--- title: "Privacy Policy | Mr Cyber" url: https://mr-cyber.com/privacy language: en description: "Privacy policy of Mr Cyber: hosting in Germany, no cookies, cookie-free analytics, quote form." --- # Privacy policy Last updated: 4 November 2026 This is a translation for convenience; the German version is authoritative. ## 1\. Controller Moez Bouzayani (Mr Cyber) Heidi-Kabel-Platz 2, 20099 Hamburg, Germany Email: [contact@mr-cyber.com](mailto:contact@mr-cyber.com) · Phone: +49 40 50697306 ## 2\. Summary - This website sets **no cookies** and loads **no third-party services** when you open a page. - The website, form and analytics run on our server in **Germany**; every service provider we use is based in **Europe** (Germany and Switzerland). - Analytics are self-hosted, cookie-free and store **no IP addresses**. - Booking a call (meetergo) opens **only as a link in a new tab**; nothing from it is loaded on our website. ## 3\. Hosting and server log files The website runs on a server operated by Contabo GmbH, Aschauer Straße 32a, 81549 München, in Germany, under a data processing agreement (Art. 28 GDPR). When you visit the website, the web server processes technically necessary data: shortened IP address (the last octet is removed before storage), date and time, requested page, HTTP status, transferred bytes, referrer and browser identifier, to deliver the site securely and defend against attacks. Legal basis: Art. 6(1)(f) GDPR. Log files are deleted automatically after 7 days. ## 4\. Quote and contact form When you use the form, we process your details (name, email address, company, optional phone and message, your choices on service, scope and timeline) and technical context (language, the previous page on this website and any campaign parameters in the URL) to handle your request and prepare a quote. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (spam protection). To prevent spam, your browser solves a small computational puzzle (proof of work) when you submit; no data is sent to third parties for this. Your request is not written to disk on our server but forwarded immediately. Only if email delivery fails temporarily does the server keep it in memory for up to 15 minutes to retry. The request goes by email to our mailbox at Infomaniak (Infomaniak Network SA, Geneva, Switzerland; Switzerland has an EU adequacy decision; data processing agreement under Art. 28 GDPR). You receive an automatic confirmation email. We delete your request once it has been dealt with, at the latest six months after our last contact, unless a contract results and statutory retention periods (e.g. § 257 HGB, § 147 AO) require longer storage. ## 5\. Contact by email or phone If you contact us directly, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). Deletion as in section 4. ## 6\. Analytics with Umami (self-hosted, no cookies) To understand which content is used, we run the open-source software Umami on our own server in Germany. Umami sets no cookies, stores nothing on your device and stores no IP addresses. To count visits, Umami derives a hashed session ID from the IP address, browser identifier and a random value that changes daily; the IP address itself is not stored. It records aggregated data such as pages viewed, referrer domain, browser, operating system, device type, country and clicks on buttons (e.g. “See my fixed price”). Because that value changes daily, visitors are not recognised across days or websites. If your browser sends “Do Not Track”, nothing is recorded. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is improving the website. ## 7\. Booking via meetergo To book a call, we link to the booking page of meetergo (meetergo GmbH, Monheim am Rhein, Germany; servers in the EU). The page opens in a new tab; nothing from meetergo is loaded on our website. Only when you open the link does meetergo process your IP address and, if you book, the details you enter (e.g. name, email address, time) to manage the appointment. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract). We have a data processing agreement with meetergo under Art. 28 GDPR. meetergo's own privacy policy also applies. ## 8\. Fonts and external content All fonts are served from our own server. There is no connection to Google Fonts or other third parties. Links to external websites (e.g. sources) are only requested when you click them. ## 9\. Recipients and processors - Contabo GmbH (hosting, Germany) - Infomaniak (email, Switzerland) - meetergo (booking via external link, servers in the EU) ## 10\. Your rights You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future. Contact [contact@mr-cyber.com](mailto:contact@mr-cyber.com). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g. the authority responsible for us: the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Straße 22, 20459 Hamburg. ## 11\. Security The website is only available over encrypted connections (TLS). We apply technical and organisational measures under Art. 32 GDPR to protect your data.