Privacy policy
In short: this website sets no cookies, uses no tracking and loads no content from third parties. We only receive personal data when you write to us, book a call or explicitly send us your Quick Map.
1. Controller
Kareem Murched
Mosaik Automations
Gehrenring 10, 37085 Göttingen, Germany
Email: info@mosaik-automations.com
We have not appointed a data protection officer, as we are not legally required to.
2. Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- access the data we hold about you (Art. 15 GDPR),
- have incorrect data corrected (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interests (Art. 21 GDPR),
- withdraw consent with effect for the future (Art. 7 (3) GDPR); processing up to that point remains lawful,
- lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state where you live, work or where the alleged infringement took place.
An email to info@mosaik-automations.com is enough for any of these.
3. Visiting the website and server log files
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which processes data on our behalf under a contract pursuant to Art. 28 GDPR. To deliver the pages to you, your IP address has to be processed. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a secure, working website.
On every visit the server records: IP address, date and time, the page or file requested, the previously visited page (referrer), browser and operating system, HTTP status code and amount of data transferred. The purpose is to keep the website stable and secure, for example by fending off attacks.
These logs are deleted automatically after 7 days unless they are needed longer to investigate a specific security incident.
4. Cookies and local storage
This website sets no cookies and uses no analytics or tracking tools.
Only if you choose a language with the language switch does your browser store that choice under the name mosaik-lang in local storage, so the site appears in that language on your next visit. It is not sent to us. The legal basis is § 25 (2) no. 2 TDDDG, as storing it is strictly necessary for the function you explicitly asked for. You can delete the entry at any time in your browser settings.
Without a saved choice, the language follows your browser's language setting. This is evaluated only inside your browser; your location is not determined from your IP address.
5. Fonts
All fonts are loaded from our own server. There is no connection to Google or any other font provider.
6. Contact by email
When you email us, we process your email address, your name if given, the content of your message and technical metadata in order to reply. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
Migadu is based in Switzerland. The European Commission has adopted an adequacy decision for Switzerland under Art. 45 GDPR, recognising its level of data protection as adequate.
Our mailbox is operated on our behalf by Migadu SA, Switzerland (Art. 28 GDPR). We delete enquiries once they are fully dealt with, unless statutory retention obligations apply (for example § 257 of the German Commercial Code or § 147 of the German Fiscal Code for business correspondence).
7. Quick Map (questionnaire)
While you fill in the Quick Map, your answers are processed only in your browser, and the result is calculated there too. Nothing is stored or sent at this stage.
Only when you enter your email address, tick the consent box and click “Send my map” do we receive: your answers, the calculated result, your contact details (email address and, if given, name, company and message), the page language, the time, and the wording and version of your consent.
- Processing: the data goes to our automation server (n8n), which we run ourselves; the server provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server located in the EU), also acting as a processor under Art. 28 GDPR. An AI language model (an open model we run with Ollama on the same server – your answers are not passed to any external AI provider) prepares a summary, an assessment and a draft reply for our team. Every enquiry is read by a person who decides on the reply. No automated decision-making within the meaning of Art. 22 GDPR takes place.
- Abuse protection: to prevent mass submissions, the server keeps a shortened, irreversible checksum of your email address and the time of submission for 24 hours (Art. 6 (1) (f) GDPR).
- Legal basis: your consent (Art. 6 (1) (a) GDPR) and steps prior to entering into a contract (Art. 6 (1) (b) GDPR). You can withdraw your consent at any time by email.
- Retention: successfully processed submissions are not kept on the automation server. Failed runs are kept for troubleshooting for at most 30 days. We delete the enquiry delivered to us once it is fully dealt with and no business relationship follows, at the latest after 12 months, unless statutory retention obligations apply.
If automatic sending is not possible, your email program can open with a prepared message instead. Section 6 then applies.
8. Booking a call via Cal.com
For booking calls we link to Cal.com, a service of Cal.com, Inc. (USA). The website does not embed Cal.com; no data flows until you click the link. When you book, Cal.com processes the data you enter (such as name, email address, chosen time and notes) and passes it to us. The legal basis is Art. 6 (1) (b) GDPR. Data may be transferred to the USA; details of the safeguards under Art. 44 et seq. GDPR are in Cal.com's privacy policy.
9. Contact via WhatsApp
You can also reach us via WhatsApp, a service of WhatsApp Ireland Limited. The link opens WhatsApp only when you click it. When you write to us, WhatsApp processes your phone number, profile name, messages and metadata. Data may be transferred to Meta Platforms, Inc. in the USA; details are in WhatsApp's privacy policy. The legal basis for our processing is Art. 6 (1) (b) or (f) GDPR. Using WhatsApp is voluntary; for confidential matters we recommend email.
10. Recipients
Personal data is only received by these service providers, each under a contract pursuant to Art. 28 GDPR:
- Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
- Email: Migadu SA, Switzerland
- Automation (Quick Map): Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server located in the EU)
If you use them, also Cal.com and WhatsApp (sections 8 and 9). We do not sell data or pass it on for advertising.
11. Obligation to provide data
Providing your data is voluntary. Without an email address or another way to reach you, however, we cannot reply.
12. Changes
We update this privacy policy when the website or our processing changes. The version published on this page applies.