Data protection
I. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:
MIND Partners GmbH
c/o Satellite Office
Kurfürstendamm 194
10707 Berlin
Germany
info@mind-partners.com
mind-partners.com
II. General information about data processing
a. Scope of processing of personal data
In principle, we only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.
b. Legal basis for processing personal data
Insofar as we obtain consent from the data subject for processing personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.
c. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted when a storage period prescribed by the above standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
III. Rights of the person concerned
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:
a. Right to information
You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us. If there is such processing, you can request the following information from the person responsible:
i. the purposes for which the personal data are processed;
ii. the categories of personal data that are processed;
iii. the recipients or categories of recipients to whom the personal data concerning you have been disclosed are still being disclosed;
iv. the planned duration of storage of personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
v. the existence of a right to correct or delete personal data concerning you, a right to restrict processing by the person responsible or a right to object to this processing;
vi. the existence of a right of appeal to a supervisory authority; all available information about the origin of the data if the personal data is not collected from the data subject;
vii. The existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is being transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transfer.
b. Right to rectification
You have the right to correct and/or complete the data controller if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.
c. Right to restrict processing
You can request that the processing of personal data concerning you be restricted under the following conditions:
i. if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the personal data;
ii. the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
iii. the person responsible no longer needs the personal data for processing purposes, but you need them to assert, exercise or defend legal claims, or
iv. if you have filed an objection to processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data — apart from storage — may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.
d. Right to deletion
i. Obligation to delete
You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
- The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and there is no other legal basis for the processing.
- You object to processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for processing, or you object to processing in accordance with Article 21 (2) GDPR.
- The personal data concerning you was processed unlawfully.
- The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
- The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
ii. Information to third parties
If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 (1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process the personal data that you, as a data subject, have deleted all links to this personal data or copies or replications of this personal data from them have requested personal data.
iii. Exceptions
The right to deletion does not exist insofar as processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject, or to perform a task which is in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, insofar as the right referred to in section a) is likely to make impossible or seriously impair the achievement of the objectives of this processing, or
- to assert, exercise or defend legal claims.
IV. Contact form, company value calculator and email contact
a. Description and scope of data processing
There are various ways to contact us electronically on our website. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored.
contact form
Our classic contact form enables direct communication with us. When a user uses this form, the data entered in the input mask is sent to us and stored. At the time the message is sent, the following personal data in particular will be processed:
- email address
- name
- First name
- address
- Phone/mobile number
- company name
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy.
Company value calculator
In addition, we offer a tool for indicative company valuation on our website (“company value calculator”). This tool is aimed in particular at entrepreneurs who want to get an initial assessment of the value of their company.
When using the computer, we also collect the above-mentioned personal data (name, email address, telephone number, etc.), as well as company-specific information, such as:
- Industry and company size
- Sales and earnings figures
- number of employees
- Location and, if applicable, international presence
- Special features of the business structure
This information is required to create an indicative company value estimate based on standardized methods and to make it available to the user.
The data entered in the company value calculator is transmitted to us and stored together with the contact information. Here, too, your consent is obtained during the sending process and reference is made to this privacy policy.
email contact
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored. In all of the above cases, the data will not be passed on to third parties. The data is used exclusively to process the respective request or to provide the company valuation and for subsequent communication.
a. Legal basis for data processing
If the user has given consent, the legal basis for processing the data is Art. 6 (1) (a) GDPR. The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
b. Purpose of data processing
The processing of personal data from the input form is for us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
c. Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has finally been clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
d. Objection and removal option
The user has the option to withdraw his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. In this case, all personal data that was stored when you contacted us or as part of the company value calculator will be deleted.
Using the Pipedrive CRM system
We use the customer relationship management system (CRM) “Pipedrive” from the provider Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. Pipedrive helps us manage customer and prospect data and organize our sales and communication processes.
When using Pipedrive, contact data (name, address, telephone number, email address), communication content and information about inquiries and contracts are processed in particular. This data is stored and processed by Pipedrive on our behalf.
The legal basis for using Pipedrive is Art. 6 para. 1 lit. b DSGVO, insofar as processing is necessary to fulfill a contract or to carry out pre-contractual measures, and Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the efficient and structured management of customer and interested party data as well as in professional communication.
We have concluded an order processing contract with Pipedrive in accordance with Art. 28 GDPR, which ensures that Pipedrive processes our customers' personal data exclusively in accordance with our instructions and complies with the requirements of the GDPR.
Pipedrive also processes data on servers outside the European Union, particularly in the USA. This ensures an appropriate level of data protection through the use of standard contractual clauses approved by the European Commission (Art. 46 GDPR).
V. Plug-ins used
Use of Google web fonts
a. Scope of processing of personal data
Google web fonts (http://www.google.com/webfonts/) are used to visually improve the display of various information on this website. When the page is accessed, the web fonts are transferred to the browser's cache so that they can be used for display. If the browser does not support Google web fonts or prevents access, the text is displayed in a standard font. When the page is accessed, the website visitor does not receive any cookies. Data that is transmitted in connection with the page view is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. The IP address of the browser of the end device of the visitor to these websites is also stored by Google.
b. Legal basis for processing personal data
The legal basis for data processing is Article 6 (1) (f) GDPR. The legitimate interest lies in the error-free functioning of the website.
c. Purpose of data processing
This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this feature, a standard font is used by your computer to display it.
d. Storage period
We do not have any information about the duration of storage by our order processor.
e. Objection and removal option
You can set your browser so that the fonts are not loaded from Google servers (e.g. by installing add-ons such as NoScript or Ghostery for Firefox.) If your browser does not support Google Fonts or you prevent access to the Google servers, the text is displayed in the system's standard font.