Privacy Policy

The controller responsible for processing personal data on this website is:

Mohamed Morsy, trading as Mocorina
Holtestraße 105A, 44388 Dortmund, Germany
Phone: +49 176 14831572
Email: info@mocorina.de

Data protection officer: none has been appointed, as none is required. Our core activities do not consist of large-scale, regular and systematic monitoring of individuals or large-scale processing of special categories of data (Art. 37(1) GDPR), and fewer than 20 persons are regularly engaged in automated processing of personal data, with no processing requiring a data protection impact assessment (Section 38 BDSG).

This website processes personal data in two situations only:

• when you visit the website (technical delivery and security), and
• when you submit a project inquiry through the contact form.

We do not use analytics, tracking, advertising or social media tools, and the website sets no cookies of its own and stores nothing in your browser's local or session storage. All fonts are served from our own website; no third-party scripts, font services or embedded content (such as videos or maps) are loaded.

The website and its server-side functions are hosted via Lovable (Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden), with delivery through a cloud edge network. When you access a page, your browser transmits technical data such as IP address, date and time, requested page, referrer and browser / operating system information. This data is required to deliver the website and protect it against misuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website).

Server log data is retained by the hosting provider in accordance with its own retention practices and is not used by us to identify individual visitors.

When you submit an inquiry, we process:

• type of service and industry you select,
• your project description and, optionally, a budget range,
• your name, email address and, optionally, company name and phone number,
• the time of submission and your confirmation that you have read this policy.

The form also contains a hidden spam-protection field and a minimum completion time. To prevent abuse, we count how many inquiries were sent from the same email address in the last hour. No IP address is stored with your inquiry.

Purpose: answering your inquiry and preparing a possible project. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at your request) and Art. 6(1)(f) GDPR (spam and abuse prevention).

Inquiries are stored in our database, which is operated through Lovable Cloud (infrastructure provided by Supabase Inc.). Access is restricted to the website operator; the public can only submit, not read, inquiries.

Server location of the database: AWS data centre in Paris, France (EU region eu-west-3).
Inquiries that do not lead to a project are kept for six months after our last meaningful interaction with you and then deleted, unless a legal obligation or documented reason requires longer retention. You can request earlier deletion at any time. Data that becomes part of a contract or invoice is kept for the statutory retention periods under German commercial and tax law (Section 257 HGB, Section 147 AO).

After you submit an inquiry, two emails are sent through Resend (Resend, Inc., USA): a notification with your inquiry to info@mocorina.de, and a confirmation to the email address you entered, which repeats your inquiry details. Resend processes your name, email address and the inquiry content for this purpose only.

Legal basis: Art. 6(1)(b) GDPR. More information: resend.com/legal/privacy-policy.

A data processing agreement under Art. 28 GDPR, including the EU Standard Contractual Clauses, is in force with Resend for this account.

• Lovable (hosting) is based in Sweden, within the EU. Lovable uses third-party infrastructure providers, some of which may be located outside the EEA; information on these subprocessors is published by Lovable in its trust centre.
• Database (Lovable Cloud, infrastructure by Supabase Pte. Ltd., Singapore): inquiries are stored in the EU (Paris, France). Access from outside the EEA by the infrastructure provider cannot be ruled out; details are set out in Supabase's data processing terms.
• Resend (Plus Five Five, Inc., USA) is certified under the EU–U.S. Data Privacy Framework; transfers are based on the European Commission's adequacy decision (Art. 45 GDPR), and its data processing agreement additionally includes the EU Standard Contractual Clauses.

The website is served exclusively over encrypted HTTPS connections. Form data is validated and sanitised on the server, API keys are kept server-side, and database access is restricted by access policies.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence or of our registered office. Competent authority for the operator: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Düsseldorf.

To exercise your rights, contact info@mocorina.de.

We update this policy when the website or its services change. The current version is always available on this page.