Privacy
What this site collects, why, and what it deliberately does not do.
This is a convenience translation. The German version of this privacy notice is the authoritative one. Datenschutz
Controller
mindshape.ONE GmbH Kimming 9 25348 Glückstadt benecke@mindshape.one
The short version
This site sets no cookies, measures no traffic and embeds no third-party analytics. That is also why there is no consent banner — there would be nothing to consent to.
Personal data arises at two points: when you submit the enquiry form, and when you request material on the press page.
Visiting the site and hosting provider
The site is hosted by Vercel Inc. and served through their global delivery network. When you visit, the provider processes technically necessary connection data such as IP address, time, the address requested and the browser identification transmitted. A page cannot be delivered without this.
The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in secure and stable operation. For transfers to the United States the provider relies on the European Commission’s standard contractual clauses.
Enquiry form
What you enter in the form is delivered by email to the address given in the legal notice and used there to answer your enquiry. It is sent directly from this server; no form or mail delivery provider is involved. Collected are your name, email address and the details of your request — depending on the subject, for example event, location, date, format, audience, language or budget range.
This function runs in a data centre in Frankfurt am Main. The form data does not leave the European Union.
The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns steps prior to a contract, otherwise Art. 6(1)(f) GDPR. The details are deleted once they are no longer needed and no statutory retention period applies.
For each successfully delivered enquiry, one line recording the subject and the time is kept — without name, address, free text or IP address. That line permits no conclusion about any individual.
It is different when delivery fails. In that case the details from the form are written to the server function log in full, for one reason only: there is no automatic second delivery attempt, and without that entry your enquiry would be lost outright. You will then see a message saying the enquiry did not get through, together with the email address as a second route. The legal basis is Art. 6(1)(f) GDPR — the legitimate interest of both sides in an enquiry not disappearing without trace. The entry is deleted once the enquiry has been dealt with.
Both forms check how long the filling in took and contain one field that is invisible to you. Both serve solely to deflect automated submissions; neither is stored nor forwarded. A captcha is deliberately not used, because it would open a connection to a third party.
Requesting press material
The press page allows you to request material that is not freely available. The details collected are name, outlet or organisation, and email address — nothing else. Bio, spelling and the web-resolution photographs are available without giving anything; details are asked for only where the material is tailored personally or supplied at print resolution.
The details are forwarded to the same contact address as an enquiry from the form and are likewise processed in a data centre in Frankfurt am Main. They do not leave the European Union.
The legal basis is Art. 6(1)(b) GDPR where a contract is being initiated, otherwise Art. 6(1)(f) GDPR — the legitimate interest in knowing who is using the material. The details are deleted once they are no longer needed to handle the request.
The address is neither shared nor analysed. The request alone creates no newsletter entry and no marketing consent — there is a separate, unticked box in the form for that.
That box is optional. Whether you tick it has no bearing on whether or how quickly you receive the material; consent that were a condition of a service would not be freely given under Art. 7(4) GDPR and would therefore be invalid. The same box also appears in the enquiry form. If you do tick it, that wish is forwarded together with the request and recorded there. The legal basis for this is Art. 6(1)(a) GDPR.
If you tick the box, the wording you agreed to, the time and your IP address are also recorded as proof of that consent. Art. 7(1) GDPR requires this: anyone relying on consent must be able to demonstrate it. Without a ticked box, your IP address is not stored.
No newsletter is currently sent; there is neither a mailing list nor an appointed sending provider. Once there is one, a confirmation email comes first: without your click in it, your address is not added to any list. You can withdraw your consent at any time with effect for the future, informally, to the address given in the legal notice.
Fonts
The typeface used is served from this server. There is no connection to Google Fonts or any other external font service, and no IP address is transmitted to one.
Videos
Videos are not loaded automatically. Only when you explicitly click the play surface is a connection to YouTube established and the player loaded — using the variant without advertising cookies. Before that, YouTube learns nothing of your visit.
The legal basis for loading it is your consent under Art. 6(1)(a) GDPR, given with that click. The provider is Google Ireland Limited.
References to scientific literature
The publication list links to DOI and PubMed addresses. These links open only on click; the providers there then process your data under their own terms.
Your rights
You have the right to information about the data stored about you, to rectification, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interest. Any consent given can be withdrawn at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the federal state where you usually reside.
No automated decision-making or profiling takes place.