Privacy Policy

1. Who is responsible for your data?

The controller responsible for personal data processed through the M-Kraft website and related business enquiries is:

2. What data do we process?

Depending on how you interact with us, we may process:

• your name, company name, job-related contact details and email address;
• information you include in an enquiry, such as printer model, substrate, application or consumable requirements;
• correspondence and follow-up communications;
• basic technical and security data generated when the website is accessed, such as IP address, browser information, timestamps, requested pages and diagnostic logs.

When you submit the contact form, the information is transmitted securely to our email-delivery provider, Resend, and delivered to the M-Kraft team. The website does not maintain a separate customer database of form submissions, although the resulting email and delivery records may be retained as described below.

3. Why and on what legal basis do we process data?

Where we rely on legitimate interests, we assess those interests against your rights and reasonable expectations. We do not use information submitted through this website for automated decision-making or profiling.

4. Is providing data mandatory?

Providing personal data is voluntary. However, we need sufficient contact and application information to answer an enquiry or prepare a quotation. Without it, we may be unable to respond or provide the requested service.

5. Who may receive your data?

Access is limited to authorised personnel and, where necessary, professional advisers and service providers supporting website hosting, security, business communications, email and IT operations, including Resend as our contact-form email delivery provider. Providers process data only for the relevant service and under appropriate contractual and security safeguards. We may also disclose data to public authorities when required by law.

6. International transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.

7. How long do we keep data?

General enquiries are normally retained for up to 24 months after the last meaningful communication. Information connected with a contract, transaction, accounting record or legal claim may be kept for the period required by Romanian and EU law or until the relevant limitation period expires. Technical logs are retained only as long as reasonably necessary for security and diagnostics.

8. Cookies and similar technologies

M-Kraft does not currently use advertising or behavioural analytics cookies. The hosting and access platform may use strictly necessary cookies or similar technologies for security, authentication, load balancing and basic operation. These cannot be disabled through a consent tool because they are necessary to provide the website.

When you dismiss the cookie notice, the website stores a small preference in your browser's local storage so the notice is not shown repeatedly. This preference contains no contact information or advertising identifier and is used only to remember your choice.

9. Your data protection rights

Subject to the conditions in the GDPR, you may request:

• access to and a copy of your personal data;
• correction of inaccurate or incomplete data;
• erasure or restriction of processing;
• data portability where applicable;
• to object to processing based on legitimate interests.

Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. To exercise a right, email info@m-kraft.eu. We may ask for information needed to verify your identity.

10. Complaints

You may lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania, or through dataprotection.ro. You may also contact the supervisory authority in the EU/EEA country where you live or work.

11. Security and policy updates

We apply reasonable technical and organisational measures designed to protect personal data. No online system is completely risk-free, so please avoid including unnecessary or sensitive personal data in an enquiry. We may update this policy to reflect legal, technical or operational changes. The current version and effective date will always appear on this page.