Privacy Policy

1. Data Controller

The data controller is Laolerot s.r.o., Company No.: 03214231, operating the Mellrose brand, registered office at Plzeňská 1358, 349 01 Stříbro, Czech Republic. Contact: info@mellrose.cz

2. Data We Collect

We only process data you voluntarily provide through the contact form:

• Full name
• Email address
• Message content
• Date and time of submission

3. Purpose of Processing

We process your data to:

• Respond to your inquiry or collaboration request
• Maintain internal records of inquiries (CRM)

4. Legal Basis

Processing is necessary for the performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR). In other cases, the legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

5. Retention Period

We retain personal data for as long as necessary to handle your inquiry, up to 3 years from the last contact. If a contract is entered into, we retain data for its duration and 5 years after it ends (legal archiving obligations).

6. Data Recipients

We do not sell or share your data with third parties. We use the following processors:

• Supabase (Supabase Inc., USA) — database storage, EU Standard Contractual Clauses
• Resend (Resend Inc., USA) — email delivery, EU Standard Contractual Clauses
• Vercel (Vercel Inc., USA) — website hosting and cookieless traffic measurement (Vercel Analytics)
• Google (Google Ireland Ltd. / Google LLC) — Google Analytics 4, only if you consented to analytics cookies

Some of these providers process data outside the European Economic Area, in particular in the United States. Such transfers are safeguarded under the GDPR — by the European Commission adequacy decision (EU–US Data Privacy Framework) or by EU Standard Contractual Clauses.

7. Your Rights

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erasure (right to be forgotten)
• Restriction of processing
• Data portability
• Object to processing
• Withdraw your consent (analytics cookies) at any time, without affecting the lawfulness of processing carried out beforehand — via the “Cookie settings” link in the footer
• Lodge a complaint with the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz

We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

Submit requests by email to info@mellrose.cz. We will respond within 30 days.

8. Cookies and Analytics

For information about our use of cookies, see our Cookie Policy.

9. Policy Updates

We may update this policy unilaterally. We will inform you of significant changes via a notice on the website. The current version is always available on this page.