PRIVACY
POLICY

1. Data Controller

The entity responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and other applicable national data protection laws is:

metricminds GmbH
Ruesselsheimer Strasse 22
60326 Frankfurt am Main
Germany

Managing Director: Philip Weiss
Commercial Register: Amtsgericht Frankfurt am Main, HRB 50908
VAT ID: DE210581143

Phone: +49 69 759 3380
E-Mail: info@metricminds.com
Website: https://metricminds.com

2. General Information on Data Processing

2.1 Scope of Processing

We process the personal data of our users only to the extent necessary to provide a functional website and deliver our content and services. Processing generally takes place only with the user’s consent, except where prior consent cannot be obtained for practical reasons and processing is permitted by law.

2.2 Legal Bases (Art. 6 GDPR)

We rely on the following legal bases for processing personal data:

• Art. 6(1)(a) GDPR — Consent: where you have given your express consent to one or more specific purposes.
• Art. 6(1)(b) GDPR — Contract performance: where processing is necessary for the performance of a contract to which you are party, or to take pre-contractual steps at your request.
• Art. 6(1)(c) GDPR — Legal obligation: where processing is required to comply with a legal obligation to which we are subject.
• Art. 6(1)(d) GDPR — Vital interests: where processing is necessary to protect the vital interests of you or another natural person.
• Art. 6(1)(f) GDPR — Legitimate interests: where processing is necessary for the purposes of our legitimate interests or those of a third party, provided your interests or fundamental rights do not override those interests.

2.3 Data Retention and Deletion

Personal data are deleted or restricted as soon as the purpose of storage no longer applies. Storage beyond this point may occur where required by EU or national law. Data are also deleted or restricted once any statutory retention period prescribed by those laws expires, unless further retention is necessary to conclude or fulfil a contract.

3. Website Access and Server Log Files

3.1 Description and Scope

Each time our website is accessed, our system automatically collects data and information from the requesting device. The following data are collected:

• IP address of the user (anonymised before storage)
• Date and time of the access
• Referring website (if applicable)
• Pages accessed via our website
• Browser type and version, operating system
• Data volume transferred and HTTP status code

These data are stored in log files. They are not stored together with any other personal data of the user.

3.2 Legal Basis

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the technical security and proper operation of the website.

3.3 Retention Period

Data are deleted as soon as they are no longer necessary for the purpose for which they were collected. Session data are deleted when the session ends. Log files are deleted after a maximum of 7 days.

4. Cookies and Consent Management

4.1 What Are Cookies?

Cookies are small text files that are stored on your device by your browser when you visit a website. They allow the website to recognise your browser on return visits and to remember certain preferences or settings.

4.2 Categories of Cookies We Use

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the website to function. They cannot be switched off. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a functional website).
• Analytical / performance cookies: Allow us to count visits and traffic sources so we can measure and improve website performance. These are set only with your consent. Legal basis: Art. 6(1)(a) GDPR.
• Marketing / targeting cookies: Used to deliver more relevant advertising and to track the effectiveness of campaigns. Set only with your consent. Legal basis: Art. 6(1)(a) GDPR.

4.3 Cookie Consent

When you first visit our website, a cookie consent banner is displayed. By clicking “Accept All” you consent to analytical and marketing cookies in addition to strictly necessary ones. By clicking “Manage Preferences” you can select which categories you accept. By clicking “Reject All” you restrict cookies to strictly necessary ones only.

You can withdraw or change your consent at any time by clicking “Cookie Settings” in the footer of our website.

4.4 Browser Controls

You can also control cookie storage through your browser settings. Disabling cookies may affect the functionality of the website. Instructions for the most common browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Cookies and site permissions
• Safari: Preferences → Privacy → Manage Website Data

5. Contact Form and E-Mail Contact

5.1 Description and Scope

Our website provides a contact form for electronic enquiries. When you use it, the data you enter are transmitted to and stored by us. These data include:

• Name
• E-mail address
• Subject
• Message content

Your consent to the processing of these data is obtained as part of the submission process, with a reference to this Privacy Policy. Alternatively, you may contact us by e-mail; in that case, the data transmitted with the e-mail are stored by us.

5.2 Legal Basis

Where you have given your consent, the legal basis is Art. 6(1)(a) GDPR. For data transmitted by e-mail, the legal basis is Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). Where the enquiry relates to pre-contractual steps or contract performance, Art. 6(1)(b) GDPR additionally applies.

5.3 Retention Period

Data are deleted once the conversation with the user is complete and the subject matter has been conclusively resolved. Statutory retention obligations (e.g. under the German Commercial Code (HGB) or Fiscal Code (AO)) remain unaffected.

6. Integration of Third-Party Services

6.1 Vimeo

We use the video-hosting service Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. Videos embedded on our website are loaded only after you have given your consent via the cookie banner. When a video is played, data including your IP address are transmitted to Vimeo and may be transferred to the USA. We use Vimeo’s DNT (Do Not Track) parameter where available to limit tracking.

Legal basis: Art. 6(1)(a) GDPR (consent). For transfers to the USA: EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Vimeo Privacy Policy: https://vimeo.com/privacy

6.2 YouTube

We embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Videos on our website are loaded only after you have given your consent. When a video is played, data including your IP address may be transferred to Google and to the USA.

Legal basis: Art. 6(1)(a) GDPR (consent). For US transfers: Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Google / YouTube Privacy Policy: https://policies.google.com/privacy

6.3 Google Fonts

Our website uses Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Fonts are loaded from Google’s servers, which means your IP address is transmitted to Google each time you visit our website. This transfer may also occur to Google LLC servers in the USA.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in presenting a visually consistent and accessible website). For US transfers: Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Note: We are in the process of self-hosting our Google Fonts so that no data is transferred to Google’s servers. Once this is complete, this section will be updated accordingly.

Google Privacy Policy: https://policies.google.com/privacy

6.4 LinkedIn

We maintain a company page on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). When you visit our LinkedIn page, LinkedIn processes data as an independent controller. We have no influence over this processing.

LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy

6.5 Instagram

We maintain a profile on Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you visit our profile, Meta/Instagram processes data as an independent controller. We have no influence over this processing.

Instagram / Meta Privacy Policy: https://privacycenter.instagram.com/policy

6.6 Facebook — Joint Controllership

We maintain a Page on Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When you visit our Facebook Page, Meta processes data, including through the Page Insights function, in respect of which we act as joint controllers with Meta pursuant to Art. 26 GDPR. We have entered into the Page Controller Addendum with Meta, which governs the respective responsibilities of each party.

As joint controllers, users may exercise their GDPR rights against either party. We recommend contacting Meta directly for matters relating to Facebook infrastructure and data.

Facebook / Meta Privacy Policy: https://www.facebook.com/privacy/explanation

6.7 YouTube Channel (Social Presence)

We operate a YouTube channel (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you visit our channel, Google/YouTube processes data as an independent controller. We have no influence over this processing.

Google / YouTube Privacy Policy: https://policies.google.com/privacy

6.8 WordPress and Elementor

Our website is built on the WordPress content management system and uses the Elementor page builder. Both are self-hosted on our own server. They may set technically necessary cookies and process server-side data as part of page rendering. We do not use WordPress.com hosting; no personal data are shared with Automattic Inc. (the company behind WordPress.com) in connection with your visit to our website.

6.9 Web Analytics

At the time of publication of this Privacy Policy, no third-party web analytics service (such as Google Analytics) is active on our website. If we introduce such a service in the future, this Privacy Policy will be updated to include the provider name, legal basis, data transfer safeguards, and opt-out options before the service is activated.

7. Your Rights as a Data Subject

Where your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:

7.1 Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you are being processed by us and, if so, to receive a copy of those data together with supplementary information (including the purposes of processing, categories of data, recipients, and retention periods).

7.2 Right to Rectification (Art. 16 GDPR)

You have the right to obtain the rectification of inaccurate personal data and the completion of incomplete personal data concerning you without undue delay.

7.3 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to obtain the restriction of processing of your personal data where one of the conditions in Art. 18(1) GDPR is met — for example, if you contest the accuracy of the data or if processing is unlawful and you oppose erasure.

7.4 Right to Erasure / “Right to be Forgotten” (Art. 17 GDPR)

You have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17(1) GDPR applies, provided the processing is not necessary for the purposes referred to in Art. 17(3) GDPR (e.g. compliance with a legal obligation).

7.5 Right to Notification (Art. 19 GDPR)

Where you have exercised your right to rectification, erasure, or restriction of processing, we are obliged to notify each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients upon request.

7.6 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format, and to transmit those data to another controller, where the processing is based on consent or a contract and is carried out by automated means.

7.7 Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(e) or Art. 6(1)(f) GDPR. We will cease processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have an unconditional right to object at any time, with immediate effect for the future.

7.8 Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

7.9 Right to Lodge a Complaint (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority competent for metricminds GmbH (registered in Hesse, Germany) is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

Phone: +49 611 1408-0
E-Mail: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de

8. Data Security

Our website uses SSL/TLS encryption for all data transmitted between your browser and our server. This is indicated by the padlock icon and “https://” in your browser’s address bar.

We implement appropriate technical and organisational measures (TOMs) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously reviewed and updated in line with technological developments.

9. Updates to This Privacy Policy

This Privacy Policy is current as of 2026. As we develop our website and services, or in response to changes in law or regulatory guidance, it may be necessary to update this Privacy Policy. The current version is always available at:

https://metricminds.com/privacy-policy/

10. Contact for Data Protection Enquiries

For any questions about the processing of your personal data, to exercise your rights, or to submit a complaint, please contact us at:

metricminds GmbH — Data Protection
Ruesselsheimer Strasse 22
60326 Frankfurt am Main
Germany

E-Mail: info@metricminds.com
Phone: +49 69 759 3380