1) Introduction and contact details of the controller

1.1

We are pleased that you are visiting our website and thank you for your interest.
In the following, we will inform you about how we handle your personal data when you use our website.
Personal data is all data with which you can be personally identified.

1.2

Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):

Cell Mind GmbH
Mühlenstraße 12, 87647 Kraftisried, Deutschland
Tel.: +49 170 3213519
E-Mail: roger.koehler@cellmind.tech

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 Server-Logfiles

When using our website for purely informational purposes (without registration or transmission of information), only data that your browser automatically sends to our server (so-called “server log files”) is collected. This data is required for the technical provision of the website:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (anonymized if applicable)

This processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the stability and functionality of the website. The data will not be passed on or used in any other way unless there are specific indications of unlawful use.

2.2 SSL/TLS-Encryption

Our website uses SSL or TLS encryption for the secure transmission of personal data. You can recognize an encrypted connection by “https://” and the lock symbol in the browser line.

3) Hosting & Content-Delivery-Network

Our website is operated by a hosting provider that provides its services exclusively on servers within the European Union (EU).
All data collected is processed on these servers.

We have concluded an order processing contract with the provider, which guarantees data protection and prohibits unauthorized disclosure of the data.

4) Contact Forms

Personal data is collected when you contact us (e.g. via contact form or email).
The specific data collected can be seen from the respective contact form.

Legal basis:

• Art. 6 Abs. 1 lit. f GDPR(Legitimate interest in the processing of inquiries)
• If the request is aimed at concluding a contract: Art. 6 para. 1 lit. b GDPR

Once the request has been completed, the data will be deleted, provided there are no statutory retention obligations.

5) Page functionalities

Microsoft Teams

We use for online meetings, video conferences and webinars:

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

Data collected:

• Login data (name, e-mail, password, telephone number if applicable)
• Session data (topic, participant IP, device information)
• Image and sound recordings and chat histories (if activated)

Legal bases:

• Art. 6 Abs. 1 lit. b GDPR(contractual necessity)
• Art. 6 Abs. 1 lit. a GDPR(Consent, revocable)
• Art. 6 Abs. 1 lit. f GDPR(legitimate interest in holding online meetings)

Microsoft is bound by the EU-US Data Privacy Framework, which ensures compliance with European data protection standards

6) Rights of the data subject

6.1 Rights of data subjects

The applicable data protection law grants you the following rights vis-à-vis the controller:

• Art. 15 GDPR– Right to information
• Art. 16 GDPR– Right to rectification
• Art. 17 GDPR– Right to erasure
• Art. 18 GDPR– Right to restriction of processing
• Art. 19 GDPR– Right to be informed
• Art. 20 GDPR– Right to data portability
• Art. 7 Abs. 3 GDPR– Right to revoke consents granted
• Art. 77 GDPR– Right to lodge a complaint with a data protection supervisory authority

6.2 Right of objection

If we process your personal data on the basis of our legitimate interest, you have the right to object to this processing at any time.

If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds which override your rights and freedoms.

If we process your data for direct marketing purposes, you can object to this at any time. In this case, your data will be deleted immediately.

7) Duration of storage of personal data

The storage period of personal data depends on the respective legal basis and the purpose of processing:

• Art. 6 Abs. 1 lit. a GDPR(consent): Storage until revocation
• Art. 6 Abs. 1 lit. b GDPR(fulfillment of contract): Storage until the expiry of statutory retention periods
• Art. 6 Abs. 1 lit. f GDPR(legitimate interest): Storage until the right to object is exercised in accordance with Art. 21 GDPR

If personal data is no longer required for the original purpose, it will be deleted.