Privacy Policy
Controller
The controller within the meaning of Art. 4 No. 7 GDPR for the processing of personal data on this website is:
- Company
- mind GmbH
- Address
- Wilhelm-Külz-Straße 4
04552 Borna
Germany - Phone
- +49 3433 7779349
General Information
We process personal data only to the extent necessary to provide this website and respond to inquiries.
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place. Your data is never sold.
This privacy policy informs you under Art. 13 GDPR about the processing we carry out.
Hosting and Infrastructure (Cloudflare)
This website, and the technical delivery of contact inquiries, runs on Cloudflare, Inc.'s infrastructure. Cloudflare processes data here as a processor under an Art. 28 GDPR data processing agreement.
For transfers to the United States, Cloudflare relies on its Data Privacy Framework certification, plus the EU Standard Contractual Clauses (Module Two, controller-to-processor) with supplementary measures.
Hosting and Workers
Visiting this website and processing a contact submission in the Worker generates technical request metadata: IP address, requested URL, time, and the user agent and similar request details.
- Purpose
- Delivering this website and processing contact submissions in the Worker.
- Legal basis
- Art. 6(1)(f) GDPR (legitimate interest in secure, reliable delivery).
- Retention
- Request logs are not retained by Cloudflare by default; Workers Logs are kept for 3 days on the Workers Free plan this site uses.
Web Analytics
Cloudflare Web Analytics runs on the same infrastructure; see the "Web Analytics" section below for details on data collection.
- Purpose
- Measuring reach and page performance for this website.
- Legal basis
- Art. 6(1)(f) GDPR (legitimate interest in optimizing load time and usability).
- Retention
- Data feeds into aggregated statistics; Cloudflare publishes no separate, per-visitor retention period for this product.
Turnstile
Turnstile protects the contact form from automated abuse. It processes the client IP address, a TLS fingerprint, the User-Agent header, and the sitekey with its associated origin.
- Purpose
- Protecting the contact form from automated submissions (bot mitigation).
- Legal basis
- Art. 6(1)(f) GDPR (legitimate interest in a functional, abuse-free form).
- Retention
- Cloudflare publishes no fixed retention period for these signals; processing follows Cloudflare's general retention practice.
Email Routing
Cloudflare Email Routing forwards a form submission from this website's Worker to the controller's mailbox.
Cloudflare Email Routing also receives messages addressed to hello@mind-ai-labs.com and forwards them to that same mailbox. It processes the sender address, the recipient address and the content of the message.
- Purpose
- Delivering a contact submission from the Worker, and forwarding messages addressed to hello@mind-ai-labs.com, to the controller's mailbox.
- Legal basis
- Art. 6(1)(b) and (f) GDPR.
- Retention
- Processing occurs for delivery under Cloudflare's data processing agreement and privacy policy; Cloudflare publishes no separate retention period for message transit itself.
Cloudflare Data Processing Addendum (DPA) (opens in new tab)
Contact Form
When you use our contact form, we process the data you enter in order to respond to your inquiry.
Your browser sends the submission to this website's Worker on Cloudflare. The Worker validates it, verifies it via Turnstile, and sends it by email through Cloudflare Email Routing to hello@mind-ai-labs.com.
The website itself stores nothing — there is no database — and its logs never contain submitted field contents.
- first and last name
- company (optional)
- email address
- message
- Purpose
- Responding to your inquiry.
- Legal basis
- Art. 6(1)(b) GDPR where the inquiry aims at a contract, otherwise Art. 6(1)(f) GDPR. Providing this data is voluntary, but without an email address no reply is possible.
- Recipients
- Cloudflare as a processor.
- Retention
- Contact-form briefs are deleted from the mailbox once the inquiry is closed. Where an inquiry leads to a contract, the related correspondence is kept for the statutory retention periods for business letters (§ 257 HGB, § 147 AO).
Email Delivery
The address hello@mind-ai-labs.com is routed by Cloudflare and forwarded to the controller's mailbox.
That mailbox is operated by us on our own hardware. No external email provider is involved as a processor, and no transfer to a third country takes place.
Web Analytics
Cloudflare Web Analytics measures reach and page performance for this website.
Per Cloudflare's documentation, Cloudflare Web Analytics sets no cookies, uses no localStorage, and does not fingerprint visitors.
Per Cloudflare's documentation, the IP address is used only to determine country and is never stored per visitor.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring reach and performance).
There is no event or conversion tracking.
- the page visited, referrer, browser, operating system and device type (derived from the user agent)
- country (derived from the IP address)
- the performance metrics LCP, INP and CLS
Cloudflare Web Analytics — Core Web Vitals (documentation) (opens in new tab)
Retention and Deletion
Contact-form briefs are deleted from the mailbox once the inquiry is closed. Where an inquiry leads to a contract, the related correspondence is kept for the statutory retention periods for business letters (§ 257 HGB, § 147 AO).
Workers Logs are kept for 3 days on the Workers Free plan this site uses.
Your Rights
As a data subject, you have the following rights:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection (Art. 21 GDPR), including objection to processing based on Art. 6(1)(f) GDPR
For questions about your rights, contact the controller at hello@mind-ai-labs.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the data protection authority responsible for the Free State of Saxony.
No Data Protection Officer
We are not required to appoint a data protection officer, since the statutory thresholds for doing so are not met.
For privacy questions, please contact the controller at hello@mind-ai-labs.com.