Privacy

Privacy policy

Effective 3 August 2026 · Applies to the Mondzia website and waitlist. The mobile app has its own policy, shown inside the app.

Who we are

Makeup Mondo Sovellus Oy, a company registered in Finland and trading as Mondzia, is the controller for personal data processed on this website. The address and register details are in the legal notice. For anything about your data, write to mondzia@outlook.de.

What we collect, and why

• Waitlist email address. If you join the waitlist we store the email address you enter, and the moment you entered it. Nothing else — no name, no IP address, no browser fingerprint. We use it for two mails and no more: one straight away confirming you are on the list, and one when Mondzia opens. Legal basis: your consent (Art. 6(1)(a) GDPR), given by submitting the form. Every one of those mails can be answered with a reply to come off the list, which takes effect without conditions and without our asking why (Art. 7(3)). We do not use the address for any other marketing, and we do not share or sell it. Giving it is entirely voluntary; nothing on this site is withheld if you don’t.
• Nothing else. This site sets no cookies, stores nothing in your browser, runs no analytics or tracking, embeds no third-party content, and loads every asset — including fonts and the film — from its own origin. There is no consent banner because there is nothing to consent to.
• Server logs. Our hosting providers process IP addresses transiently as part of serving the site and answering the waitlist request (Art. 6(1)(f) GDPR — technical delivery and abuse prevention). We do not build profiles from them and we do not read them for any other purpose.

How long we keep it

Waitlist addresses are kept until we have sent the launch notification, and are deleted no later than 30 days after launch — or immediately if you withdraw beforehand.

Where the data lives, and who else touches it

Three processors, each under a data processing agreement (Art. 28 GDPR):

• Vercel serves this website.
• Render runs the service and the database that holds the waitlist.
• Resend delivers the two mails described above. It receives your address in order to send them and for no other purpose; delivery is routed through their European region.

All three are United States companies and all three are certified under the EU-US Data Privacy Framework, which is the adequacy decision that makes the transfer lawful (Art. 45 GDPR). Nobody else receives your address. There is no advertising network, no analytics provider, and no marketing platform building a profile from it — Resend is a delivery service and is given nothing beyond the address and the message.

Automated decisions

None. Nothing on this site profiles you or decides anything about you automatically (Art. 22 GDPR).

Your rights

Under the GDPR you can at any time request access to your data (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20), and you can withdraw your consent with effect for the future (Art. 7(3)). Email mondzia@outlook.de and we will remove you from the waitlist without conditions and without asking why.

You also have the right to lodge a complaint with a data-protection supervisory authority (Art. 77). Ours is the Finnish Data Protection Ombudsman — Tietosuojavaltuutetun toimisto, PO Box 800, FI-00531 Helsinki, tietosuoja@om.fi, tietosuoja.fi — but you may complain to the authority where you live or work instead, anywhere in the EU or EEA.