Privacy Policy

With this privacy policy, we aim to inform you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as “data”). Personal data includes all information that relates to you personally, such as your name, address, email address, or user behavior. This privacy policy applies to all data processing activities we undertake, both as part of our core business operations and for the online media we provide.

Data Controller
The responsible party for data processing is:
Alisha Frei
Calle Beatriz Galindo 12
28521 Rivas-Vaciamadrid
Spain
+4915121723905
hallo@themindfulgrowthproject.de
https://themindfulgrowthproject.de/en/legal-notice

Processing of Your Data as Part of Our Core Business Activities
If you are our customer or business partner, or if you are interested in our services, the type, scope, and purpose of processing your data depend on the contractual or pre-contractual relationship between us. Accordingly, the data we process includes all information provided by you that is necessary for the utilization of contractual or pre-contractual services and for responding to your inquiries or fulfilling the contract between us.

Unless otherwise stated in this privacy policy, the processing and transfer of your data to third parties are limited to what is necessary and appropriate for responding to your inquiries, fulfilling the contract between you and us, protecting our rights, and complying with legal obligations. We will inform you of the required data prior to or during its collection.

If we engage third-party service providers to deliver our services, their respective privacy policies will apply.

Data Categories:

  • Account Data (e.g., names, addresses)
  • Payment Data (e.g., bank details, invoices)
  • Contact Data (e.g., email addresses, phone numbers, postal addresses)
  • Contract Data (e.g., contract subject matter, contract duration)

Affected Individuals:

  • Interested parties, business, and contractual partners

Purpose of Processing:

  • Execution of contractual services, communication, response to inquiries, office, and organizational processes

Legal Basis:

  • Fulfillment of contracts and pre-contractual inquiries (Art. 6(1)(b) GDPR)
  • Compliance with legal obligations (Art. 6(1)(c) GDPR)
  • Legitimate interest (Art. 6(1)(f) GDPR)

Your Rights Under the GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights, which you can exercise at any time by contacting the data controller mentioned in Section 1 of this privacy policy:

  • Right to Access: You have the right to request information about whether and which data we process about you.
  • Right to Rectification: You have the right to request the correction of incorrect data or the completion of incomplete data.
  • Right to Erasure: You have the right to request the deletion of your data.
  • Right to Restriction of Processing: In certain cases, you have the right to request that we restrict the processing of your data.
  • Right to Data Portability: You have the right to request that we transfer your data to you or another data controller in a structured, commonly used, and machine-readable format.
  • Right to Lodge a Complaint: You have the right to file a complaint with a supervisory authority. The responsible authority is the one located at your usual place of residence, workplace, or our business location.

Right to Withdraw Consent
You have the right to withdraw your consent to data processing at any time.

Right to Object
You have the right to object at any time to the processing of your data based on our legitimate interest (Art. 6(1)(f) GDPR). If you object, please provide your reasons. We will then cease processing your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests and rights.

Regardless of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.
Please direct your objection to the contact details of the data controller provided above.

When Do We Delete Your Data?
We delete your data when it is no longer needed or when you request us to do so. This means that, unless otherwise stated in the individual data protection notices of this privacy policy, we delete your data:

  • When the purpose for processing has ceased, and the respective legal basis specified in the data protection notices no longer applies, for example:
    • After the termination of the contractual or membership relationship between us (Art. 6 Abs. 1 lit. a DSGVO)
  • When our legitimate interest in further processing or storing your data no longer exists (Art. 6(1)(f) GDPR),
  • When you exercise your right to withdraw consent and no other legal basis for processing applies under Art. 6(1)(b-f) GDPR,
  • When you exercise your right to object, and there are no overriding legitimate grounds for retaining the data.

If we are required to retain (certain parts of) your data for other purposes, such as compliance with legal retention obligations (typically six years for business correspondence and ten years for accounting records), the establishment, exercise, or defense of legal claims arising from contractual relationships (up to four years), or to protect the rights of another natural or legal person, we will delete (the relevant parts of) your data only after these periods have expired. Until the end of these periods, we will restrict the processing of this data to these specific purposes (fulfillment of retention obligations).

Cookies
Our website uses cookies. Cookies are small text files consisting of numbers and letters that are stored on the device you are using. Cookies are primarily used to exchange information between your device and our website, such as language settings, login status, or the point at which a video was watched.

When visiting our website, two types of cookies are used:

  • Temporary Cookies (Session Cookies): These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. Session cookies are deleted when you log out or close your browser.
  • Persistent Cookies: Persistent cookies remain stored even after you close your browser. This enables our website to recognize your device when you return. These cookies may store information such as language settings or login details. They can also be used to document and save your browsing behavior. This data can be used for statistical, marketing, and personalization purposes.

In addition to the classification above, cookies can also be distinguished based on their purpose:

  • Necessary Cookies: These are essential for the operation of our website, such as storing logins or shopping cart items during your session, or cookies set for security reasons.
  • Statistics, Marketing, and Personalization Cookies: These cookies are used for analytical purposes or to measure reach. “Tracking” cookies, for example, can store information on search terms entered or the frequency of page views. They may also create user profiles based on browsing behavior (e.g., viewing specific content, using functions, etc.), which are then used to display content tailored to potential interests.

If we use services that involve storing cookies on your device for statistical, marketing, or personalization purposes, we will inform you separately in the relevant sections of this privacy policy or as part of obtaining your consent.

Data Categories:

  • Usage Data (e.g., access times, visited webpages)
  • Communication Data (e.g., device information, IP address)

Affected Individuals:

  • Users of our online offerings

Purpose of Processing:

  • Displaying our websites, ensuring their operation, improving our online offerings, communication, and marketing

Legal Basis:

  • Legitimate Interest (Art. 6(1)(f) GDPR): If we do not obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, especially its content and functionalities. You can object to the use of cookies set within the scope of our legitimate interest via your browser’s security settings. There, you can specify whether you wish to accept no cookies at all, accept them only upon request, or have them deleted after each session. If cookies for our website are disabled, certain features may not function fully.
  • Consent (Art. 6(1)(a) GDPR): If we ask for your consent before setting specific cookies during your visit to our website, your consent serves as the legal basis for processing these cookies. We inform you about the specific cookies we use as part of the consent process. If you do not grant this consent, only technically necessary cookies that are essential for the proper functioning and display of our website in your browser will be set. You can revoke your consent at any time.

Web Hosting
We use a service provider to host our website, storing our webpages on their servers and making them available online (hosting). The provider may process all data transmitted by your browser during the use of our website. This includes, in particular, your IP address, which the provider requires to deliver our online content to your browser, as well as any inputs you make on our website. Additionally, the provider we use may collect:

  • The date and time of access to our website,
  • Time zone difference to Greenwich Mean Time (GMT),
  • Access status (HTTP status),
  • Data volume transferred,
  • The Internet service provider of the accessing system,
  • The browser type and version used,
  • The operating system used,
  • The webpage from which you may have been referred to our website,
  • The pages or subpages you visit on our website.

The aforementioned data is stored as log files on the provider’s servers. This is necessary to ensure the stability and security of our website’s operation.

Affected Data:

  • Content Data (e.g., posts, photos, videos),
  • Usage Data (e.g., access times, visited webpages),
  • Communication Data (e.g., device information, IP address).

Affected Individuals:

  • Users of our website.

Purpose of Processing:

  • Displaying our website and ensuring its operation.

Legal Basis:

  • Legitimate Interest, Art. 6(1)(f) GDPR.

Web Hosting Provider We Use:
Raidboxes
Service Provider: Raidboxes
Website: Hafenstraße 32, 48153 Münster, Germany
Privacy Policy: https://raidboxes.io/

Contact
If you contact us via email, social media, phone, fax, mail, our contact form, or any other method, and provide personal data such as your name, phone number, or email address, or any additional information about yourself or your inquiry, we process this data to respond to your request within the scope of our pre-contractual or contractual relationships.

Affected Data:

  • Master Data (e.g., names, addresses),
  • Contact Data (e.g., email address, phone number, mailing address),
  • Content Data (e.g., texts, photos, videos),
  • Contract Data (e.g., contract details, contract duration).

Affected Individuals:

  • Prospective customers, clients, business partners, and contractual partners.

Purpose of Processing:

  • Communication and responding to inquiries, as well as office and organizational procedures.

Legal Basis:

  • Performance of a contract or pre-contractual inquiries, Art. 6(1)(b) GDPR,
  • Legitimate Interest, Art. 6(1)(f) GDPR.

Online Advertising
We use services for displaying online advertisements. Through these services, specific user data is collected using cookies or pixels. This includes information such as the referring website that directed you to our online presence, the pages of our website you accessed, how long you visited them, and any interactions you made. Additionally, data regarding your browser, computer system, and device type may be collected. Depending on the service provider, demographic information such as age or gender may also be recorded as pseudonymous values. If you have consented to the collection of your location data, this information may also be processed.

To collect and store this data, the respective service places a cookie or a pixel on your device, which also records your assigned IP address. However, this IP address is shortened using an IP masking process, so it cannot be directly associated with your visit to our website. Generally, no clear data such as names or email addresses are stored when using these services. This only occurs if you are a member of a social network offering one of the services mentioned below and your profile is linked with the aforementioned data.

The data collected by the service is analyzed to generate a statistical report on the number of visitors driven to our site by advertisements and the success of the ad campaigns. These reports include information such as the total number of users redirected to our site via ads, details about the devices and browsers used, user locations, and the times at which the ads were clicked. The reports, however, do not contain any information that could personally identify you as a user of our site.

Please note that depending on the location of the service provider, the data collected by the service may be transferred to and processed outside the European Union. In such cases, there is a risk that the data protection standards required by the GDPR may not be maintained, and the enforcement of your rights may be hindered or made more difficult.

Affected Data:

  • Usage Data (e.g., access times, visited webpages),
  • Communication Data (e.g., device information, IP address).

Affected Individuals:

  • Users of our online services.

Purpose of Processing:

  • Measuring reach, evaluating campaign success, remarketing, as well as interest- and behavior-based marketing.

Legal Basis:
If we request your consent before using the respective service, this serves as the legal basis (Art. 6(1)(a) GDPR). Otherwise, we rely on our legitimate interest in directing visitor traffic to our website, analyzing this traffic, and using this data to continuously improve the functionality, offerings, and user experience of our online presence (Art. 6(1)(f) GDPR).

We use the following service providers for online advertising:

  1. Google AdSense
  2. Google Ads
  3. Grow by Mediavine

Newsletter

We regularly send out a newsletter to inform our customers, business partners, and interested parties about our offers and related updates. You can subscribe to our newsletter on our website and consent to receiving it as part of the registration process.

When you sign up for our newsletter, providing your email address is mandatory. This email address is stored to enable us to send you the newsletter. Providing additional information such as your title or name is optional and is used to address you personally.

Upon registering for the newsletter, you will receive a confirmation email at the email address provided during registration, following a double opt-in procedure. This email contains a link. By clicking this link, you confirm your consent to receiving the newsletter. This ensures that your email address has not been misused by a third party during registration. For the same reason, we store the date and time of registration as well as the IP address assigned to you during registration. The aforementioned data will not be shared with third parties.

Evaluation of User Behavior

If you have consented, we analyze your user behavior when sending the newsletter. Our newsletters contain tracking pixels and tracking links. These allow us to determine if and when you opened the newsletter and which links within it you clicked.

Purpose: Statistical analysis to measure the success or failure of our newsletter campaigns.
Legal Basis: The processing of your data is based on your consent (Art. 6(1)(a) GDPR).
Revocation: You may withdraw your consent to receive the newsletter at any time through the options provided above.
Deletion: Your data will be deleted once you withdraw your consent.

Affected Data:

  • Content Data (e.g., posts, photos, videos)
  • Usage Data (e.g., access times, clicked links)
  • Communication Data (e.g., device information, IP address)

Affected Individuals: Users of our website.
Purpose of Processing: Delivering our website, ensuring its functionality.
Legal Basis: Consent (Art. 6(1)(a) GDPR); legitimate interest (Art. 6(1)(f) GDPR).

Data Deletion:

  • If you do not click the confirmation link in the double opt-in email within one month, your email address will be deleted.
  • If you unsubscribe from our newsletter, your data will be deleted immediately.

Revocation:
You can revoke your consent to receive the newsletter and unsubscribe at any time via:

  • Clicking the link provided in the newsletter.
  • Using the contact details provided in the legal notice of our website.

Service Provider for Newsletter Delivery:

Affiliate Programs and Affiliate Links

We use affiliate links and/or other forms of affiliate references on our website, such as search boxes, widgets, or discount codes. These links and references lead you to offers and services provided by third parties. If you click on one of these links or use one of these offers, we may receive a commission or other benefit from the respective third party.

To ensure we receive our commission, the respective third party must be informed that you used an affiliate link on our website. This requires tracking affiliate links and associating them with transactions or other actions, such as purchases. This process is necessary for billing purposes with the third party. The data collected during this process is stored until the final settlement is completed.

To establish a link between the affiliate link, the transaction, and you as the user, our affiliate links may include certain information. This information can be stored in the link itself or in a cookie and may include:

  • The referring website (referrer),
  • An online identifier of our website,
  • An online identifier of the respective offer,
  • The type of affiliate link,
  • The type of offer,
  • An online identifier of the respective user,
  • The time of link usage.

Affected Data:

  • Usage Data (e.g., previously visited websites, usage times, interest in content),
  • Transaction Data (e.g., duration, customer category, contract details),
  • Communication and Metadata (e.g., IP address, device or system information).

Purpose of Processing: To determine which affiliate links embedded on our website are used by our visitors.
Legal Basis:

  • Consent (Art. 6(1)(a) GDPR).
  • Contract performance and pre-contractual inquiries (Art. 6(1)(b) GDPR).
  • Legitimate interest (Art. 6(1)(f) GDPR).

Revocation Options:

  • You can disable interest-based advertising by setting preferences at http://www.aboutads.info/choices.
  • You can prevent the storage of cookies by adjusting your browser settings. Cookies that have already been set can be deleted at any time.

Affiliate Service Providers We Use:

  1. Amazon Partner Program

Web Analytics and Statistics

To track and statistically analyze visitor traffic on our website, we use web analytics services. These services collect data such as the website from which you arrived at our website (so-called referrers), the pages you accessed, how long you stayed on our pages, and which interactions you performed there. In addition, data regarding the browser, computer system, and device type you used are collected. Demographic information, such as age or gender, may also be collected as pseudonymous values. If you have consented to the collection of your location data, depending on the provider, this may also be processed.

To collect and store this data, the web analytics service we use typically sets a cookie on your device, which also collects your associated IP address. However, this IP address is truncated using a process known as IP masking, ensuring that it cannot be associated with your visit to our website. No personal data, such as names or email addresses, are stored. Neither we nor the service provider have knowledge of the identities of the visitors to our website.

However, the service provider may use cookies to create pseudonymous usage profiles based on data from the use of different devices.

Please note that depending on the location of the service provider listed below, the data collected through this service may be transferred and processed outside of the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be adhered to, and the enforcement of your rights may be more difficult or even impossible.

Affected Data:

  • Usage Data (e.g., access times, clicked pages)
  • Communication Data (e.g., information about the device used, IP address)

Affected Individuals:

Users of our online services

Purpose of Processing:

Reach measurement, campaign success tracking, remarketing, as well as interest-based and behavior-based marketing

Legal Basis:

If we have requested your consent before using the respective service, this serves as the legal basis (Art. 6(1)(a) GDPR). Otherwise, we use the service based on our legitimate interest in analyzing the traffic to our website to continuously improve its functions, offerings, and user experience (Art. 6(1)(f) GDPR).

We Use the Following Web Analytics Services:

  1. Google Analytics 4
    • Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
    • EU Location: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
    • Website: https://marketingplatform.google.com/intl/de/about/analytics/
    • Privacy Policy: https://policies.google.com/privacy?hl=de
    • Data Transmission Note for Google Analytics Servers: When you access our website within the EU (based on your IP address’ geographic location), the associated IP address is collected exclusively through servers within the EU and used for geolocation purposes, then immediately deleted. It is neither logged nor used otherwise. The remaining measurement data is sent to Google Analytics servers for analysis.

Opt-Out Option: If you do not want your data to be used by Google Analytics, you can install an opt-out plugin, which will prevent your data from being collected on our website in the future. This plugin is available here: https://tools.google.com/dlpage/gaoptout?hl=de.

  1. Jetpack

Third-Party Plugins We Use

We have integrated plugins on our website in the form of “social media buttons” from the providers we use. You can identify which plugin belongs to which provider by the respective logo on the plugin. When you visit a page on our website that contains such a plugin, a connection is automatically established between your browser and the servers of the respective provider, and a cookie is set on your device by the provider.

Data transmission can occur even if you do not have an account with the respective social network provider or if you are not logged into your account at the time of visiting our website. In addition, data is transferred to the provider when you interact with the respective social plugin (e.g., by clicking the “Like” button on Facebook or the “Re-Tweet” button on Twitter).

Please note that depending on the location of the service provider listed below, the data described here may be transferred and processed on servers outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be adhered to, and the enforcement of your rights may be more difficult or impossible.

Affected Data:

  • Usage Data (e.g., access times, clicked pages)
  • Communication Data (e.g., information about the device used, IP address)

Affected Individuals:

Users of our website

Purpose of Processing:

Displaying our website, offering content, ensuring the functionality of our website

Legal Basis:

Consent via cookie consent banner (Art. 6(1)(a) GDPR), legitimate interest (Art. 6(1)(f) GDPR)

We Use the Following Plugins:

  1. Google (Invisible) reCAPTCHA

Our Online Presence on Social Networks

We maintain online presences within the social networks listed below. When you visit any of these presences, the respective provider collects and processes the data detailed below. Typically, this data is collected for advertising and market research purposes and used to create user profiles. These profiles may store data regardless of the device you use. This is especially the case if you are a member of the respective platform and logged in. The providers may use these user profiles to display interest-based advertising. You have the right to object to the creation of user profiles. To exercise this right, you must contact the respective provider directly.
If you have an account with any of the listed providers and are logged in while visiting our website, the respective provider may collect data about your usage behavior on our website. To prevent such data association, you can log out of the provider’s service before visiting our site.
The purpose and extent of the data collection by the provider can be found in the respective privacy policies of the providers, which are provided below.

Please note that depending on the provider’s country of residence, the data collected via their platform may be transferred and processed outside of the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained, and enforcing your rights may be more difficult or even impossible.

Affected Data:

  • Identification and contact data (e.g., name, address, phone number, email address)
  • Content data (e.g., posts, photos, videos)
  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., information about the device used, IP address)

Processing Purpose:
Communication and marketing, tracking, and analysis of user behavior.

Legal Basis:

  • Consent, Article 6(1) lit. a GDPR
  • Legitimate interest, Article 6(1) lit. f GDPR

Right to Object:
For the respective options to object (opt-out), please refer to the following links from the providers.

We maintain online presences on the following social networks:

  1. Facebook
  2. Instagram
  3. Pinterest

Content Services

We use specific services to display content or graphics (videos, images, music, fonts, maps) on our website. The services we use process the IP address assigned to you at the time of your visit to our website, as this is necessary for displaying the respective content in your browser. Additionally, the providers of these services may set further cookies on your device, through which information about your usage behavior, interests, the device used, and the browser used, as well as the time and duration of your session, is collected. These data are regularly used by the providers for analysis, statistics, and marketing purposes. Furthermore, this information may also be combined with data from other sources. This is particularly true if you have an account with the service provider and are logged in at the time of the session.
Please note that depending on the service provider’s country of residence, the data may be transferred and processed on servers outside of the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained, and enforcing your rights may be more difficult or even impossible.

Affected Data:

  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., device information, IP address)

Affected Individuals:
Users of our website

Processing Purpose:
Displaying our website, offering content, ensuring the operation of our website.

Legal Basis:

  • Consent via cookie consent banner, Article 6(1) lit. a GDPR
  • Legitimate interests, Article 6(1) lit. f GDPR

We use the following content services:

  1. YouTube
    We use components from YouTube on this website to embed videos, so they can be played in your internet browser when you visit our website. During your visit to our website, both YouTube and Google are informed about which page or subpage you have visited by transmitting your IP address to Google’s external servers in the USA. This information is transmitted regardless of whether you actually view or click the displayed videos or whether you are logged into your YouTube or Google account. This information is collected and linked to your Google account if you are logged in when you visit our website.

Security Measures

We implement technical and organizational security measures in accordance with the current state of technology to comply with data protection laws and to protect your data from accidental or intentional manipulation, partial or total loss, destruction, or unauthorized access by third parties.

Current Status and Changes to this Privacy Policy

This privacy policy is currently valid and was last updated in November 2024. Due to changes in legal or regulatory requirements, it may be necessary to adjust this privacy policy.

This privacy policy was created using the privacy policy generator from SOS Recht. SOS Recht is an offering from Mueller.legal Attorneys at Law, based in Berlin.