Privacy notice
This draft describes the intended data-minimizing website configuration. It requires legal review and confirmed controller, hosting, email and retention details before production publication.
Last updated
Who controls personal data
The verified legal controller name and address are pending and must be inserted from company.yaml before personal data is collected through an enabled website form. Privacy inquiries may be sent to privacy@mtera.eu.
Data that may be processed
If you choose to send an email, the message may contain your name, business contact details, organization, role and the information you include. Basic security logs may be created by approved hosting or email providers. The website contact form is disabled.
Purpose and legal basis
Inquiry data is intended to be used only to respond, assess whether a professional conversation is appropriate, protect communications and meet applicable obligations. The precise lawful basis for each activity must be confirmed by qualified counsel for the actual controller and service configuration.
Recipients and processors
Data must be limited to authorized people and approved infrastructure, hosting or email providers required to operate the service. The final notice must name or categorize actual recipients and link to relevant safeguards.
International transfers
No transfer claim is made in this draft. The production notice must identify provider locations and any transfer mechanism that applies to the actual hosting, email, analytics and form configuration.
Retention
Inquiries and logs should be kept only for a documented period tied to their purpose, security needs and legal obligations. Exact periods remain pending and must be approved before launch.
Your rights
Depending on applicable law, a person may have rights of access, rectification, erasure, restriction, objection and portability, and may withdraw consent where consent applies. Requests can be sent to privacy@mtera.eu once the controller identity and verification process are published.
Supervisory authority
The production notice must identify the competent supervisory authority and explain the right to complain without discouraging direct contact first. That detail requires confirmation for the final legal setup.
Forms, analytics, logs and email
The form and analytics are disabled in the approved data configuration. If either is enabled later, this notice and consent behavior must be updated before deployment. Email and necessary security logging must be documented against their actual providers.
Changes to this notice
A real effective date and material-change history must be added only when the legal copy and implementation have been reviewed. Metadata dates must not be changed merely to appear current.