We are committed to protecting your personal data and respecting your privacy. This notice explains what we collect, why we collect it, how we use and share it, how long we keep it, and the rights you
have under the EU GDPR.
Scope
This policy covers personal data we process when you visit our websites, contact us, receive marketing from us, or use our services (including branding, social media, online advertising and related
consulting).
The data we collect
We collect and process the following categories of personal data:
- Identification and contact: name, job title, employer, email address, phone number, postal address.
- Marketing and communications: subscription choices, campaign engagement (opens, clicks), event registrations.
- Website and device: IP address, device and browser type, settings, pages visited, referrer, time on page, cookies and similar technologies. See our Cookie Policy for details and controls.
- Transactional and services data: project briefs, content and assets you supply, approvals, invoicing and payment records.
- Sensitive/special category data: we do not seek to collect this. If it is provided inadvertently (e.g., in free text uploads), we will restrict and delete it where feasible.
Sources of data
- Directly from you (forms, emails, meetings, contracts, support).
- Automatically via our website and tools (cookies, pixels, analytics).
- From your organisation or colleagues.
- From third parties such as event partners, referral partners or public sources (e.g., LinkedIn, Companies House), where lawful.
Purposes and legal bases
We use your personal data for:
- Providing and administering our services, responding to enquiries, and performing our contract with you or your organisation.
- Customer support and service improvement.
- Marketing communications, newsletters, event invitations and thought leadership.
- Website operation, security, fraud prevention, diagnostics and analytics.
- Legal and regulatory compliance (tax records, accounting, anti fraud checks), and to establish or defend legal claims.
Where we rely on consent, you can withdraw it at any time via the link in our emails, your cookie settings, or by contacting us. Withdrawing consent does not affect processing carried out before
withdrawal.
Automated decision making and profiling
We may use analytics and audience segmentation to tailor content and measure performance. We do not make decisions with legal or similarly significant effects on individuals solely by automated means. If
that changes, we will provide meaningful information about the logic involved and your rights to obtain human review, express your point of view and contest the decision.
Sharing your data
We share personal data only as needed for the purposes above:
- Service providers acting as processors (hosting, CRM, email, analytics, conferencing, project management, billing). They are bound by contracts and process data only on our instructions.
- Professional advisers (legal, audit, accounting) and insurers under confidentiality.
- Event and marketing partners where you register or consent to sharing.
- Authorities and regulators where required by law or to protect our rights or users.
International transfers
Your data may be processed outside the EEA. Where we transfer personal data internationally, we use appropriate safeguards such as:
- Adequacy regulations/decisions, or
-
Standard Contractual Clauses (EU), plus supplementary measures where needed. You can request a copy of the relevant transfer mechanism using the contact details above.
Data retention
We keep personal data only as long as necessary for the purpose collected:
- Enquiries and sales prospects: typically up to 24 months from last meaningful interaction, or sooner if you opt out.
- Contract and account records: duration of the contract plus 6–7 years for tax and accounting requirements.
- Marketing subscriptions: until you unsubscribe or your address becomes inactive, then we retain minimal suppression data to honour your opt out.
- Website analytics: see cookie lifetimes in our Cookie Policy; aggregated reports may be retained longer without identifying you. We securely delete or anonymise data when it is no longer needed.
Security
We apply technical and organisational measures to protect personal data, including access controls, encryption in transit and at rest where appropriate, secure development and change control, logging and
monitoring, vulnerability management, staff training and vendor due diligence. No system is perfectly secure; we maintain incident response procedures and will notify regulators and, where required,
affected individuals of personal data breaches in accordance with law.
Your rights
Subject to conditions and exemptions in law, you have the right to:
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Erase your data (right to be forgotten) where grounds apply.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests, and to B2B direct marketing at any time (we will stop marketing if you object).
- Data portability: receive certain data in a structured, commonly used, machine readable format and transmit it to another controller.
- Withdraw consent where processing is based on consent.
- Not to be subject to a decision based solely on automated processing that has legal or similarly significant effects.
How to exercise your rights
Email Mad Marketing Online S.R.O with your request and sufficient information to verify your identity.
We will respond without undue delay and within one month of receipt (extendable by two further months for complex requests).
Marketing preferences
You can control marketing by:
- Using the unsubscribe link in any marketing email.
- Contacting us at contact@madmarketingonline.com. We may still send service or transactional messages where necessary.
Complaints
If you have concerns about our handling of your personal data, please contact us first—we will do our best to resolve them. You also have the right to lodge a complaint with your supervisory authority.
Third party links
Our site may link to third party websites or services. Their privacy practices are governed by their own policies; we are not responsible for them. Review those policies before providing personal data.
Changes to this policy
We may update this notice from time to time. We will post the updated version and, where appropriate, notify you of material changes. Please review this page periodically.
