Skip to content

Privacy notice

This notice explains the nature, scope and purpose of the processing of personal data (“data”) within this online offering and the websites, functions and content connected with it. For the terms used we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

1. Controller

Brandmonks GmbH
Am Brand 41
D-55116Mainz
Managing Director: Morten Babakhani
Telephone: +49 6131 62 35 610
Email: info@brandmonks.de

Responsible for data processing is Morten Babakhani, who can be reached at datenschutz@brandmonks.de.

2. Types of data processed

  • Master data (for example names and addresses)
  • Contact data (for example email addresses and telephone numbers)
  • Content data (for example text entered into forms)
  • Contract data (for example subject matter, term, customer category)
  • Usage data (for example pages visited and times of access)
  • Meta and communication data (for example device information and IP addresses)

Special categories of data (Article 9(1) GDPR) are as a rule not processed through this online offering, unless users submit them to the processing themselves, for example by entering them into a form.

Data subjects: visitors to and users of this online offering, referred to together as “users”.

3. Purpose of the processing

  • Providing the online offering, its content and its functions
  • Answering enquiries and communicating with users
  • Arranging and holding demonstration and consultation appointments
  • Security measures

4. Applicable legal bases

In accordance with Article 13 GDPR we set out the legal bases of our processing. Where the legal basis is not expressly named in this notice, the following applies: the legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR; the legal basis for processing in order to perform our services, to carry out contractual measures and to answer enquiries is Article 6(1)(b) GDPR; the legal basis for processing in order to comply with legal obligations is Article 6(1)(c) GDPR; and the legal basis for processing in order to protect our legitimate interests is Article 6(1)(f) GDPR.

5. Security measures

In accordance with Article 32 GDPR, and taking into account the state of the art, the cost of implementation and the nature, scope, circumstances and purposes of the processing, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. These include in particular the transmission of this website over an encrypted connection (TLS), control of access to data and systems, the granting of access rights on a need-to-know basis, and procedures for upholding the rights of data subjects and for deleting data.

6. Working with processors and third parties

Where, in the course of our processing, we disclose data to other people or companies, transmit it to them or otherwise grant them access, this only happens on the basis of a statutory permission, your consent, a legal obligation or our legitimate interests. Where we commission third parties to process data, this happens on the basis of a data processing agreement under Article 28 GDPR.

7. Transfers to third countries

Your data is as a rule processed within the European Union. Where data is processed in a third country, this only happens where the legal requirements are met, in particular on the basis of an adequacy decision of the European Commission or appropriate safeguards under Articles 44 et seq. GDPR.

8. Hosting

This website is operated at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The provider processes the data arising when the pages are accessed on our behalf; a data processing agreement under Article 28 GDPR is in place. The processing takes place in a data centre in Germany. The legal basis is our legitimate interest in providing this online offering securely and reliably, Article 6(1)(f) GDPR.

9. Access data and log files

On the basis of our legitimate interests under Article 6(1)(f) GDPR, data is collected about every access to the server on which this service is hosted. The access data includes the name of the page requested, the file, the date and time of the request, the volume of data transferred, a message about a successful request, the browser type and version, the user’s operating system, the referrer URL, the IP address and the requesting provider.

This information serves security and trouble-free operation. It is not merged with other sources of data and is not used to analyse user behaviour. It is evaluated only where there are indications of unlawful use.

10. Fonts

This website uses locally hosted fonts only. No fonts are loaded from third-party servers, such as Google Fonts or Adobe Fonts. Accessing the site therefore establishes no connection to external servers for that purpose and transmits no IP address to third parties.

11. No third-party analytics and no advertising networks

This online offering embeds no third-party analytics or advertising services. In particular, Google Analytics, Google Ads remarketing, the Meta pixel (Facebook), the LinkedIn Insight Tag and comparable services are not used. No profiles of your behaviour are created and no data is passed to third parties for advertising purposes. For reach measurement we use exclusively Matomo, running on our own server, described in section 14.

12. Cookies

This website sets no cookies for analytics or advertising. Technically necessary cookies are used only in so far as they are required for individual functions to work; the legal basis is § 25(2) TDDDG in conjunction with Article 6(1)(f) GDPR. You can disable the storing of cookies in your browser at any time.

13. Contacting us through the forms on this website

When you contact us, whether by contact form, email or telephone, the details you provide are processed in order to handle and deal with your enquiry. The legal basis is Article 6(1)(b) GDPR for enquiries relating to a contract, and otherwise Article 6(1)(f) GDPR.

The forms on this website do not store your entries in a database on the web server. They are transmitted solely as an email to our mailbox and handled there. Which details are mandatory is marked on each form; every other field is optional. We set your email address as the reply address of the message so that an answer reaches you directly.

Sending the notification. The email is delivered through our own mail server in Germany. No external delivery service is used for this.

Protection against automated submissions. We deliberately use no captcha, because that would transmit data to third parties. Instead, every form contains a field that is invisible to people and only filled in by automated programs, and we discard submissions that arrive less than three seconds after the page was opened. We also limit the number of submissions per sender: for that we store a check value (hash) of your IP address together with the times of the submissions for at most one hour. The IP address itself is not stored, and the check value expires afterwards. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is preventing misuse.

We delete enquiries once they are no longer required. We review that requirement every two years; statutory retention duties remain unaffected.

14. Reach measurement with Matomo

To evaluate the use of this website statistically we use Matomo, a piece of reach measurement software. Matomo runs on our own server in Germany; the data does not leave our infrastructure and is not passed to third parties.

We set no cookies for it and store nothing on your device. Your IP address is truncated before any storage, so that it can no longer be attributed to you. What is recorded is the page requested, the time, the referring page and general information about the device and browser. You are not recognised across visits.

The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in understanding which content is found and read. Because we set no cookies and read no information from your device, no consent is required under § 25(2) TDDDG: that is why you see no consent banner on this website.

We respect the “Do Not Track” setting of your browser: where it is active, no measurement takes place.

15. Booking appointments through Microsoft Bookings

To arrange demonstration and consultation appointments we use the Microsoft Bookings service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

The booking page opens in a new window on a Microsoft page; no Microsoft content is embedded in this website itself, and simply visiting our pages establishes no connection to Microsoft. Only when you open the booking page does Microsoft process the data you enter there (in particular your name, email address, the appointment chosen and any voluntary information about your enquiry) as well as technical connection data. The legal basis is Article 6(1)(b) GDPR, because the processing is necessary in order to hold the appointment you requested.

A data processing agreement with Microsoft is in place. Further information is available in the Microsoft privacy statement at privacy.microsoft.com.

16. Our presence on social networks

We maintain profiles on social networks in order to communicate with users active there. This website contains only plain links to those profiles; no social media plugins are used. Data is transmitted to the networks only once you click such a link.

The respective providers are responsible for processing your data within the networks. Our profiles: LinkedIn, Instagram and Facebook.

17. Deletion of data

The data we process is deleted or its processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated otherwise, the data stored with us is deleted as soon as it is no longer required for its purpose and no statutory retention duties prevent deletion. Where data is not deleted because it is required for other legally permissible purposes, its processing is restricted: the data is then blocked and not processed for other purposes.

18. Rights of data subjects

  • Access (Article 15 GDPR): you have the right to obtain confirmation as to whether data concerning you is processed, and to receive information about that data.
  • Rectification (Article 16 GDPR): you have the right to have data concerning you completed or inaccurate data corrected.
  • Erasure (Article 17 GDPR): you have the right to request that data concerning you be erased without delay.
  • Restriction of processing (Article 18 GDPR): you have the right to request a restriction of processing.
  • Data portability (Article 20 GDPR): you have the right to receive data concerning you in a structured, commonly used and machine-readable format, or to request its transmission to another controller.
  • Complaint (Article 77 GDPR): you have the right to lodge a complaint with a supervisory authority, in particular the authority of your habitual residence, your place of work or the place of the alleged infringement.

19. Right to withdraw consent

You have the right to withdraw consent you have given with effect for the future, under Article 7(3) GDPR.

20. Right to object

You may object to the future processing of data concerning you at any time in accordance with Article 21 GDPR. An objection may in particular be made against processing for the purposes of direct marketing.

21. Changes to this privacy notice

We ask you to inform yourself regularly about the content of our privacy notice. We adapt the notice as soon as changes to the processing we carry out make that necessary. We will inform you as soon as the changes require action on your part, such as consent.

22. Status

15 October 2026. Controller: Brandmonks GmbH, Am Brand 41, 55116 Mainz. See also our legal notice.

23. Authoritative version

This English text is a translation for information purposes. In the event of a dispute, the German version of this privacy notice prevails.