Privacy policy.

1. Who is responsible for this website

midsumr S.à r.l.-S operates this website and is responsible for the personal data processed through it.

midsumr S.à r.l.-S is registered in Luxembourg under RCS B294592. The registered address is 2, rue de l'Industrie L-4823 Rodange Luxembourg.

For privacy questions, contact contact@midsumr.com.

2. What personal data may be processed

When you browse the website, technical information may be processed, such as IP address, device and browser information, requested pages, date and time, referrer, and security or error logs.

When you contact midsumr by email, phone, WhatsApp, social media, or another channel, the information you choose to send may be processed so midsumr can understand and respond to your request.

The website chat is not used to collect leads, client data, documents, or sensitive information. It is a narrow AI assistant with one purpose: giving very basic information about midsumr services, opening hours, and contact details.

When you accept analytics, Google Analytics and Vercel Analytics may process website usage events to understand visits and improve the site.

3. Why the data is used

To operate, secure, maintain, and improve the website.

To respond to contact requests and prepare possible client conversations.

To provide a narrow AI chat assistant for basic questions about midsumr services, opening hours, and contact details only.

To remember website preferences such as privacy choice, theme, language, and Green Mode.

To measure website visits and performance only when analytics consent has been accepted.

To meet legal, accounting, security, and administrative obligations where applicable.

4. Legal basis

Essential website operation, security, troubleshooting, and abuse prevention may rely on legitimate interest.

Responses to messages and project enquiries may rely on pre-contractual steps, contractual necessity, or legitimate interest depending on the context.

Analytics and non-essential measurement are based on your consent. You can choose Essential only or Accept all in the privacy banner, and reopen the choice using the Privacy button.

Legal, tax, accounting, and administrative obligations are processed where required by law.

5. Cookies, local storage, and analytics

The website uses essential local storage to remember privacy choices, theme, language, Green Mode, and similar interface preferences.

Google Analytics and Vercel Analytics are used only after analytics consent is accepted. Before consent, analytics storage is denied by default through Google Consent Mode v2.

If you choose Essential only, the website should continue to work without optional analytics tracking.

You can change your choice by using the Privacy button at the bottom-left of the website.

6. Chat assistant and AI processing

The chat assistant is a narrow AI using DeepSeek. It is limited to short answers about midsumr services, opening hours, and contact details.

midsumr does not use the chat to collect personal data, project files, leads, passwords, secrets, or documents. The chat exists only to give very basic website information.

When the AI provider is configured, the message needed to answer the current question may be sent through the midsumr backend to DeepSeek to generate a response.

Do not put passwords, secrets, confidential documents, special-category data, or sensitive client information into the chat assistant.

The assistant may fall back to a basic reply when the AI provider is unavailable or when the question is outside scope.

7. Service providers

Personal data may be processed by service providers that help operate the website, including hosting, security, analytics, email, messaging, and AI service providers.

Current categories include website hosting and deployment infrastructure, Google Analytics, Vercel Analytics, email or communication providers, and the AI provider used for the chat assistant when configured.

These providers may process data in Luxembourg, the European Union, or other countries depending on their infrastructure and contractual terms.

8. How long data is kept

Technical logs are kept only as long as needed for security, troubleshooting, reliability, and hosting operations unless a longer period is required for investigation or legal reasons.

Contact messages are kept as long as needed to respond, manage the relationship, document decisions, and meet legal or accounting obligations.

Analytics data follows the retention settings of the analytics providers and is used in aggregated form where possible.

Privacy choices remain stored on your device until you clear browser storage or update your choice.

9. Your rights

Depending on applicable law, you may have the right to access, correct, delete, restrict, object to, or request portability of personal data concerning you.

Where processing is based on consent, you may withdraw that consent for the future.

To exercise your rights or ask a privacy question, contact contact@midsumr.com.

You may also have the right to contact the Luxembourg data protection authority, the CNPD, if you believe your data protection rights have not been respected.

10. Security and confidentiality

midsumr applies practical technical and organizational measures to protect the website and communications, but no website, email, chat, or online service can be guaranteed perfectly secure.

Please do not send confidential project files, credentials, client data, or sensitive documents until an appropriate agreement and secure exchange process are in place.

11. Changes to this policy

This privacy policy may be updated when the website, services, analytics setup, chatbot, providers, or legal requirements change.

The latest version is published on this page with the date shown above.