This notice explains how Media Strategy Lab ("we", "us") processes personal data when you visit this website or contact us, in line with the EU General Data Protection Regulation (GDPR).
1. Controller
Media Strategy Lab, [Street, Postal code, City, Country].
Email: privacy@mediastrategylab.com
2. Data we process
- Server log data: IP address, date and time of request, browser and operating system, referrer URL. Legal basis: Art. 6(1)(f) GDPR (secure, stable operation).
- Contact form: name, email address, company/channel, service interest, budget range and your message. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(a) GDPR where you give consent.
- Email correspondence: the content you send us and your contact details. Legal basis: Art. 6(1)(b) and (f) GDPR.
Providing data is voluntary, but without your name, email and message we cannot answer an enquiry.
3. Cookies and local storage
We use only strictly necessary cookies and browser local storage required to deliver the site and remember your cookie choice. No advertising or cross-site tracking cookies are set without your prior consent (Art. 6(1)(a) GDPR, § 25 TDDDG). You can withdraw consent at any time by clearing your browser storage for this site.
4. Processors and recipients
We use carefully selected service providers bound by data processing agreements under Art. 28 GDPR: our website hosting provider and our database/backend provider (used to store contact form submissions), plus our email provider. Where data is transferred outside the EEA, transfers are protected by EU Standard Contractual Clauses. We do not sell personal data.
5. Retention
- Server logs: deleted or anonymised after a maximum of 30 days.
- Contact enquiries: kept for up to 24 months after the last contact, unless statutory commercial or tax retention periods (up to 10 years) apply.
6. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure / "right to be forgotten" (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw consent at any time with future effect (Art. 7(3))
- lodge a complaint with a supervisory authority (Art. 77)
To exercise any right, email privacy@mediastrategylab.com. We respond within one month.
7. Security
This site is served over TLS/HTTPS. Contact submissions are stored in an access-restricted database with row-level security, so submitted data is not publicly readable.
8. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
9. Changes
We may update this notice when our services or the legal environment change. The current version always applies.