Privacypolicy.

1. Controller

No data protection officer has been appointed because there is currently no legal obligation to do so.

2. Hosting and server logs

This website is hosted by Hostinger International Limited, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, and delivered through Cloudflare, Inc. as a reverse proxy, content-delivery and security service. When the website is accessed, Hostinger and Cloudflare process technically necessary connection and security data. This may include the IP address, date and time, requested URL or file, transferred volume, referrer URL, browser, operating system, HTTP status, TLS and network metadata.

Processing serves secure and stable website delivery, caching, DDoS and abuse prevention, error analysis and the protection of the contact form. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the security, functionality and resilience of the website.

Logs are retained only as long as necessary for operation, security and abuse investigation, then deleted or anonymised unless a legal obligation or specific security investigation requires longer retention. We have concluded a processing agreement with Hostinger under Article 28 GDPR.

3. Contact by email or telephone

If you contact us, we process the information you provide—particularly your name, contact details, message and time of contact—to handle the enquiry and answer follow-up questions.

For enquiries relating to a prospective or existing contract, the basis is Article 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in appropriate communication under Article 6(1)(f) GDPR.

We delete contact data once the matter is completed unless statutory retention duties, contractual claims or legitimate documentation interests require continued storage. Business and tax-relevant communication may be retained for statutory periods.

4. Enquiry form

The enquiry form sends the information you enter—name, email address and message—to Madev so that we can process your enquiry. The form is protected by Cloudflare Turnstile, which is loaded from Cloudflare and checks technical signals to distinguish human visitors from automated abuse. A Turnstile token is sent to our server and verified with Cloudflare’s Siteverify service. For abuse prevention and rate limiting, our server also processes the source IP address; the IP address is included in the internal enquiry notification. We do not use Turnstile for advertising or audience analytics.

Form processing is based on Article 6(1)(b) GDPR where the enquiry concerns a prospective contract, and otherwise on Article 6(1)(f) GDPR. The security check is based on our legitimate interest in preventing spam and abuse. We transmit the enquiry to our email infrastructure via encrypted SMTP. We delete the enquiry and related communication when the matter is completed, subject to statutory retention duties and legitimate documentation interests.

For more information, see Cloudflare’s Turnstile Privacy Addendum.

5. Light/dark theme

The website may store your selected appearance locally in your browser under the key madev-theme. It stores only “light” or “dark”. The setting is not transmitted to Madev, combined with other data or used for analytics or advertising.

Local access is necessary to provide the appearance you explicitly requested and is permitted by section 25(2)(2) TDDDG without consent. You can remove it by deleting this website’s local data in your browser.

6. Cookies, analytics and external content

This website currently uses no advertising cookies, audience analytics, advertising trackers or embedded social-media content. The Cloudflare Turnstile script is loaded from challenges.cloudflare.com for contact-form security and is not used for advertising or audience measurement. Fonts and website images are delivered from the website itself. The theme preference is stored locally as described above.

7. Recipients and international transfers

Personal data is accessible only to recipients who need it for the stated purposes, particularly Hostinger as processor for hosting and email infrastructure, and Cloudflare as provider of the reverse-proxy, delivery, security and Turnstile services. Disclosure may also occur where required by law, necessary for legal claims or initiated by you.

Hostinger is established in Cyprus within the European Union. Where Hostinger uses subprocessors outside the European Economic Area, its processing agreement provides appropriate safeguards, particularly EU Standard Contractual Clauses under Article 46 GDPR. Cloudflare may process data in countries outside the European Economic Area; Cloudflare states that it uses appropriate safeguards for international transfers, including Standard Contractual Clauses where applicable. Hostinger and Cloudflare publish further details in their current data-protection terms and subprocessor information.

8. Encryption and security

The production website is transmitted using TLS/HTTPS. Cloudflare and Hostinger provide additional network and hosting security measures. We and our hosting provider use appropriate technical and organisational measures against loss, alteration and unauthorised access. Absolute transmission security cannot be guaranteed.

9. Your rights

Where the legal conditions are met, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and objection (Article 21). Consent may be withdrawn prospectively at any time (Article 7(3)).

Where processing is based on Article 6(1)(f), you may object at any time on grounds relating to your particular situation. Contact [email protected] to exercise your rights.

Right to complain

You may complain to a data protection authority, particularly the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

10. Changes

We update this policy when the website, services or legal requirements change. The version published here applies.

Legal basis reviewed for this version: Articles 5, 6, 12–22, 28 and 44–49 GDPR; section 25 TDDDG; Hostinger Data Processing Addendum; Cloudflare Turnstile Privacy Addendum. This policy reflects the website’s technical state on the date above.