Privacy policy

Data controller

The controller responsible for this website is MG Made, owner Majid Ghasemi, St. Georgstraße 8, 20099 Hamburg, Germany. Send privacy requests to mg@mgmade.com.

Technical data when visiting the website

Necessary technical connection data may be processed temporarily by the hosting infrastructure to operate the website securely and reliably. MG Made does not store a visitor's IP address in the contact enquiry database table.

The legal basis is our legitimate interest in providing a secure and reliable website under Article 6(1)(f) GDPR.

• IP address and request time
• requested page and response status
• browser, operating system and User-Agent
• security and error-diagnostic information

Contact form and consultation requests

When you submit the form, your details are used only to review and answer your enquiry and, where relevant, to prepare a possible engagement. The legal bases are your consent under Article 6(1)(a) GDPR and pre-contractual steps requested by you under Article 6(1)(b) GDPR.

The enquiry is stored directly in a MySQL database on ALL-INKL infrastructure in Germany and is then sent from the same server to ads@mgmade.com, with your email address set as Reply-To.

• selected language, name and email
• phone or WhatsApp if provided voluntarily
• message content
• consent and submission timestamps
• unique submission ID and delivery status

Spam protection with Cloudflare Turnstile

The form uses Cloudflare Turnstile to distinguish people from automated traffic. Technical signals such as IP address, TLS fingerprint, User-Agent, Sitekey and origin may be processed. The Turnstile token and connection IP are sent to Cloudflare for validation.

This processing protects the form from abuse and is based on our legitimate interest under Article 6(1)(f) GDPR. According to Cloudflare, these signals are not used for advertising or to directly identify individuals.

Service providers and international transfers

ALL-INKL provides the website hosting, MySQL database and email mailbox in German data centres. Cloudflare is used only for the Turnstile security check. Where Cloudflare processes data outside the European Economic Area, processing is covered by the contractual safeguards described in Cloudflare's DPA.

Enquiries are accessible only to the necessary MG Made team members and providers required to operate the service and deliver the message.

Retention

Enquiries that do not lead to an engagement are deleted or anonymised no later than six months after the final reply, unless longer retention is required to establish, exercise or defend legal claims.

If an enquiry leads to a contract or business relationship, related records are retained for the applicable statutory commercial and tax periods. Technical infrastructure logs are deleted or anonymised according to the providers' necessary retention settings.

Your rights

Under the GDPR you may request access, correction, deletion, restriction and portability of your data, and object to processing based on legitimate interests. Consent may be withdrawn for the future without affecting processing that was lawful before withdrawal.

Send requests to mg@mgmade.com. You may also lodge a complaint with a supervisory authority, including the Hamburg Commissioner for Data Protection and Freedom of Information.

• access to and a copy of your data
• correction or deletion
• restriction or objection
• portability and withdrawal of consent

Cookies, analytics and automated decisions

This version of the website does not use marketing analytics, personalised advertising or embedded social-media services. Fonts and images are served from the website itself. Turnstile may use only technically necessary signals or cookies for bot detection.

There is no automated decision-making or profiling that produces legal or similarly significant effects for visitors. If new services are added later, this notice will be updated before they are enabled.