Who we are
This website, mediamailsrl.com, is run by Mediamail SRL ("Mediamail", "we", "us"). We are the data controller for the personal data described in this policy.
For anything related to your data, write to contact@mediamailsrl.com. We'll answer within 30 days, usually much sooner.
What we collect
When you use the contact form or email us
- Your name and email address
- Optional details you choose to give: company name, current website, the services you're interested in and a rough budget
- The content of your message
- The date and time of the message and the IP address it was sent from, which we keep to stop spam and abuse
When you simply browse the site
Our web server keeps standard technical logs: IP address, date and time, the page requested, browser type and referring page. These are used only to keep the site running and secure. We do not use analytics, advertising pixels or social media trackers on this site.
When you become a client
We also process the information needed to run the project and to invoice you, such as billing details and project correspondence.
Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Replying to your message and discussing a possible project | Steps taken at your request before entering a contract (6.1.b), and your consent (6.1.a) |
| Delivering a project and providing support | Performance of a contract (6.1.b) |
| Invoicing and accounting | Legal obligation (6.1.c) |
| Server logs, spam prevention and site security | Our legitimate interest in keeping the site safe and working (6.1.f) |
We don't use your data for automated decisions that have legal or similarly significant effects on you, and we don't add you to a newsletter unless you explicitly ask.
How long we keep it
- Enquiries that don't turn into a project: up to 12 months after our last exchange, then deleted.
- Client and project data: for the length of our working relationship and then as long as tax and accounting law requires, typically 10 years for invoices.
- Server logs: up to 30 days.
Who we share it with
We never sell personal data. We only share it with service providers who help us run the business, under data processing agreements, and only as much as they need:
- OVHcloud, which provides the server hosting this website
- Namecheap (Private Email), which hosts our mailboxes
- Our accountant, for invoicing data only
Some of these providers may process data outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision. We may also disclose data where the law requires it.
Cookies
This website does not set cookies for analytics, advertising or tracking, so there's no cookie banner. Fonts and all other files are served from our own server, so visiting the site doesn't send your IP address to third parties such as Google.
If we ever add analytics or other non-essential cookies, we'll ask for your consent first and update this page.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct data that's wrong or incomplete
- delete your data, where we're not legally required to keep it
- restrict or object to how we process it
- send your data to you or another provider in a common format
- withdraw your consent at any time, without affecting what we did before
Email contact@mediamailsrl.com to use any of these rights. You also have the right to complain to the data protection authority in the EU country where you live or work, or where you believe the problem happened.
Security
The site is served only over HTTPS. Contact form messages are delivered to our mailbox and kept in a protected log on our server that isn't publicly accessible. Access to client data is limited to the people working on your project.
Changes to this policy
If we change how we handle personal data, we'll update this page and the date at the top. For significant changes affecting clients, we'll let you know by email.