gdpr
Privacy policy.
Collected data
The contact form collects: name, company (optional), email, message. A technical fingerprint (truncated IP) is kept to prevent abuse.
Purpose
Reply to you, track sales conversations, prevent spam. No marketing use without explicit opt-in.
Retention
12 months maximum after the last exchange, then automatic purge.
Hosting
Pocketbase self-hosted on Contabo VPS (EU datacenter, Nuremberg/Düsseldorf) through Coolify. Daily encrypted backup.
Sub-processors and transfers
The site relies on the technical sub-processors below. No data is sold or rented.
- Pocketbase, self-hosted by MLR Prod on a Contabo VPS (EU): storage of contact requests.
- Cloudflare Turnstile (Cloudflare, Inc., United States): anti-bot protection of the form; processes an IP address and a validation token. Transfer covered by the EU / US Data Privacy Framework.
- Appointment booking: booking a call currently goes through Google Calendar (Google LLC, United States); your name, email and chosen slot are then sent to it (transfer covered by the EU / US Data Privacy Framework). This component is being migrated to a European solution.
Your rights
Access, rectification, deletion, portability: write to contact@mlrprod.com. Response within 30 days max.
Cookies
This site uses no tracking cookies. Only local storage (`localStorage`) keeps your color palette preferences.