Privacy Policy

1. Who We Are

MKDA Digital is a sole trader (eenmanszaak) registered in the Netherlands and operating under Dutch and European Union law. Nicolas Macheda is the data controller responsible for this website and for any personal data collected through it.

2. What Data We Collect

Contact form

When you submit the contact form on this site, we collect: your first and last name, email address, phone number (optional), the topic you selected, your role, and the message you wrote.

Lab early-access sign-up

When you submit your email address to be notified about MKDA Lab products, we collect your email address only.

What we do not collect

We do not use cookies for tracking or advertising. We do not use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or any similar third-party tracking tools. We do not collect any special category data (health, political views, etc.).

3. Why We Collect It

• Contact form submissions are used solely to respond to your enquiry and determine whether an engagement makes sense for both parties.
• Early-access email addresses are used to notify you when MKDA Lab products become available. You can unsubscribe at any time by replying to any email with "unsubscribe" in the subject line.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:

• Legitimate interest (Article 6(1)(f)) for responding to contact form enquiries from potential clients.
• Consent (Article 6(1)(a)) for the Lab early-access email list. You give this consent by actively submitting your email address and can withdraw it at any time.

5. Third-Party Processors

We use one third-party service to process form submissions:

No other third-party services receive your personal data through this website.

6. How Long We Keep It

• Contact form enquiries: Retained for up to 24 months from the date of submission, or for the duration of any resulting business relationship, whichever is longer.
• Early-access email addresses: Retained until you unsubscribe or request deletion.

After the applicable retention period, data is deleted or anonymised.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your personal data.
• Right to restriction — you can ask us to limit how we use your data.
• Right to data portability — you can ask us to provide your data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Right to object — you can object to processing based on legitimate interest.

To exercise any of these rights, contact us at . We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Security

This website is served over HTTPS. Form data is transmitted securely via Formspree's encrypted infrastructure. We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of the site after an update constitutes acceptance of the revised policy.

10. Contact

For any questions, requests, or concerns relating to this Privacy Policy or your personal data, please contact: