We take the protection of your personal data seriously. This privacy policy explains which personal data we process when you visit mondartig.com or contact us, for what purposes, on which legal basis and which rights you have under the EU General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:
Mondartig
Mahsa Sanati & Pourya Mazaher Fard
Mittelstr. 3A
16562 Hohen Neuendorf
Germany
Phone: +49 176 79800701
Email: [email protected]
You can find further details in our Impressum.
2. Hosting
This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. All website data, including form submissions, is stored on servers located in Germany. We have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR. Processing is based on our legitimate interest in the secure and reliable provision of our website (Art. 6(1)(f) GDPR).
3. Content delivery and security (Cloudflare)
To protect our website against attacks and to deliver it quickly, we use the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Requests to our website are routed through Cloudflare's servers, which process technical data such as your IP address, the requested page, the time of the request and your browser information. Cloudflare is certified under the EU-U.S. Data Privacy Framework, and we have concluded a data processing agreement including the EU Standard Contractual Clauses. The legal basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). More information: cloudflare.com/privacypolicy.
4. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption for all data transmitted between your browser and our server. You can recognise an encrypted connection by “https://” and the lock icon in your browser's address bar.
5. Server log files
When you visit our website, your browser automatically transmits information that is stored in server log files:
- IP address of the requesting device
- date and time of the request
- requested page or file and HTTP status code
- referrer URL (the page you came from)
- browser type, version and operating system
This data is used solely to operate the website, ensure its security and analyse errors. It is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after 14 days at the latest, unless they are needed to investigate a specific security incident.
6. Contact form, project brief form, email and phone
If you contact us via our contact form, our project brief form, by email or by phone, we process the data you provide (for example your name, email address, phone number, company, project details, budget and timeline) in order to answer your enquiry and, where applicable, to prepare an offer.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR).
Form submissions are stored in our website's content management system on our servers in Germany and may additionally be forwarded to us by email. We delete your data as soon as it is no longer required for the purpose for which it was collected — usually no later than 12 months after our last contact, unless a contract has been concluded or statutory retention periods (e.g. under commercial or tax law) require longer storage.
7. Cookies and local storage
Our website does not use cookies for tracking or advertising without your consent.
- Consent preference: when you accept or decline analytics in our cookie banner, your choice is saved in your browser's local storage so that we don't have to ask again. This storage is strictly necessary to respect your decision (§ 25(2) no. 2 TDDDG).
- Security cookie: pages with forms set a technically necessary “csrftoken” cookie that protects the forms against misuse (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR).
- Editor login: a session cookie is only set for our own team when logging into the content management system.
You can delete cookies and local storage in your browser settings at any time and change your consent decision using the “Cookie settings” link in the footer of every page.
8. Web analytics (only with your consent)
If we enable web analytics on this website, we use Google Analytics 4 and/or Google Tag Manager, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These tools are only loaded after you have given your consent in our cookie banner. They help us understand how visitors use our website so that we can improve it. IP addresses are shortened by Google within the EU. Data may also be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer. More information: policies.google.com/privacy.
9. Fonts and scripts
All fonts (Open Sans), icons and scripts used on this website are hosted on our own server. No connection to Google Fonts or other external content delivery networks is established when you load our pages.
10. Links to other websites and social networks
Our website contains links to external websites, for example to LinkedIn profiles and to the websites of our clients. These are ordinary links: no data is transferred to these providers until you click on a link. After that, the privacy policy of the respective provider applies.
11. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- the right of access (Art. 15 GDPR)
- the right to rectification (Art. 16 GDPR)
- the right to erasure (Art. 17 GDPR)
- the right to restriction of processing (Art. 18 GDPR)
- the right to data portability (Art. 20 GDPR)
- the right to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)
To exercise your rights, simply contact us using the details in section 1.
Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
www.lda.brandenburg.de
13. Changes to this privacy policy
We update this privacy policy whenever our website or the services we use change. The current version is always available on this page.