Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Phone

+49 176 36623030

WhatsApp

+963 982 506 580

Email

[email protected]

Website

https://gmind.agency

We process personal data only insofar as this is necessary to provide a functioning website, to handle enquiries, to deliver our services, or on the basis of consent. Processing is carried out in particular on the basis of the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the latter is applicable.

Depending on the processing activity, the relevant legal bases are in particular Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (contract or pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interests).

Our website is operated via a hosting service provider and delivered through the content delivery network (CDN) and security services of Cloudflare. When the website is accessed, technically necessary data is processed and may be stored in server log files. This includes in particular the IP address of the requesting device, the date and time of access, the page or file requested, the volume of data transferred and the access status, the referrer URL, the browser type and version, and the operating system and device type.

This processing serves to deliver the website, ensure stability and security, detect technical faults, and defend against misuse and attacks. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website. Where service providers process data on our behalf, they are contractually bound in accordance with Art. 28 GDPR.

The CDN provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA; for users in the European Economic Area, affiliated European companies may also be involved depending on the configuration. Processing may therefore take place in the USA. Any transfer is made subject to the requirements of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision (EU-US Data Privacy Framework) or appropriate safeguards such as EU standard contractual clauses. Further information: https://www.cloudflare.com/privacypolicy/

Server log data is stored only for as long as is necessary for the purposes stated above, and is then deleted or anonymised.

This website does not use cookies or comparable storage technologies. No information is stored on your device or read from it. Your language selection follows solely from the address you visit (for example /en/ or /de/) and is not saved on your device.

We do not use any analytics, tracking, marketing or profiling services; in particular, no audience measurement takes place via Google Analytics or comparable services. Because no consent-requiring technologies are in use, we need neither a cookie banner nor consent pursuant to Section 25 (1) TDDDG.

Should we use consent-requiring services in future, this will only happen after your express consent, and this privacy policy will be updated accordingly beforehand.

If you contact us via the contact form, we process the data you enter — in particular your name, email address, any subject line, and the content of your message — in order to handle your enquiry and communicate with you.

If your enquiry relates to a contract or pre-contractual measures, the legal basis is Art. 6 (1) (b) GDPR. In other cases, processing is carried out on the basis of Art. 6 (1) (f) GDPR, based on our legitimate interest in properly handling and responding to enquiries. We delete the data as soon as the enquiry has been conclusively dealt with, provided that no statutory retention obligations or legitimate interests in further storage prevent deletion.

For the technical transmission of the contact form we use the service Web3Forms, provided by Web3Creative. When you submit the form, the data you have entered is transmitted from your browser to the provider's servers and forwarded from there to us by email. The provider processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The submitted form data is retained there for up to three years and then deleted automatically.

The provider in turn engages sub-processors, in particular Amazon Web Services and Hetzner for hosting, storage and email delivery, Cloudflare for delivery and security, and CleanTalk and Akismet for spam and abuse detection. The spam filtering services receive, in particular, your IP address and your email address.

The provider is based in India; depending on the service, the infrastructure used is located within the European Union or in third countries, in particular the USA. Where personal data is transferred to a third country as a result, this takes place on the basis of the EU standard contractual clauses, which form part of the data processing agreement. Further information: https://web3forms.com

Using the form is voluntary. You can send us your enquiry by email, by telephone or via WhatsApp instead at any time.

We offer the option of contacting us via WhatsApp on our website. A connection to WhatsApp is only established when you click the link or contact us via WhatsApp. Using WhatsApp is voluntary; you can alternatively reach us via the contact form, by email or by telephone. For confidential or particularly sensitive information, we recommend using an alternative channel.

When communicating via WhatsApp, we process in particular your telephone number, your profile name, the content of your message, any files transmitted, and communication metadata. Depending on the content of the enquiry, processing is carried out on the basis of Art. 6 (1) (b) or (f) GDPR.

The provider for users in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp also processes data under its own data protection responsibility and may process data within the Meta group of companies as well as in countries outside the European Economic Area. Further information: https://www.whatsapp.com/legal/privacy-policy-eea

Our website contains plain links to external websites and to our profiles on Instagram, Facebook and TikTok. No social media plugins, feeds or embedded content from these providers are integrated into the website. Merely visiting our website therefore does not transmit any data to the respective providers via these links. Only when you click an external link do you leave our website; the respective provider may then process, in particular, your IP address, device information, referrer data and — if you are logged in there — account information. The respective provider is solely responsible for that processing.

The fonts used on the website, as well as our own image and video content, are provided locally from our own server or via our CDN. Accordingly, no connection to Google Fonts or any other external font provider is established when the page is loaded merely in order to load fonts.

We only pass on personal data where this is necessary to fulfil the purposes stated above, where there is a legal obligation, or where valid consent has been given. Recipients may include, in particular:

• hosting, CDN, IT, email and telecommunications service providers;
• employees and agents bound to confidentiality;
• the provider of the service used to transmit the contact form;
• authorities, courts, legal or tax advisors, insofar as a legal obligation or the assertion of legal claims requires this.

Personal data is transferred to countries outside the European Union or the European Economic Area only where the requirements of Art. 44 et seq. GDPR are met. This may in particular be on the basis of an adequacy decision of the European Commission, appropriate safeguards under Art. 46 GDPR — such as EU standard contractual clauses — or, in individual cases provided for by law, on the basis of a derogation under Art. 49 GDPR. Third-country transfers arise in particular in connection with Cloudflare, transmission of the contact form via Web3Forms, and communication via WhatsApp.

Unless a specific retention period is stated in this privacy policy, we store personal data only for as long as the respective processing purpose applies or statutory retention obligations require. The data is then deleted or anonymised.

Within the scope of the statutory requirements, you have in particular the following rights:

• access to the personal data we process about you pursuant to Art. 15 GDPR;
• rectification of inaccurate data or completion of incomplete data pursuant to Art. 16 GDPR;
• erasure of your data pursuant to Art. 17 GDPR;
• restriction of processing pursuant to Art. 18 GDPR;
• data portability pursuant to Art. 20 GDPR;
• objection to processing pursuant to Art. 21 GDPR;
• withdrawal of consent given, with effect for the future, pursuant to Art. 7 (3) GDPR.

To exercise your rights, a message to [email protected] is sufficient. Before processing your request, we may require suitable proof of your identity where this is necessary to protect your data.

Where we process personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is:

Phone

+49 385 59494 0

Email

[email protected]

Website

https://www.datenschutz-mv.de

No solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place via this website.

Our website uses TLS encryption. In addition, we take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.

We adapt this privacy policy when the website, the services used, or the legal situation change. The version published on this website at the relevant time applies.