Last updated: October 2026
We are pleased that you are visiting our website and thank you for your interest. This notice explains how we handle your personal data when you use our online offerings, such as our website and the HalloInbox service, including on mobile devices such as smartphones or tablets.
Personal data means any information with which you can be personally identified, or that can make you identifiable through an identifier, such as an IP address or a payment detail.
For security reasons and to protect the transmission of personal data and other confidential content, this online offering uses SSL or TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in your browser address bar.
The data controller for the processing of data on our online offering within the meaning of the General Data Protection Regulation (GDPR) is:
MAF Consultancy, registered with the Chamber of Commerce (KvK) under number 84498021, register court Amsterdam, 1019HE Amsterdam, the Netherlands. Managing director: Mohamed A.
Contact email: info@halloinbox.com.
If you have questions about the use of your personal data, please contact us at the address above.
Even a visit to our internet pages (without registration) leads to the automatic collection of the following data on our server:
The above non-personal information is collected automatically through the regular functioning of our internet services. There is no merging of this usage data from visiting our pages with the personal data provided through registration. For us, the identifiability of usage data is excluded.
We use the above data for the purpose of troubleshooting, creating statistics and measuring activity on the website, with the aim of increasing the usefulness of our offerings. This also constitutes a legitimate interest, justifying data processing under Article 6 (1) (f) GDPR.
For these purposes, only our IT administrator has access to this data. We retain the above data only for the duration of your usage; once usage ends the data is promptly deleted, but at the latest after seven days.
Through cookies and web analytics services we receive information as soon as your web browser opens our pages. These identification markers support various service functions of our website and are automatically transmitted to the hard drive of your computer or other mobile device through your web browser. You can prevent this function by adjusting your browser settings. However, personalised service will not be possible in that case.
On our pages we provide a way to contact us electronically. Contacting us is always voluntary.
We process this data exclusively for the purpose of responding to your inquiry or initiating contact with you, as well as for related technical administration. The legal basis for this processing is Article 6 (1) (b) GDPR, as we need the data to initiate, carry out or terminate a contract with you.
Our internal customer service receives your request. We do not transmit your inquiries to third countries or organisations outside the EU.
After processing your request we promptly delete the data related to your contact, but no later than seven days after completing the request. Legal retention periods may oppose this storage period, for example if your request is related to a contract, warranty or guarantee; in that case we store your request beyond seven days only for the purpose of fulfilling legal retention obligations (Article 6 (1) (c) GDPR), and delete it at the latest with the expiry of the legal retention period.
You have the option to register as a customer of HalloInbox. We process this data exclusively for the execution of the contract concluded with you for the use of our online offering. This data processing is justified under Article 6 (1) (b) GDPR.
All information is voluntary. To process orders based on the purchase contract concluded with you, we require at least the data marked as required in the registration form.
Our customer service and marketing have internal access to this data, with IT having access only for troubleshooting or system maintenance. The accounting department receives the necessary reports for tax processing.
We do not transmit your inquiries to third countries or organisations outside the EU.
Deletion of your customer account is possible at any time. You can either perform the deletion yourself or send us a corresponding message to the address above.
After the complete execution of the contract with a guest account or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after these periods have expired, unless you have explicitly consented to further use of your data. If you are registered as a customer with us, we will block all information about purchases that are more than three years old in the purchase history and delete them at the latest after 10 years from the purchase date.
If you have ordered products from us and provided your email address, we may, within the framework of legal requirements, send you product recommendations for our own similar products if we have informed you about this during contract conclusion and you have not objected. This form of contact is solely for the purpose of transmitting product recommendations by electronic mail to you as an existing customer. We pursue our legitimate interest in personalised direct advertising to existing customers through this. The legal basis for this is Article 6 (1) (f) GDPR.
You can object to this use of your email address at any time, free of charge except for transmission costs according to the basic tariffs. To do so, send a message to the address above. With your objection, processing for advertising purposes ends.
We do not use any user data, including data obtained through third-party APIs, for the purpose of developing, improving, or training generalised or non-personalised AI or machine learning models. Our use of data strictly adheres to the intended functionality of our services and complies with all legal and contractual requirements.
We use the web analysis service PostHog EU cloud on our online platform with your consent. This service is provided from the EU. PostHog uses cookies to analyse your use of our online platform. The generated information about your use of our online platform (including your truncated IP address) is processed in the EU.
We use PostHog with memory persistence where possible, so analytics does not rely on a long-lived cookie. You can prevent cookie installation by adjusting your browser settings. To prevent PostHog from collecting and processing data related to your use of our platform, install or use the opt-out mechanisms provided by PostHog.
For more information about PostHog and user data handling, see PostHog’s privacy policy.
We do not use additional web-analytics, session-recording, advertising or remarketing tools. PostHog EU cloud is the only analytics service we use, and only with your consent where required.
We use the following sub-processors to provide HalloInbox:
We keep data only as long as needed:
You can ask for access, correction, deletion, or a copy of your data. You can also object to processing or withdraw consent.
Email info@halloinbox.com. You can also complain to your local data protection authority.
Our workspace hosting and AI processing are in the EU. Meta and Telegram handle messages on their own apps and may process data outside the EU under their own terms.
We do not claim that all data stays in the EU.
Questions about this notice: info@halloinbox.com.
Social media presence
In our online offering we do not use active social plugins. We only provide icons that link to our profiles on social networks. We only display these social media icons on our page, and they are designed as inactive icons.
When you click on such a social media icon on our page, it is activated with your consent, and a connection to these third-party providers is established in a separate tab through your web browser. These third-party providers can track visits to our pages through this interaction. If you are a member of one of the social networks, you can share the content of our page with other members from your network by activating the button.
By participating in social networks or by visiting or accessing our social media presences, your data may be processed outside the EU. This can pose risks, as enforcing your rights may be more challenging.
When you access a social network, cookies are usually stored on your device to track user behaviour. If you have an account on the respective network and are logged in, your usage behaviour may be linked to your account. Social networks can analyse usage behaviour for market research and advertising purposes, potentially leading to advertisements being displayed within and outside the social networks. We have no control over this.