Privacy Policy
This policy describes which personal data is processed when you visit this portal and when you use its forms.
Last updated: August 2026
Controller
MK Worldwide LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110
United States of America
The essentials first
This portal uses no analytics or tracking services and embeds no third-party content. There is a cookie only after signing in to the account area or the operator dashboard — technically necessary, without tracking. Personal data only arises when you use one of the forms — and in the technically necessary server logs of the hosting provider.
Hosting
The portal is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you open a page, Vercel processes the data your browser transmits — in particular IP address, time, requested page and user agent — in server logs, insofar as this is necessary to deliver and secure the service. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Enquiry and correction forms
Through the forms (“request a quote” and “claim, correct or remove a listing”) we process the details you enter: name, email address or phone number, locality where given, and your message. The purpose is to handle your enquiry or report (Art. 6(1)(b) GDPR).
To prevent abuse we additionally store a salted hash of your IP address and a truncated browser identifier. The IP address itself is not stored and cannot be reconstructed from the hash (Art. 6(1)(f) GDPR).
Form data is stored in a database operated by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). The data is kept for as long as processing the request requires.
Reviews
When you review a business, we process your star rating, your text, your name, your email address and — as with the other forms — a hash of your IP address. The legal basis is your consent (Art. 6(1)(a) GDPR); you may withdraw it at any time with effect for the future, and we will delete the review.
After the check, only the star rating, the text, your first name with the initial of your surname and the month and year are published. The email address is never shown; it is used for queries and prevents the same person reviewing the same business more than once. A published review appears on the profile page of the business and is part of that page’s structured data, which search engines can read.
Business details in the directory
The directory shows business details of trade companies — name, address, contact details, trades, languages, service area. These details come from publicly accessible sources and the businesses’ own websites; profile texts are generated automatically and are marked as such. The legal basis is our legitimate interest in operating a public trade directory (Art. 6(1)(f) GDPR).
Businesses can have their listing corrected or removed at any time via the “claim, correct or remove a listing” form.
Business accounts
Anyone claiming a listing as their own business signs in with their email address: you receive a link by email, and clicking it signs you in — there is no password. The email is sent by Resend (Resend Inc., San Francisco, USA) on our behalf (Art. 28 GDPR). For the link we store your email address, the time and a salted hash of your IP address for 24 hours; the link itself is stored only as a hash. After signing in, your browser gets a technically necessary session cookie (cp_konto, 30 days) that holds no data besides your email address in signed form.
We additionally store: the email address of your account, the text of the claim (how you show you belong to the business), the answers you submit in the account area’s questionnaire, and a salted hash of your IP address to prevent abuse — the IP address itself is not stored here either. The purpose is reviewing the claim and letting you maintain your own listing (Art. 6(1)(b) GDPR). Approved questionnaire answers appear as a section on the business’s profile page.
This data is kept for as long as the account exists. You can delete your account permanently at any time from the account area: the claim ends, published questionnaire answers disappear from the profile page immediately, and the email address is removed and you are signed out.
Data transfers to the USA
The operator is based in the USA; hosting, database and email delivery are likewise provided by US companies. Your data may therefore be processed in the USA. Vercel, Cloudflare and Resend are certified under the EU-US Data Privacy Framework.
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. To exercise them, contact info@mk-worldwide.com. You also have the right to lodge a complaint with a data protection supervisory authority.