MP Creative Technology B.V.

Legal

Privacy Policy

Last updated: 8 September 2026

MP Creative Technology B.V. ("MPCT", "we", "us") operates the website at mpct.io (the "Site"). This policy explains what personal data we process when you visit it, why we process it, and what rights you have under the General Data Protection Regulation (GDPR, in Dutch the AVG).

This policy is pending review by our legal counsel and may change.

Who we are

The controller of your personal data is:

  • MP Creative Technology B.V.
  • Tussen de Bogen 6, 1013 JB Amsterdam, Netherlands
  • Chamber of Commerce (KvK): 42038900
  • VAT (BTW): NL869425894B01

For any question about this policy, or to exercise any of the rights described below, contact us at legal@mpct.io.

We have not appointed a Data Protection Officer, and are not required to under Article 37 GDPR: we are a small organisation, our core activities do not consist of large-scale monitoring, and we do not process special categories of personal data on a large scale.

What this policy covers

This policy covers the Site only — the public marketing pages at mpct.io. It does not cover:

  • Work we carry out for clients under a services agreement. That is governed by the agreement itself and, where we act as a processor, by a data processing agreement.
  • The project dashboard at dashboard.mpct.io, which is available to clients only and carries its own terms.

Information we collect

We collect very little. There is no account to create on this Site, no contact form, and no newsletter.

  • Analytics. We use Vercel Analytics to count page views and see which pages are read. It is aggregate and cookieless: it sets no identifying cookie, does not follow you across other websites, and does not build a profile of you.
  • Server logs. Our hosting provider records standard request logs — IP address, user agent, requested URL and timestamp — for security, abuse prevention and reliability.
  • What you send us. If you email us or book a call, we receive what you put in that message or booking: typically your name, email address, company, and what you would like to discuss.

We do not run advertising on the Site, we do not sell personal data, and we do not carry out automated decision-making or profiling.

Why we process it, and on what legal basis

  • Aggregate analytics — to understand which pages are useful and improve the Site. Legal basis: our legitimate interest in operating and improving our own website (Article 6(1)(f) GDPR).
  • Server logs — to keep the Site available and to detect and prevent abuse. Legal basis: our legitimate interest in the security of the Site (Article 6(1)(f) GDPR).
  • Your email or booking — to reply to you and, where it goes further, to take steps towards an engagement at your request. Legal basis: performance of a contract or steps taken prior to entering one (Article 6(1)(b) GDPR).

Where we ever rely on consent, we will ask for it first, and you may withdraw it at any time.

Who we share it with

We use a small number of service providers, each processing personal data on our behalf and under contract:

  • Vercel Inc. — hosting and analytics for the Site. Privacy policy
  • Cal.com, Inc. — scheduling, when you book a call with us. Privacy policy
  • Google Ireland Limited — Google Workspace, our email provider. When you write to us, your message is delivered to and stored in our mailbox. Privacy policy

We do not share your personal data with anyone else, except where we are legally required to.

Cookies

The Site sets no tracking cookies, and therefore shows no cookie banner. Vercel Analytics is cookieless by design.

If we ever add something that does set cookies — an embedded video, a chat widget, a different analytics product — we will update this section and ask for your consent before those cookies are set.

International transfers

Vercel and Cal.com are established in the United States. Where personal data is transferred outside the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses and, where the provider is certified, by the EU-US Data Privacy Framework.

How long we keep it

  • Aggregate analytics — held by Vercel in aggregate form. It contains nothing that identifies you.
  • Server logs — kept for a short operational period by our hosting provider, then deleted.
  • Email and booking correspondence — kept while we are in contact and for up to two years afterwards, so we can pick a conversation up where it left off. Longer where we need it to meet a legal obligation: Dutch law requires business records to be retained for seven years.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • rectify it where it is incorrect or incomplete;
  • erase it, the "right to be forgotten";
  • restrict how we process it;
  • object to processing based on our legitimate interests;
  • portability — to receive your data in a structured, commonly used, machine-readable format.

To exercise any of these, email legal@mpct.io. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch supervisory authority:

Changes to this policy

We update this page when our processing changes. The date shown at the top of the page is the date of the current version.