Privacy Policy

Last updated: September 2025

1. Data Controller

The data controller responsible for your personal data is:

Melwy
5 Parv. Alan Turing
75013 Paris
France

Email: info@melwy.com

2. What Personal Data We Collect

We only collect personal data that you choose to share with us, such as:

• Information provided via contact forms (name, email, message).
• Information provided when subscribing to our newsletter (email address and consent).

3. Cookies and Tracking

We do not use cookies, analytics, or tracking technologies on this website.

4. How We Use Your Data

We use your data solely for the following purposes:

• To respond to inquiries sent through our contact forms.
• To send newsletters, but only if you have explicitly subscribed.

We do not sell, rent, or share your data with third parties for marketing purposes.

5. Data Processing and Sub-processors

Email Services

We use Amazon Web Services Simple Email Service (AWS SES) to deliver emails, including responses to contact form inquiries and newsletter communications. Email processing occurs exclusively within the AWS Stockholm region (eu-north-1) in Sweden, ensuring all personal data remains within the European Economic Area.

Sub-processor Details

• Service Provider: Amazon Web Services EMEA SARL
• Service: Simple Email Service (SES)
• Processing Location: Stockholm, Sweden (eu-north-1 region)
• Data Processing Agreement: AWS Data Processing Addendum (DPA) with Standard Contractual Clauses
• Purpose: Email delivery and communication services

AWS acts as a data processor under our instructions and is bound by comprehensive data protection obligations, including encryption in transit and at rest, access controls, and audit logging.

6. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: for newsletters and any optional communications.
• Legitimate interest: to respond to your inquiries and provide requested services.

7. Data Retention

We keep your personal data only as long as necessary to fulfill the purposes for which it was collected:

• Contact form inquiries: Retained for up to 3 years to maintain communication history and resolve follow-up questions.
• Newsletter subscriptions: Retained until you unsubscribe or withdraw consent.
• Email delivery logs: Retained by AWS SES for up to 14 days for delivery monitoring and troubleshooting purposes.

Data may be retained longer if required by applicable law.

8. International Data Transfers

All personal data processing occurs within the European Economic Area. Our email service provider (AWS) processes data exclusively in the Stockholm region (Sweden), eliminating the need for international data transfers outside the EEA for primary processing activities.

9. Your Rights

You have the right to:

• Access your personal data.
• Request correction or deletion of your data.
• Withdraw your consent at any time.
• Restrict or object to processing under certain conditions.
• Data portability (receive your data in a structured, machine-readable format).
• Lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) in France or your local supervisory authority.

To exercise these rights, please contact us using the information provided below. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Incident response procedures compliant with GDPR breach notification requirements

11. Contact

For any questions, data requests, or privacy concerns, please contact us:

Melwy
5 Parv. Alan Turing
75013 Paris, France
Email: info@melwy.com

For urgent data protection matters, please mark your email with “GDPR Request” in the subject line.