Privacy Policy

Controller

This is a courtesy translation. In case of any discrepancy, the German version of this privacy policy is authoritative.

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Our approach

This website is deliberately built to collect as little data as possible. It sets no advertising or analytics cookies, embeds no third-party content, and performs no profiling. Fonts are served from our own server; no connection is made to Google Fonts or comparable services.

You can use this website without providing personal data. Personal data is only collected when you provide it yourself — for example via the contact form.

Hosting and delivery

This website is hosted and delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary connection data.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing the website securely, reliably and quickly, and in defending against attacks. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Transfers to the USA are based on the European Commission’s Standard Contractual Clauses and on the EU-US Data Privacy Framework.

Server log files

Each time a page is opened, the following data is processed:

• the address requested, and the date and time of access
• the volume of data transferred and confirmation of successful retrieval
• the browser type and version used
• the operating system used
• a truncated IP address

This data is technically necessary in order to deliver the website and to safeguard its security. It is not combined with other data sources and is deleted automatically after a short period. The legal basis is Art. 6 (1) (f) GDPR.

Contact form and email

If you write to us using the contact form or by email, we process the details you provide — name, email address, chosen topic and your message — solely in order to handle your inquiry and any follow-up questions.

The legal basis is Art. 6 (1) (b) GDPR where your inquiry relates to entering into or performing a contract, otherwise Art. 6 (1) (f) GDPR on the basis of our legitimate interest in responding to inquiries, together with Art. 6 (1) (a) GDPR on the basis of the consent you give in the form.

We retain your details until you ask us to delete them, withdraw your consent, or the purpose for storing them no longer applies. Mandatory statutory retention periods, in particular under commercial and tax law, remain unaffected.

Please do not use the form to send health data or other special categories of personal data within the meaning of Art. 9 GDPR. For confidential matters we are glad to arrange a personal conversation.

Spam protection via Cloudflare Turnstile

To protect the contact form against automated submissions we use Cloudflare Turnstile. This processes technical characteristics of your browser and device along with your IP address, in order to determine whether the submission comes from a human.

Turnstile does not use cookies for tracking purposes and does not build cross-site profiles. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in protection against misuse and spam.

Email delivery via Resend

To deliver your message to us and to send you an automatic acknowledgement, we use the service Resend (Plus Five Five, Inc., USA). The details you provide, including your email address, are transmitted to Resend and processed there for the purpose of delivery.

The legal basis is Art. 6 (1) (b) and (f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend; transfers to third countries are based on the European Commission’s Standard Contractual Clauses.

Audience measurement

We use Cloudflare Web Analytics to see how often our pages are opened. The service works without cookies, without fingerprinting and without storing personal data. Only aggregated statistics are produced; no conclusions can be drawn about individuals.

The legal basis is Art. 6 (1) (f) GDPR. As no information is stored on or read from your device, no consent under § 25 TDDDG is required.

Cookies

This website uses no analytics, marketing or tracking cookies. If you dismiss the notice about the German or English language version, that choice is stored locally in your browser (localStorage) only. It never leaves your device and is not read by us.

Encryption

For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognize an encrypted connection by the address bar of your browser beginning with “https://”.

Your rights

As a data subject you have the following rights:

• access to the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An informal message to info@mentalcollect.com is sufficient to exercise these rights.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is:

Changes to this policy

We update this privacy policy whenever changes to the website or to the technology we use make it necessary. The version published here applies in each case.