Privacy Policy
className="text-sm text-white/60 hover:text-white transition-colors inline-flex items-center gap-2 mb-8"1. Data Controller
The data controller is Laolerot s.r.o., operating the Mellrose brand, registered in the Czech Republic. Contact: info@mellrose.cz
2. Data We Collect
We only process data you voluntarily provide through the contact form:
- Full name
- Email address
- Message content
- Date and time of submission
3. Purpose of Processing
We process your data to:
- Respond to your inquiry or collaboration request
- Maintain internal records of inquiries (CRM)
4. Legal Basis
Processing is necessary for the performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR). In other cases, the legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
5. Retention Period
We retain personal data for as long as necessary to handle your inquiry, up to 3 years from the last contact. If a contract is entered into, we retain data for its duration and 5 years after it ends (legal archiving obligations).
6. Data Recipients
We do not sell or share your data with third parties. We use the following processors:
- Supabase (Supabase Inc., USA) — database storage, EU Standard Contractual Clauses
- Resend (Resend Inc., USA) — email delivery, EU Standard Contractual Clauses
- Vercel (Vercel Inc., USA) — website hosting, EU Standard Contractual Clauses
7. Your Rights
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erasure (right to be forgotten)
- Restriction of processing
- Data portability
- Object to processing
- Lodge a complaint with the Czech data protection authority (uoou.cz)
Submit requests by email to info@mellrose.cz. We will respond within 30 days.
8. Cookies and Analytics
For information about our use of cookies, see our Cookie Policy.
9. Policy Updates
We may update this policy unilaterally. We will inform you of significant changes via a notice on the website. The current version is always available on this page.