Privacy

1. Definitions

This policy uses the terminology of the GDPR. Personal data means information relating to an identified or identifiable natural person; a data subject is the person concerned. Processing covers any operation performed on personal data. Restriction marks stored data to limit future processing. Profiling is automated processing used to evaluate personal aspects. Pseudonymisation prevents attribution without separately held additional information. The controller determines purposes and means; a processor acts on its behalf. A recipient receives disclosed data; a third party is anyone outside the data subject, controller, processor and authorised staff. Consent is a freely given, informed and unambiguous indication of wishes.

2. Name and address of the controller

The controller under the GDPR and other applicable data-protection provisions is:

Yoomind GmbH Hermannstraße 5 A 70178 Stuttgart Germany Phone: +49 (0) 711 252867 51 Email: info(at)yoomind.com Web: www.yoomind.com

3. Address of the data protection officer

You can contact our data protection officer at:

Data Protection Officer Hermannstraße 5 A 70178 Stuttgart Germany

Data subjects may contact our data protection officer directly at any time with questions or suggestions concerning data protection.

4. Cookies

The Yoomind GmbH website uses cookies, which are text files stored by a browser. Many cookies contain a unique cookie ID that allows websites and servers to associate them with a specific browser.

You can prevent cookies through your browser settings and delete cookies already stored. Disabling cookies may mean that not all website functions remain fully available.

5. Collection of general data and information

Each visit to the website may generate general data and information that is stored in server log files.

6. Newsletter subscription

Users may subscribe to the Yoomind GmbH newsletter. A subscription can be cancelled at any time.

7. Newsletter tracking

Our HTML newsletters may contain tracking pixels used for log-file recording and analysis.

8. Contact via the website

When you contact us by email or through the contact form, we process the information you provide, in particular your name, company, email address, role or department, subject and message content, in order to handle and respond to your enquiry. The legal basis is your consent under Article 6(1)(a) GDPR and, where your enquiry concerns entering into or performing a contract, Article 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in appropriate business communication under Article 6(1)(f) GDPR.

For the technical delivery of contact enquiries, we use Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Email addresses, delivery metadata and message content are transmitted to Resend. Resend processes this data as a processor under a Data Processing Addendum. Processing may take place in the United States; according to Resend, transfers are safeguarded, among other mechanisms, by the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. Emails are dispatched through the Ireland region (eu-west-1), while account, log and other service data may still be processed in the United States.

Open and click tracking are disabled for these contact enquiries. We retain enquiries only for as long as necessary to process them and any subsequent communication, or as required by statutory retention obligations. Further information: https://resend.com/legal/privacy-policy, https://resend.com/legal/dpa and https://resend.com/legal/subprocessors.

9. Routine deletion and blocking of personal data

Personal data is processed and stored only for as long as required for its purpose or as prescribed by European or national law.

10. Rights of the data subject

Data subjects have the rights provided by law, including confirmation, access and a copy, rectification, erasure, restriction of processing, data portability and objection. They also have the right not to be subject to qualifying decisions based solely on automated processing, including profiling, and may withdraw consent at any time.

11. Data protection in applications and recruitment

Applicant data is processed to conduct the recruitment procedure. If no employment contract is concluded, application documents are automatically deleted two months after notification of rejection, unless legal obligations require otherwise.

12. Facebook

This website may integrate Facebook components. Facebook’s privacy policy at https://www.facebook.com/privacy/policy/ explains its collection, processing and use of personal data.

13. Google Analytics (with anonymisation)

This website may use Google Analytics with IP anonymisation. Further information is available at https://policies.google.com/privacy.

14. Google Ads

This website may use Google Ads. Further information is available at https://policies.google.com/privacy.

15. Instagram

This website may integrate Instagram components. Further information is available at https://privacycenter.instagram.com/policy/.

16. LinkedIn

This website may integrate components of LinkedIn, an online professional network that enables users to connect with existing and new business contacts.

17. Consent management

On your first visit we show a notice where you decide whether the marketing tags listed in sections 18 to 21 may be loaded. Without your consent these services are not loaded and no related cookies are set. Your decision is stored only locally in your browser (localStorage key “yoomind-consent”) for twelve months and never transmitted to third parties. You can change or withdraw it at any time via “Cookie settings” in the footer. Legal basis: Art. 6(1)(f) GDPR and §25(2) no. 2 TDDDG.

18. Vercel Web Analytics

We measure the reach of this website with Vercel Web Analytics (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA). The service works without cookies or cross-device identifiers. It records pages viewed, referrer, country, browser and device type and events we define (e.g. “enquiry sent”). The IP address is used only to compute a daily rotating, non-reversible hash and is not stored. Legal basis: our legitimate interest in analysing and improving our offer, Art. 6(1)(f) GDPR. Vercel is certified under the EU-U.S. Data Privacy Framework; see https://vercel.com/legal/privacy-policy.

19. Google tag, Google Analytics 4 and Google Ads conversion tracking

With your consent we load the Google tag of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It runs Google Analytics 4 (usage analysis, audiences, campaign impact, including ads on YouTube) and Google Ads conversion tracking (whether an ad led to an enquiry). Cookies are set and data such as truncated IP address, device data, pages viewed and interactions are transmitted to Google, including to the USA. We use Google Consent Mode; without your consent all storage purposes remain “denied”. Legal basis: Art. 6(1)(a) GDPR and §25(1) TDDDG. See https://policies.google.com/privacy.

20. Meta Pixel (Facebook and Instagram)

With your consent we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, to measure our ads on Facebook and Instagram and to build audiences. Cookies are set and usage data, device data and events (page view, enquiry sent) are transmitted to Meta, including to the USA. For this collection we are joint controllers with Meta under Art. 26 GDPR. Legal basis: Art. 6(1)(a) GDPR and §25(1) TDDDG. See https://www.facebook.com/privacy/policy/.

21. LinkedIn Insight Tag and TikTok Pixel

With your consent we use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) and the TikTok Pixel (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, Ireland) for campaign reporting, conversion tracking and audience building. Cookies are set and URL, referrer, truncated IP address, device data, timestamps and events are transmitted to the providers, including to third countries such as the USA. Legal basis: Art. 6(1)(a) GDPR and §25(1) TDDDG. See https://www.linkedin.com/legal/privacy-policy and https://www.tiktok.com/legal/page/eea/privacy-policy/en.

22. Campaign source of contact requests

To recognise the channel you came from, on the first page view of a session we store campaign parameters of the URL (utm_source, utm_medium, utm_campaign, utm_term, utm_content, ad-platform click IDs), the referring domain and the landing page in your browser’s sessionStorage. This data leaves your browser only when you submit the contact form; it is then sent to us together with your enquiry. Storage ends when the tab is closed. Legal basis: Art. 6(1)(f) GDPR.

23. Linked social networks

We link to our profiles on LinkedIn, YouTube, Facebook, Instagram and TikTok. These are plain links; no data is transmitted to these providers when you visit our site. Only when you click a link do the provider’s privacy terms apply.