Responsible Party / About Us
Our website address is: https://mint-secure.de/en/home-english/
Mint Secure GmbH
Pappelallee 78/79
10437 Berlin
Managing Director: Tim Philipp Schäfers
Cookies and Embedded Content from Other Websites
If you leave a comment on our website, this may constitute consent to store your name, email address, and website in cookies. This is a convenience feature so that you do not have to re-enter all this information the next time you leave a comment. These cookies are stored for one year.
Posts on this website may contain embedded content (e.g., videos, images, posts, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking services, and track your interaction with this embedded content—including your interaction with the embedded content—if you have an account and are logged in to that website.
Data Processing for Appointment Scheduling
Your data is processed to schedule appointments with employees of the data controller. The processing is based on your consent pursuant to Art. 6(1)(a) of the GDPR. By giving your consent, you also agree that your data may be transferred to Microsoft Ireland Operations Ltd. for its own purposes (“legitimate business operations”). You also agree that the data may be transferred to a third country in accordance with Article 49(1)(a) of the GDPR (see the specific notes on transfers to third countries).
Data Processing by Microsoft
A Data Processing Agreement (DPA) is in place between the data controller and Microsoft. However, Microsoft reserves the right to process your data for its own purposes within the scope of “legitimate business operations.” Please note that the data controller has no influence over this data processing by Microsoft.
As soon as Microsoft processes your personal data for its own purposes, Microsoft is considered an independent data controller pursuant to Article 4(7) of the GDPR and is itself responsible for compliance with data protection requirements. You can find more information about data processing by Microsoft here:
➡️ Microsoft Privacy Statement
Who receives your data?
Internally (at the data controller): Only the individuals with whom you have scheduled an appointment have access to your personal data.
Microsoft:
- As a data processor, Microsoft processes your data on behalf of the data controller.
-
As a separate data controller, Microsoft may use your data for its own “legitimate business purposes.”
Information on Transfers to Third Countries
Microsoft as a data processor:
Your data may be transferred to a third country. This transfer is based on standard data protection clauses pursuant to Article 46(2)(c) of the GDPR, which include additional safeguards for your data.
Microsoft as a data controller:
When Microsoft processes your data for “legitimate business purposes,” this may also take place in third countries such as the United States.
Important Note:
The level of data protection in the U.S. does not correspond to that of the EU. U.S. authorities have extensive access to corporate data, and there are insufficient legal remedies available to data subjects.
Therefore, you may not be able to enforce your data protection rights under the GDPR to the same extent in the U.S., even if appropriate safeguards under Article 46 of the GDPR are in place.
How Long We Store Your Data
When you post a comment, it is stored indefinitely, including metadata. This allows us to automatically recognize and approve follow-up comments instead of holding them in a moderation queue.
Comments
When visitors post comments on the website, we collect the data displayed in the comment form, as well as the visitor’s IP address and the user-agent string (which identifies the browser) to help detect spam.
An anonymized string created from your email address (also known as a hash) may be provided to the Gravatar service to check whether you are using it. You can find the Gravatar service’s privacy policy here: https://automattic.com/privacy/. Once your comment has been approved, your profile picture will be publicly visible alongside your comment.
Your Data Subject Rights / What Rights You Have Regarding Your Data
- Right of Access
: You may request access to your personal data that we process in accordance with Article 15 of the GDPR. - Right to Rectification
If the information concerning you is not (or is no longer) accurate, you may request a correction under Article 16 of the GDPR. If your data is incomplete, you may request that it be completed. - Right to erasure
: You may request the erasure of your personal data pursuant to Article 17 of the GDPR. - Right to Restriction of Processing
Under Article 18 of the GDPR, you have the right to request a restriction on the processing of your personal data. - Right to Data Portability
If the conditions of Article 20(1) of the GDPR are met, you have the right to have the data that we process automatically based on your consent or in fulfillment of a contract to have such data transferred to you or to a third party. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent under Art. 6(1), Sent. 1, lit. a) of the GDPR or on a contract under Art. 6(1), Sent. 1, lit. b) GDPR, but are justified under Article 6(1), first sentence, letter f) of the GDPR. The requirements of Article 20(1) of the GDPR are therefore not met in this respect. - Right to File a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right under Article 77(1) of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority of your choice. These include the data protection supervisory authorities with jurisdiction over the controller:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Phone: 030 138890
Website Analysis & Spam Protection
Visitor comments may be reviewed by an automated spam detection service.
We use a so-called on-premise installation of the web analytics software Matomo Analytics (“Matomo”) (matomo.org) on our website, a software product of InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo generates a visitor ID based on your operating system, browser, browser plugins, browser language, and IP address to distinguish between concurrent sessions. Sessions older than 30 minutes are not used for comparison. There is no recognition of users at a later time.
When you visit the pages of our website, the following data is stored
: – The user’s IP address, truncated by the last two bytes (anonymized)
– The pages visited and the time of the visit –
The website from which the user arrived at our website (referrer)
– Browser name, browser plugins, operating system, and screen resolution—
time spent on the
website—pages accessed from other pages on our website.
The data collected by Matomo is stored on a server in Germany. The data is not shared with third parties. We use the data to analyze our users’ browsing behavior and to obtain information about the use of specific components of our website. This enables us to continuously improve the user-friendliness of our website. Our legitimate interests pursuant to Art. 6(1)(f) of the GDPR are based on these purposes. By anonymizing the IP address, we take into account our users’ interest in the protection of their personal data. The data is never used to personally identify users of our website or to combine it with other data. The data is deleted as soon as it is no longer necessary for our purposes. In addition, you have the option to disable this analysis via your browser settings or you can use the opt-out option below.
Disable Matomo Analytics
[matomo_opt_out]
Current Status and Changes to This Privacy Policy
This Privacy Policy is currently in effect and is dated April 1, 2025.
