Privacy policy

This is a translation provided for convenience. The German version is the legally binding one. Read the German privacy policy.

1. Data protection at a glance

We take the protection of your personal data seriously. This website is deliberately built to minimize data collection: it uses no tracking cookies and no advertising or analytics services that process personal data, and its fonts are self-hosted (no Google Fonts hotlinking). Personal data is only processed if you write to us via the contact form, or as technically necessary to operate the site.

2. Data controller

The controller responsible for data processing on this website is:

MDMA Solutions GmbH
c/o Cooltra Motos Deutschland GmbH
Mollstr. 1
10178 Berlin
Germany
Email: info@mdmasolutions.de

3. Hosting (Cloudflare Pages)

This website is hosted with Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; represented in the EU by Cloudflare Germany GmbH). Cloudflare provides hosting, content delivery network (CDN), and security/DDoS protection. In doing so, connection data (e.g., IP address, date and time of the request, file requested, amount of data transferred, browser and operating system information) is processed to deliver the site securely and reliably.

The legal basis is GDPR Art. 6(1)(f) (legitimate interest in a secure, efficient provision of the service). We have a data processing agreement with Cloudflare; the transfer to the USA is safeguarded by the EU Standard Contractual Clauses.

4. What data we process

a) Server log files

When you access the site, the connection data listed above is processed automatically. This is technically necessary to display the website and to ensure its stability and security (GDPR Art. 6(1)(f)).

b) Contact form

If you write to us via the contact form, we process the data you provide — name, email address, optionally your company, and your message — solely to process and respond to your inquiry. Submission is encrypted (HTTPS).

The legal basis is GDPR Art. 6(1)(b) (pre-contractual measures) or GDPR Art. 6(1)(f) (legitimate interest in communication). The data is deleted once your inquiry has been conclusively handled and no statutory retention obligations apply.

5. Spam protection: Cloudflare Turnstile

To protect the contact form from abusive automated submissions (bots), we use Cloudflare Turnstile. Turnstile checks technical characteristics of the browser (e.g., device and connection information) to determine whether an entry is human, and does so without classic, personally identifying tracking cookies. The provider is Cloudflare (see section 3). The legal basis is GDPR Art. 6(1)(f) (legitimate interest in preventing spam and abuse).

6. Email delivery for the contact form: Brevo

To deliver messages submitted via the contact form, we use the email service Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin). In doing so, the data you provide is transmitted to Brevo in order to deliver the message to us by email. We have a data processing agreement with Brevo. The legal basis is GDPR Art. 6(1)(f) (legitimate interest in reliable delivery).

7. Embedded content and fonts

Fonts and images are fully self-hosted — accessing the site does not create a connection to any external font or media provider (e.g., Google Fonts or third-party CDNs).

8. Web analytics (if enabled)

If enabled, we use Cloudflare Web Analytics — a cookieless, privacy-friendly traffic measurement tool that operates without cross-site tracking and without storing personal profiles. The legal basis is GDPR Art. 6(1)(f).

9. Cookies

This website does not use tracking or marketing cookies. Only technically necessary tokens (e.g., as part of spam protection) may be used, which are required for secure operation.

10. Your rights

Under the GDPR, you have the right at any time to:

• Access to the personal data stored about you (GDPR Art. 15),
• Rectification of inaccurate data (GDPR Art. 16),
• Erasure (GDPR Art. 17),
• Restriction of processing (GDPR Art. 18),
• Data portability (GDPR Art. 20),
• Objection to processing (GDPR Art. 21).

To exercise your rights, an informal message to info@mdmasolutions.de is sufficient.

11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority — for example, the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), which is responsible for our registered office.

Last updated: June 2026

← Back to the homepage