Privacy

1. Definitions

This policy uses the terminology of the GDPR. Personal data means information relating to an identified or identifiable natural person; a data subject is the person concerned. Processing covers any operation performed on personal data. Restriction marks stored data to limit future processing. Profiling is automated processing used to evaluate personal aspects. Pseudonymisation prevents attribution without separately held additional information. The controller determines purposes and means; a processor acts on its behalf. A recipient receives disclosed data; a third party is anyone outside the data subject, controller, processor and authorised staff. Consent is a freely given, informed and unambiguous indication of wishes.

2. Name and address of the controller

The controller under the GDPR and other applicable data-protection provisions is:

Yoomind GmbH Hermannstraße 5 A 70178 Stuttgart Germany Phone: +49 (0) 711 252867 51 Email: info(at)yoomind.com Web: www.yoomind.com

3. Address of the data protection officer

You can contact our data protection officer at:

Data Protection Officer Hermannstraße 5 A 70178 Stuttgart Germany

Data subjects may contact our data protection officer directly at any time with questions or suggestions concerning data protection.

4. Cookies

The Yoomind GmbH website uses cookies, which are text files stored by a browser. Many cookies contain a unique cookie ID that allows websites and servers to associate them with a specific browser.

You can prevent cookies through your browser settings and delete cookies already stored. Disabling cookies may mean that not all website functions remain fully available.

5. Collection of general data and information

Each visit to the website may generate general data and information that is stored in server log files.

6. Newsletter subscription

Users may subscribe to the Yoomind GmbH newsletter. A subscription can be cancelled at any time.

7. Newsletter tracking

Our HTML newsletters may contain tracking pixels used for log-file recording and analysis.

8. Contact via the website

When you contact us by email or through the contact form, we process the information you provide, in particular your name, company, email address, role or department, subject and message content, in order to handle and respond to your enquiry. The legal basis is your consent under Article 6(1)(a) GDPR and, where your enquiry concerns entering into or performing a contract, Article 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in appropriate business communication under Article 6(1)(f) GDPR.

For the technical delivery of contact enquiries, we use Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Email addresses, delivery metadata and message content are transmitted to Resend. Resend processes this data as a processor under a Data Processing Addendum. Processing may take place in the United States; according to Resend, transfers are safeguarded, among other mechanisms, by the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. Emails are dispatched through the Ireland region (eu-west-1), while account, log and other service data may still be processed in the United States.

Open and click tracking are disabled for these contact enquiries. We retain enquiries only for as long as necessary to process them and any subsequent communication, or as required by statutory retention obligations. Further information: https://resend.com/legal/privacy-policy, https://resend.com/legal/dpa and https://resend.com/legal/subprocessors.

9. Routine deletion and blocking of personal data

Personal data is processed and stored only for as long as required for its purpose or as prescribed by European or national law.

10. Rights of the data subject

Data subjects have the rights provided by law, including confirmation, access and a copy, rectification, erasure, restriction of processing, data portability and objection. They also have the right not to be subject to qualifying decisions based solely on automated processing, including profiling, and may withdraw consent at any time.

11. Data protection in applications and recruitment

Applicant data is processed to conduct the recruitment procedure. If no employment contract is concluded, application documents are automatically deleted two months after notification of rejection, unless legal obligations require otherwise.

12. Facebook

This website may integrate Facebook components. Facebook’s privacy policy at https://www.facebook.com/privacy/policy/ explains its collection, processing and use of personal data.

13. Google Analytics (with anonymisation)

This website may use Google Analytics with IP anonymisation. Further information is available at https://policies.google.com/privacy.

14. Google Ads

This website may use Google Ads. Further information is available at https://policies.google.com/privacy.

15. Instagram

This website may integrate Instagram components. Further information is available at https://privacycenter.instagram.com/policy/.

16. LinkedIn

This website may integrate components of LinkedIn, an online professional network that enables users to connect with existing and new business contacts.