Privacy Policy
This notice describes the actual data flows on metatron.marketing: EU-hosted website, no analytics or advertising tracking, local fonts, purpose-limited inquiry processing and defined deletion periods.
1 · Controller and contact
The controller is Metatron Marketing Ltd., Company No. 16220417, Monomark House, 27 Old Gloucester Street, London, WC1N 3AX, England. Operational address: Vale da Pinta, Estombar, 8400-066, Portugal. Director: Ingmar Mier. Privacy requests: consulting@metatron.marketing.
2 · Applicable data-protection regimes and UK transfers
Depending on the affected person and processing context, the EU GDPR and UK GDPR apply. The European Commission renewed the UK's adequacy status in December 2025; transfers from the EEA to the UK can therefore rely on Art. 45 GDPR. Transfers to any other third country take place only where an adequacy decision or appropriate safeguards apply.
3 · Hosting and security logs
The website runs on an RS8000 virtual server provided by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. For delivery and security, the web server records IP address, date and time, requested URL, HTTP status, transferred volume, referrer and browser identifier. The records are not used for analytics or advertising and are rotated and deleted after no more than 15 days, unless a security incident requires evidence to be retained for the duration of its investigation.
The legal basis is Art. 6(1)(f) GDPR: reliable delivery, attack detection, troubleshooting and preservation of evidence. Netcup acts as infrastructure processor.
4 · Local fonts and browser storage
Fonts and media are served locally. The site does not connect to Google Fonts. The browser's local storage contains only the selected colour scheme and language. These values remain on the device, are not used for tracking and can be removed through browser settings.
5 · Business inquiries and operator-brief requests
The request forms process organisation or name, business email address, selected subject and the voluntarily entered message. A server-generated reference is returned after technical acceptance. Neither an order nor a contract is created by submitting a form. Please do not submit credentials, trade secrets, health data or other special-category or sensitive personal data.
Purposes are receipt, routing, answering and documenting the B2B inquiry. The legal basis is Art. 6(1)(b) GDPR for requested pre-contractual steps and Art. 6(1)(f) GDPR for efficient, secure handling and evidentiary documentation. Routing is automated; no solely automated decision producing legal or similarly significant effects under Art. 22 GDPR takes place.
Brevo is used only for the transactional confirmation to the business email address submitted with the inquiry and the corresponding notification to the Metatron Marketing mailbox; the request does not create a marketing-list subscription. Hostinger International Ltd., Cyprus, supplies the business mailbox infrastructure. Inactive inquiry and delivery records in the intake system are automatically deleted after no more than 180 days. If a contract follows, necessary correspondence may be retained for applicable statutory retention and limitation periods.
5a · Dialogue window
On our pages an AI system answers your questions in a dialogue window. We store your question, our answer, the address of the page and a random identifier for this visit. The identifier stays only in your browser's sessionStorage until you close the window; we set no cookie for it. The purpose is to answer your question and to improve the answers. The legal basis is Art. 6(1)(f) GDPR. The data is kept on our own server and deleted after 90 days. Please do not write contact details or sensitive data into the window.
If you pass a question on to a person, we also store your email address, and only with your consent (Art. 6(1)(a) GDPR). Your question and your address then go to our own mailbox. You can withdraw your consent at any time by email; we then delete the address.
5b · First contact with companies
We write to companies when we have measured something on their public website that may matter to them. For this we process: the name, legal form and address of the company, the address of the website, the result of the measurement and the business email address of a person whom the company names on its public website with name and role. That page is the source; we name it in every message. If we write to a person, we also process their name and role as the company or the person states them publicly.
The email address always comes from the company's website; company name, legal form and address also come from public registers. We do not buy address lists.
The purpose is to tell the company about the measurement: at most five messages within three weeks. After a reply, an objection or an undeliverable message we send nothing further. The legal basis is our legitimate interest in initiating business relationships between companies (Art. 6(1)(f) GDPR and UK GDPR). We send emails in this way only to incorporated companies and comparable limited-liability companies in the United Kingdom and the United States, not to recipients in Germany, Austria or Switzerland.
You can object at any time: use the unsubscribe link in the message, reply “no” or write to consulting@metatron.marketing. We then block the address permanently on the same working day. For that purpose we keep only the blocked address. Without a reply we delete the contact data after 90 days. Recipients are the service providers named in section 8. If we write to you on LinkedIn, LinkedIn Ireland Unlimited Company processes the message under its own privacy policy. For the delivery of emails and LinkedIn messages we use the tool La Growth Machine (B3 SAS, France). No automated decision with legal effect takes place. Before every message we measure the website again on the same day; if the measurement does not confirm the result, we do not send.
6 · Public Intelligence publication disabled
Metatron Intelligence is currently an internal research system. No editorial articles, archive, feed or public query interface are made available through this website. Public publication remains technically blocked until the applicable media-law responsibility has been conclusively established.
7 · No cookies, analytics or advertising on this website; no marketing lists from forms
For first contact with companies, section 5b applies.
This website sets no cookies, uses no analytics service, advertising pixels, cross-site tracking, profiling or advertising networks. Form submissions do not subscribe the sender to a newsletter. The local preferences described above do not leave the device.
8 · Recipients and processor governance
Personal data is disclosed only to personnel and service providers that need it for the stated purpose: netcup for server infrastructure, Brevo for transactional delivery, Hostinger for the business mailbox and La Growth Machine for the delivery of emails and LinkedIn messages in first contact. Processor relationships must be covered by Art. 28 GDPR terms, appropriate technical and organisational measures and, where relevant, valid transfer safeguards. Data is not sold.
9 · Your rights and right to object
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and the right to lodge a complaint. You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). Send requests to the contact address above.
10 · Supervisory authorities
You may complain to the authority at your habitual residence, place of work or the alleged infringement. Relevant contact points include Portugal's Comissão Nacional de Proteção de Dados (CNPD) and, for UK GDPR matters, the Information Commissioner's Office (ICO).
11 · Security
Transmission is encrypted with TLS. Inquiry data is kept outside the public web root, with access restricted to the dedicated service identity. The public endpoint enforces same-origin requests, body-size limits and strict rules against response caching. Security measures are reviewed according to risk.
12 · Updates
This version reflects the production data flows verified on 18 July 2026. It will be updated when processing, providers or the legal position changes. Last updated: 9 October 2026.