6(1)(b) and (f) GDPR (steps taken at the data subject's request and the legitimate interest of the Controller);
conclusion and performance of the contract for funeral services - Art. 6(1)(b) GDPR;
compliance with legal obligations (including tax and accounting records) - Art. 6(1)(c) GDPR;
pursuing or defending against claims - Art. 6(1)(f) GDPR;
statistics and own marketing (analytical and marketing cookies) - Art. 6(1)(a) GDPR, i.e. on the basis of your consent given in the cookie banner.

4. Voluntary provision of data

Providing your data is voluntary but necessary in order to respond and to conclude and perform the contract. Failure to provide the data may make it impossible to deliver the service.

4a. Special categories of data

We do not ask you for information about health, the cause of death or religious beliefs, and we do not need it in order to take an enquiry from the website. Your name and telephone number are enough — we settle everything else in conversation. If you nevertheless provide such information in the message field, we will use it solely to respond to your enquiry and will delete it together with the correspondence within the period indicated in Section 5.

When a contract is concluded and performed, some such information is unavoidable — for example, choosing a religious rather than a secular ceremony reveals religious beliefs. In that case we process it to the extent necessary to perform the contract and, where necessary, on the basis of Art. 9(2)(f) GDPR (establishment, exercise or defence of legal claims).

The GDPR does not apply to the data of deceased persons (Recital 27 GDPR). The data of living family members is protected under the rules described in this Policy.

5. Data retention period

Enquiries sent through the form on the website reach us only as an e-mail message — we do not store their content on the website server. Enquiries that did not result in an order are deleted from the mailbox no later than 12 months after the last contact. If a contract was concluded, further retention follows the rules described below.

We keep the data for as long as is necessary to provide the service, and then for the period required by law (including tax and accounting rules - as a rule, up to 5 years from the end of the year in which the service was provided), and for the limitation period of any claims. Data processed on the basis of consent are kept until the consent is withdrawn.

6. Data recipients

Data may be received only by entities supporting the provision of the service, and only to the extent necessary, including: cemetery administrations, cremation operators, parishes and masters of ceremonies, the Social Insurance Institution ZUS (with regard to the allowance), the accounting office, IT and hosting providers, and postal and courier service providers. These entities process the data on the basis of data processing agreements or under provisions of law.

Data recipients also include: the hosting provider — LH.pl sp. z o.o., based in Poznań, Poland (servers located in Poland); the e-mail provider that receives enquiries sent through the form; and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with regard to Google Analytics 4, Google Ads and Google Maps (see below). Once SMS notifications to our office are launched, the SMS provider — LINK Mobility Poland sp. z o.o. (SMSAPI service, deployment planned) — will also be a recipient. We have, or will have, a data processing agreement (Art. 28 GDPR) with each of these entities.

7. Transfer of data outside the EEA

We use tools provided by Google: Google Analytics 4, Google Ads and Google Maps. For users in the European Economic Area these services are provided by Google Ireland Limited, based in Dublin; however, data may be transferred to Google LLC in the United States.

Such transfers are based on Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 on the adequate level of protection of personal data under the EU–U.S. Data Privacy Framework; Google LLC is on the list of entities certified under that framework. In addition, standard contractual clauses approved by the European Commission are applied (Art. 46(2)(c) GDPR). A copy of the safeguards used can be obtained by contacting us at alicja.kepczyk@terralevis.pl.

Using Google Analytics 4 and Google Ads for analytics and ad-measurement purposes requires your consent given in the privacy settings — without consent, Google does not store cookies in your browser. Embedded Google Maps on this site connect to Google when the map is displayed on the page; once loaded, or once you open a link to Google Maps, your browser connects to Google, which receives technical data including your IP address and may store or read cookies. Details are described in Google's privacy policy.

8. Cookies

The site uses cookies (and similar technologies) in three categories:

necessary - necessary for the site to work properly; they do not require consent;
analytics - visit statistics (e.g. Google Analytics); activated only after consent has been given;
marketing - measuring advertising effectiveness (e.g. Google Ads); activated only after consent is given.

Which cookies and identifiers we use

Necessary (no consent required): tl_cookie_consent — stores your choice in the privacy settings, kept in the browser's local storage, never sent to our server, period 12 months; tl_cc — stores the choice on the English and Ukrainian pages, a cookie, period 12 months.

Analytics (only after consent is given; set by Google): _ga and _ga_TV6EQG8HV4 — distinguishing sessions and users in Google Analytics 4, period up to 24 months (Google Analytics 4 default value).

Advertising measurement (only after separate consent is given; set by Google): _gcl_au — attributing a visit to a click on a Google Ads advertisement, period up to 90 days (Google Ads default value). We do not use remarketing or ad personalisation — the "ad_user_data" and "ad_personalization" signals remain switched off regardless of your choice.

Google Maps: embedded maps connect to Google when a map is displayed on the page; Google may then store its own cookies in your browser. Their names and lifetimes are determined by Google; you can manage them in your browser and Google account settings.

Consent can be changed or withdrawn at any time using the option Cookie settings (in the site footer) or by changing your browser settings.

8a. Form protection and logs

To protect the form against abuse, we limit the number of enquiries sent from a single IP address. We do not store the IP address itself — only its irreversible hash (a hash function with an added value). We also use a hidden trap field for robots and a key that prevents the same enquiry from being sent twice. The server log contains only the date and time, the enquiry reference, the branch code and the acceptance status — we do not record the name, telephone number or message content in it. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in keeping the site secure). Independently of this, the hosting provider keeps its own access logs in accordance with its own policy.

9. Your rights

You have the right to: access your data and receive a copy of it, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and, for data processed on the basis of consent, the right to withdraw it at any time (without affecting the lawfulness of processing carried out before the withdrawal).

You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

10. Automated decision-making

Your data is not used for automated decision-making, including profiling that produces legal effects.

11. Changes to the Privacy Policy

The controller may update this Privacy Policy. The current version is published on this page. Last updated: 15 September 2026