Privacy Policy

1. Scope of this policy

This policy covers the public mledo.com website, language selection and the “Book a demo” form. It does not describe data processing after signing in to the mLEDo application or processing under a concluded service agreement, which may be governed by separate documents.

2. Data controller

The controller of the data described in this policy is mLEDo, the operator of mledo.com. For privacy matters, contact us at contact@mledo.com.

3. Data we process

Information entered in the form

We process your full name, email address, optional company name, planned number of screens, message and the language in which you use the website.

Technical data

When you connect, the server receives technical data such as your IP address, request time, page address and browser information. Some of this data may be included in standard hosting security logs.

To protect the form from spam, the IP address is transformed one way into a pseudonymous HMAC identifier. The local rate limiter does not store the plain IP address.

4. Purposes and legal bases

• Responding to an enquiry, arranging a demo and preparing an offer — taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), and for ordinary business correspondence our legitimate interest (Article 6(1)(f) GDPR).
• Protecting the form and website against abuse — our legitimate interest in maintaining security and service availability (Article 6(1)(f) GDPR).
• Establishing, exercising or defending legal claims — our legitimate interest (Article 6(1)(f) GDPR), where necessary.

Form submissions are not automatically added to a newsletter and are not used for advertising profiles.

5. Data recipients

Data may be accessed by authorised people working with mLEDo and by providers supporting website maintenance, hosting, email and SMTP delivery, IT security, as well as legal or accounting advisers where necessary. Processors act on our instructions and only to the extent needed to provide their services.

The website does not disclose data to advertising or analytics providers. If a selected technical provider processes data outside the European Economic Area, the transfer takes place only under a mechanism permitted by the GDPR, such as an adequacy decision or Standard Contractual Clauses.

6. How long we keep data

• We keep correspondence for the time needed to deal with the enquiry. If we begin working together, further retention follows from the agreement and legal obligations; otherwise, data may be retained until the need to establish or defend claims expires.
• The anti-spam rate limiter considers events from the previous 24 hours. Older pseudonymous entries are removed during subsequent rate-limiter operations.
• The session mechanism protecting the form expires when the browser session ends, while its security token remains valid for no more than six hours.
• Standard server logs are retained according to the hosting security configuration and no longer than required to diagnose problems and protect the website.

7. Cookies and browser storage

The website uses only functional and security mechanisms. We do not place analytics or advertising cookies.

You can remove these items in your browser settings. Disabling language storage does not block the website, while blocking the session cookie may prevent the form from being submitted securely.

8. Your rights

Depending on the legal basis and circumstances, you may request access to, rectification or erasure of your data, restriction of processing and data portability. You may also object to processing based on our legitimate interests.

To exercise a right, email contact@mledo.com. We may ask for information needed to verify the identity of the person making the request.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office. The complete list of information to be provided when data is collected is set out in Article 13 GDPR.

9. Voluntary provision and automated decisions

Providing data is voluntary. Your name, email address and planned screen-count range are required to submit the form; the company name and message are optional but help us prepare a more relevant response. We do not use the data for automated decision-making or profiling.

10. Changes to this policy

We may update this policy if the website, service providers or legal requirements change. The current version will always be published at this address with its last-updated date.