Privacy policy

Controller within the meaning of the GDPR:

Collective Brain GmbH
Kattrepelsbrücke 1
20095 Hamburg, Germany
Email: hi@mr-site.com

1. Principle

This website is statically generated, without user accounts. We only collect personal data if you actively submit it to us (contact or order form, email) or if you expressly consent to measurement on our ad landing pages (section 5). Without your consent, this website sets no cookies. For reach measurement we use a self-hosted, cookieless method that does not identify you (section 5a); tracking services that require consent load only after you agree.

2. Hosting

This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (servers located in Germany). When you visit the website, the host processes technically necessary connection data (IP address, time, requested resource) in server log files. Legal basis: Art. 6(1)(f) GDPR.

3. Contact and order forms

If you use our forms, the submitted data (company, name, email address, message) is transmitted to us by email via the form relay service Web3Forms and is not stored on the website. This may involve a transfer to third countries (including the USA), safeguarded by EU standard contractual clauses. Legal basis: Art. 6(1)(b) GDPR.

3a. Chat assistant

The Site Assistant on this website runs entirely in your browser. Your chat input is not transmitted to any server and is not stored.

4. Payment processing

For subscriptions we use the payment provider Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). Stripe's privacy policy applies in addition. Legal basis: Art. 6(1)(b) GDPR.

5. Meta pixel (consent only)

On this website we use the Meta pixel of Meta Platforms Ireland Ltd. (Dublin, Ireland) to measure whether our ads on Facebook and Instagram work. The pixel loads only after you consent via the notice at the bottom of the page; without consent, no Meta script is loaded and no cookie is set. With consent, Meta processes connection and event data (page viewed, events such as opening the booking page or submitting the questionnaire, cookie identifiers), including in the USA; the transfer is safeguarded by the EU-US Data Privacy Framework and standard contractual clauses. For the collection and transmission we are jointly responsible with Meta (Art. 26 GDPR); Meta is responsible for the further processing. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future by deleting this site's stored data in your browser and choosing "Essential only" on your next visit.

The details from the questionnaire on the ad landing pages (trade, first name, ZIP code, company name, email address, phone number, requested services) are transmitted to us as described in section 3 via Web3Forms, so that we can build the requested website draft and arrange the call. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request).

5a. Reach measurement with Umami (no cookies)

For reach measurement we use the analytics software Umami, which we run ourselves (analytics.collectivebrain.de). Umami sets no cookies and does not access information stored on your device. It stores only aggregated data without personal reference (page viewed, referring page, browser and device type, country); full IP addresses are not stored and visits are not tracked across websites. Delivery runs through the content delivery network of Cloudflare, Inc. (USA) as a technical service provider; your IP address may be transferred to the USA, safeguarded by the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR (our interest in statistical analysis of how our website is used without burdening visitors).

6. Online booking (Google Calendar)

For appointment booking we embed the appointment scheduling feature of Google Calendar, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The calendar is embedded solely on our booking pages and loads when those pages open, since booking is what those pages are for; no Google service loads on any other page. When loading and booking, connection data and your booking details (name, email address, phone number, chosen slot) are transmitted to Google and stored in our calendar. Legal basis: Art. 6(1)(b) GDPR (scheduling at your request). Data may be transferred to the United States; Google LLC is certified under the EU-US Data Privacy Framework. See Google's privacy policy at policies.google.com/privacy. If you prefer not to load the calendar, you can always reach us via the form described in section 3 or by email.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), as well as the right to lodge a complaint with a supervisory authority.