Privacy policy
How Mia17 processes personal data under the GDPR: controller, purposes, legal bases, recipients, retention and your rights.
Last updated: October 2026
Who we are
This website is operated by Mia17 (“Mia17”, “we”), which is responsible for the personal data described here. For anything related to privacy, write to info@mia17.com.
What data we process
Browsing: this site uses no analytics, advertising cookies or tracking pixels. Our hosting provider processes technical data (IP address, date and time, page requested and browser) in server logs, which is needed to deliver the site and keep it secure. Contact: when you send the form, your name, company, email address, topic and message go to our own contact endpoint, which delivers them by email to the Mia17 mailbox for that topic through Resend (resend.com) as the processor. This website does not store them. The form includes an optional, separate checkbox for news: if you tick it, that choice travels with the message and you can withdraw it at any time. Resend may process them outside the EU under its own safeguards. The form is protected by Google reCAPTCHA (“I'm not a robot”), which loads as a necessary security check and may share your IP address and browser signals with Google under its own policies. If automatic sending fails, the form offers to send the same message from your own mail app. When you write to info@, marketing@ or support@mia17.com we process your name, email address, company and whatever you include in your message.
Why, and on what legal basis
To answer your enquiry and prepare a proposal (steps prior to a contract, Art. 6(1)(b) GDPR); to manage our relationship with clients (performance of a contract, Art. 6(1)(b)); to keep the site secure (legitimate interest, Art. 6(1)(f)); and to send you news only if you ask for it (consent, Art. 6(1)(a)), which you can withdraw at any time.
How long we keep it
Enquiries: for as long as needed to answer them and, if no project follows, up to 12 months. Client data: for the duration of the relationship and then for the periods required by tax and commercial law. Server logs: for the short period set by the hosting provider for security.
Who receives it
We do not sell or rent your data. It is only handled by providers that work on our behalf (hosting and email) under data processing agreements, and by public authorities when the law requires it. If a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision or on the European Commission’s Standard Contractual Clauses.
Processors we rely on
Your data is only handled by those working for us (hosting, form delivery and anti-bot), always on our instructions and never for their own purposes.
No automated decisions
We make no decision with legal or similarly significant effects about you by automated means. Every reply, every report and every proposal is written and reviewed by a person.
Data breaches
If a breach is likely to put your rights and freedoms at risk, we will notify the competent supervisory authority within 72 hours and inform the people affected without undue delay, as the GDPR requires.
Your rights
You can ask to access, rectify or erase your data, to restrict or object to its processing, to receive it in a portable format and to withdraw your consent. Write to info@mia17.com with “Privacy” in the subject line; we will reply within one month. You can also complain to your data protection authority.
Security and adults
We apply technical and organisational measures proportionate to the risk. This site is intended for companies and professionals over 18.
Changes
If we change how we handle data we will update this policy and its date. If we ever add analytics or new forms, they will be described here before they go live.
Start the conversation info@mia17.com marketing@mia17.com support@mia17.com