Privacy policy.

1. Controller

A data protection officer is not currently appointed. You can address privacy requests directly to the email address above.

2. General information on data protection

Protecting personal data is important to us. We treat your data confidentially and in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Telecommunications Digital Services Data Protection Act (TDDDG) and — where applicable — Swiss data protection law. This statement concerns processing on this website and in business communication with us.

3. Hosting and server logs

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When the website is accessed, the hosting provider processes technically necessary log data. This may include IP address, the date and time of access, the file requested, the volume of data transferred, the referrer URL, browser type and operating system.

The processing serves the secure, stable and error-free provision of the website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and economical operation of our online offering.

4. Cookies and consent management

We use our own consent solution to obtain consent for cookies and external services that are not technically necessary and to enable a later withdrawal. Your choice is stored locally in your browser. Technically necessary storage takes place on the basis of § 25(2) TDDDG. For all other access to your device, we obtain your prior consent pursuant to § 25(1) TDDDG. The subsequent processing of personal data is based on Art. 6(1)(a) GDPR.

You can change your choice at any time via the settings of the consent banner, or withdraw your consent by email to johannes@mindsmachines.ai.

5. Fonts

The website does not load font files from Google servers. Display uses locally available system fonts or locally provided fonts. No connection to Google Fonts is established.

6. Whitepapers, forms and HubSpot

To provide whitepapers and comparable content, we use forms from HubSpot. For users in the European Economic Area, the provider is HubSpot Ireland Limited, Dublin, Ireland. When you use the form, HubSpot processes in particular the contact and company data you enter, technical usage data and consent and evidence data.

The processing takes place to handle your request on the basis of Art. 6(1)(b) GDPR or — for voluntary information and marketing consent — on the basis of Art. 6(1)(a) GDPR. Where HubSpot processes data in third countries, appropriate safeguards such as standard contractual clauses and, where applicable, the EU-US Data Privacy Framework are used.

Further information can be found in the HubSpot privacy policy.

7. Newsletter, registrations and certificates of participation

If you register for a newsletter, a webinar or further information, we process the data you provide to carry out the registration and to send the requested content. The legal basis is your consent under Art. 6(1)(a) GDPR. Where a double opt-in procedure is used, we also store the registration and confirmation data in order to be able to prove the consent. You can withdraw your consent at any time with effect for the future.

On the learning pages of our AI academy you can request a personal certificate of participation as a PDF after completing a knowledge check or self-assessment. For this purpose we process the data you provide (name, email address, optionally company) as well as the name of the test and your result in order to create and deliver the document and to contact you about our training offers. The data is stored on our server and may be forwarded to our CRM system. The legal bases are Art. 6(1)(b) GDPR (creation of the confirmation) and Art. 6(1)(f) GDPR (business contact); you can object to being contacted at any time.

8. Analytics and marketing services

With your consent, we use the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The service helps us measure website visits, conversions and the impact of our LinkedIn advertising campaigns and build audiences for campaigns. In particular, URL, referrer, IP address, device and browser characteristics and timestamps may be transmitted to LinkedIn and linked there with a LinkedIn member account.

The LinkedIn Insight Tag is only loaded once you have consented to marketing services in the consent banner. The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can change your consent at any time via the cookie settings in the footer with effect for the future. When the tag is used, there may be joint controllership with LinkedIn under Art. 26 GDPR for certain data processing. Further information can be found in the LinkedIn privacy policy.

9. Contact and communication

If you contact us by form, email or phone, we process your information to handle the request and for possible follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the communication serves the initiation or performance of a contract. In other cases, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of business inquiries.

10. Processing of personal data in a B2B context

As part of business development and customer care, we may process names, business contact details, positions, companies and communication content. The data comes from you, from previous business contacts or from publicly accessible professional sources such as company websites and professional networks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in business development, communication and maintaining existing customer relationships. You can object to this processing at any time for reasons arising from your particular situation.

11. Data from consulting and AI projects

The processing of customer, project and content data within our consulting services or AI workflows is not the subject of this website privacy policy. Depending on the project, we act as controller, processor or provide technical services in an environment controlled by the customer. Details are governed in the respective contract, in a data processing agreement and — where necessary — in a list of the sub-processors used.

12. Storage period

We store personal data only for as long as is necessary for the respective purpose. We then delete or anonymise the data, unless statutory retention obligations or other legal grounds require further storage.

13. Your rights

Under the GDPR you have in particular the following rights:

• Access to your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future

For individuals in Switzerland, the rights under the Swiss Data Protection Act apply in addition.

14. Security

This website uses SSL/TLS encryption. We take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access.

15. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for our company is in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. Further information can be found at www.ldi.nrw.de.

16. Changes to this privacy policy

We adapt this privacy policy when legal, technical or organisational changes require it.

As of: 17 July 2026