Privacy Policy
This policy explains what personal data mworkshop.app collects, why, and what you can do about it. Mworkshop is a pre-launch website: there is no product, no account and nothing to log in to. The only personal data we collect from you is what you choose to send us through the waitlist form.
1. Who is responsible
The controller of your personal data is LIMITLESS SOLUTIONS S.R.L., Bd. Dimitrie Pompeiu 6, Bloc 9, Scara A, Etaj 15, Ap. 87, Bucharest, Romania.
Trade Register J40/4423/2019 · CUI 40902525 · EU VAT RO41214494.
For anything in this policy, including any request about your data, write to [email protected].
2. What this policy covers
This policy covers the website at mworkshop.app, in all its language versions. It does not cover the Mworkshop product, which does not exist yet — when it does, it will have its own policy and, where relevant, a data processing agreement.
It also does not cover movcar.app, which is operated by the same company under a separate policy.
3. What we collect
Waitlist form
If you submit the early-access form, we receive the email address you enter and, if you fill it in, the free-text description of your workshop. Both go to our inbox. Nothing else in the form is required, and we do not ask for a name, phone number or company details.
Server logs
Our web server records a line for each request: your IP address, the time, the page requested, the referring page and your browser's user-agent string. These logs exist to keep the site running and to investigate abuse. They are rotated daily and deleted after 14 days.
Analytics and advertising
Only if you agree. Nothing that measures you runs before you make a choice in the cookie banner — no analytics or advertising script is even loaded until then. If you accept, Google Analytics 4 and Google Ads conversion measurement record how the site was found and used. See the Cookie Policy for the detail.
Your cookie choice
Your answer to the cookie banner is stored in your own browser under mworkshop_consent_v1. It never leaves your device and we cannot read it.
4. Why we process it, and on what basis
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Waitlist email and workshop description | To contact you about Mworkshop as it approaches launch, and to understand what workshops need | Consent — Art. 6(1)(a). You gave it by submitting the form and can withdraw it at any time. |
| Server logs (IP, user agent, request) | Keeping the site available, secure and free of abuse | Legitimate interest — Art. 6(1)(f), in operating a working website |
| Analytics data | Understanding how the site is found and used so we can improve it | Consent — Art. 6(1)(a) |
| Advertising / conversion data | Measuring whether our advertising reaches the right workshops | Consent — Art. 6(1)(a) |
5. Who else sees it
We do not sell your data and we do not share it for anyone else's marketing. It reaches only the service providers we need to run the site:
| Provider | What it does | Where |
|---|---|---|
| FormSubmit.co | Delivers waitlist submissions to our inbox | United States |
| Microsoft 365 | The mailbox that receives them | EU |
| Hetzner Online GmbH | Hosts the website and its logs | Germany |
| Cloudflare, Inc. | DNS, CDN and protection in front of the site | Global network |
| Google Ireland Ltd. | Analytics and advertising measurement — only with your consent | EU / United States |
A note on FormSubmit
We want to be straightforward about this one. FormSubmit.co is a free service based in the United States, and we do not hold a data processing agreement with it. Your waitlist submission — an email address and whatever you chose to write — passes through it on the way to our inbox. We consider this proportionate for business contact details at this stage, and we intend to replace it with an EU-hosted alternative before Mworkshop launches. If you would rather not use it, email us directly at [email protected] instead.
6. Transfers outside the EU
FormSubmit.co processes data in the United States, as described above. Google may process analytics and advertising data in the United States under the EU–US Data Privacy Framework and standard contractual clauses. Everything else stays within the EU or on Cloudflare's global network.
7. How long we keep it
- Waitlist submissions: until Mworkshop launches and we have contacted you, or until you ask us to delete them — whichever comes first. If the product does not launch, we delete the list.
- Server logs: 14 days.
- Analytics data: according to the retention set in Google Analytics, at most 14 months.
- Your cookie choice: stays in your browser until you clear it.
8. How it is protected
The site is served only over HTTPS, with a valid certificate and a strict transport chain between our origin server and Cloudflare. Access to the server and to the inbox is limited to people who need it. The site sets no tracking of any kind unless you ask for it.
9. Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it to another provider. You can object to processing based on legitimate interest, and you can withdraw consent at any time — including your cookie choice, through the Cookie settings link in the site footer.
To exercise any of these, write to [email protected]. We will respond within one month. There is no charge.
If you think we have handled your data badly, you can complain to the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or to the authority where you live.
10. Automated decisions
There are none. We do not profile you and nothing on this site makes an automated decision about you.
11. Changes
If this policy changes we will publish the new version here with a new version number and date. The version in force is the one shown at the top of this page.
12. Contact
LIMITLESS SOLUTIONS S.R.L., Bd. Dimitrie Pompeiu 6, Bloc 9, Scara A, Etaj 15, Ap. 87, Bucharest, Romania. Email [email protected].