LEGAL
Privacy Policy
This page describes how Myndek processes personal data collected through this website, in line with the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
Last updated: 2026-04-16
Data controller
The data controller for personal data processed on this website is Myndek s.r.l., [TO FILL]. You can reach the controller at info@myndek.com.
What data we collect
When you contact us through the form on this website we collect your name, email address and the content of the message you send. We also collect aggregate technical data (anonymized IP address, user agent, referrer) via Vercel Web Analytics, which is cookie-less. We do not use any third-party tracking, fingerprinting or advertising technologies.
Purposes of processing
We process your data to reply to the requests you send via the contact form, to prevent abuse (rate limiting) and to measure aggregate website performance. We never sell personal data and we never use it to profile you.
Legal basis
The legal basis for processing contact-form data is your explicit request and the controller's legitimate interest in replying to it (Art. 6(1)(b) and (f) GDPR). The legal basis for cookie-less analytics is the controller's legitimate interest in measuring site performance (Art. 6(1)(f) GDPR).
Where your data is stored
Email messages are processed by Resend (resend.com) as email transactional provider. Application hosting and logs are handled by Vercel (vercel.com). All providers act as data processors under a DPA with the controller.
Retention
Contact-form messages are retained for up to 24 months from the last interaction, unless you request earlier deletion. Aggregate analytics are retained according to Vercel's standard retention policy (up to 1 year).
Sharing with third parties
We share data only with the processors listed in the storage section. We never disclose personal data to third parties for marketing or advertising purposes.
Your rights
You have the right to access, rectify, erase, restrict, oppose the processing of your personal data, and to data portability. You can exercise any of these rights by writing to info@myndek.com. You also have the right to lodge a complaint with your local data protection authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).
Non-EU transfers
Some processors (Vercel, Resend) operate globally, including servers in the United States. Data transfers outside the EU are protected by Standard Contractual Clauses (SCC) approved by the European Commission.
Contact
For any privacy-related request, write to info@myndek.com. We will reply within 30 days as required by GDPR Art. 12.
Changes to this policy
We may update this policy to reflect changes in our processing activities or in applicable law. The date of the last update is shown at the top of the page.