Notice for Email Recipients

You are most likely reading this because you received an email that was sent through mailkube. This page explains what mailkube itself does with data about that message, and what to do if you would rather it stopped.

Why you received the message

mailkube is an email sending platform, operated by Mail Tactic Corporation. Our customers use it to send their own mail.

The person or company that sent you the message chose to email you, wrote it, and decided your address belonged on their list. For the message itself, its content, why you received it, and where they got your address, they are the controller and we are not. We send it on their instructions, and we do not use their contact lists for our own purposes.

So if you want the mail to stop, use the unsubscribe route in the message or contact the sender directly. Where a sender has set up an unsubscribe or topic preference mechanism, we apply the choices you make through it, and we stop delivering to an address that has been suppressed.

What we do on our own behalf

Separately from that, there is a narrow set of processing we carry out as controller in our own right, because it protects the platform as a whole rather than serving any one customer.

Purpose. Preventing abuse of the Service, keeping it secure, and protecting the sending reputation that decides whether legitimate mail reaches inboxes at all. Without it, the platform would be used to send you spam and phishing.

Lawful basis. Article 6(1)(f) GDPR: our legitimate interests, and the legitimate interests of everyone else who receives mail through the platform. We have documented an assessment weighing those interests against your rights and freedoms, and it is available to a supervisory authority on request.

The data involved.

• Delivery diagnostics: whether a message addressed to you was accepted, deferred, or rejected, and the response your mail server gave, which repeats your address.
• Suppression entries: your address recorded so that we stop sending to it, for example after a hard bounce or an unsubscribe.

How long we keep it. For the retention windows published in Section 11 of our Data Processing Addendum, which are the same windows that apply to the data we hold on the sender’s behalf.

Who else sees it, and where it goes. This data is stored on infrastructure in the European Union, and the people who operate mailkube reach it from the European Union. Two kinds of recipient still see it.

The first is our own company. mailkube is operated by Mail Tactic Corporation, which is incorporated in the United States. Because the company running the platform is established outside the European Economic Area, our own access to this data is itself a transfer out of it. That transfer is covered by the European Commission’s Standard Contractual Clauses, using the module for a transfer between two controllers.

The second is our suppliers: the providers we use for hosting, for our public edge and content delivery, and for error diagnostics. Some of them are established outside the European Economic Area or have a parent company that is, and those transfers are covered by the Standard Contractual Clauses too. Each one is named, with what it does and where it sits, on our sub-processors page.

You can ask us for a copy of those Clauses. Write to privacy@mailkube.com and we will send them to you, with commercial terms and anything unrelated to data protection removed first.

Opens, clicks, and what they record

Open and click tracking is a different thing, and it is worth being precise about it, because it is the part people ask about most.

A sender can turn on tracking for its own domain. When it does, an invisible image in the message tells us the message was opened, and links in the message pass through us on the way to their destination so we can tell a link was followed. A sender can also turn on two further settings that decide what each of those events records about you: your IP address and the country it resolves to, and the browser or mail client you used. Both are off unless the sender turns them on, and most senders do not.

We do all of this for the sender, on the sender’s instruction, and not for ourselves. We do not use opens, clicks, or anything recorded with them to protect the platform, judge senders, or make any abuse or blocking decision. That is why the choice belongs to the sender, and why the responsibility for having any permission the law requires belongs to the sender too.

If you want tracking stopped for you, tell the sender: they hold the switch. Tell us as well if you would rather, and we will pass the objection on and record that we did. If what you want is no further mail at all, we can do that directly: write to privacy@mailkube.com and we will suppress your address.

Why you are being told this here

We did not get your details from you. We got them from the sender, and in most cases the only way we could tell you individually would be to send you an email you never asked for.

Article 14(5)(b) GDPR allows a controller in that position to make the information publicly available instead of writing to each person. That is what this page is.

Objecting, and getting in touch

You can object to the processing described above. Write to privacy@mailkube.com and tell us so.

You can also ask us for a copy of what we hold about you, for a correction, or for deletion. You can ask us to restrict what we do with it, which is useful while we are still weighing an objection you have made: we keep the data but stop using it until the question is settled. The same address reaches us for all of it.

Where a request concerns the message itself or the sender’s list, we will pass it on to the sender, because that data is theirs and the decision is not ours to make.

If the message itself is the problem, spam you never agreed to receive, phishing, or anything else our Acceptable Use Policy prohibits, report it to abuse@mailkube.com, including the message and its headers where you can. Reports made there feed the abuse-prevention processing described above and can lead to enforcement action against the sender. Write to privacy@mailkube.com when what you want is your data or your rights, and to abuse@mailkube.com when you want the sending looked at.

You also have the right to complain to a data protection authority. You can go to the authority where you live, where you work, or where you think the problem happened.

Mail Tactic Corporation has appointed Prighter EU Rep GmbH, Vienna, Austria, as its representative in the European Union pursuant to Article 27 GDPR, as the point of contact for data subjects and supervisory authorities. The representative may be addressed in addition to or instead of Mail Tactic Corporation, which remains reachable at privacy@mailkube.com. Contact details are on our EU Representation page.

Changes to this notice

If we change this notice we will post the new version on this page and update the date at the top.