Privacy Policy

2. Data Controller

The data controller responsible for processing data on this website is:

Leonid Krivoshchapov

Carrer de Floridablanca 68
08015 Barcelona
Spain

Email: [email protected]

3. Data Collection on Our Website

Contact / Intake Form

If you send us inquiries via our contact or audit check forms, your details from the form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not share this data without your explicit consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR (contractual or pre-contractual measures) or Art. 6 (1) lit. f GDPR (legitimate interest in processing your inquiry).

4. Web Hosting & Server Location

This website is hosted on a virtual private server (VPS) provided by Hetzner Online GmbH in a German data center. The provider automatically collects and stores information in server log files, which your browser automatically transmits to us (browser type, operating system, referrer URL, host name of the accessing computer, time of server request, IP address).

This is strictly necessary for technical operations and system security (legal basis Art. 6 (1) lit. f GDPR).

5. Web Analytics (Umami)

We use Umami Analytics, a self-hosted, cookie-free analytics tool (operated on our own infrastructure, no data shared with third parties) to evaluate anonymised page views. No cookies are set and no personal profiles are created; IP addresses are not stored in plain text. The legal basis is our legitimate interest in the needs-based design of our website (Art. 6(1)(f) GDPR).

6. Use of AI Services for Analysis (Mentifutura Labs Engine)

To generate the GovernMIND Compliance Report, we use our Mentifutura Labs Engine, which relies on third-party APIs (e.g., Anthropic PBC, Google LLC) to evaluate the data you entered in the context of current legislation.

Your data is secure: We strictly use dedicated business APIs (B2B). We have concluded Data Processing Agreements (DPA) according to Art. 28 GDPR with these providers. It is contractually strictly prohibited for your company or personal data to be used to train these providers' AI models. Your data is deleted immediately after processing by the third-party provider (Zero-Retention Policy).

7. Your Rights as a Data Subject

You have the right at any time to:

• Access your personal data stored by us (Art. 15 GDPR).
• Request the rectification of incorrect data (Art. 16 GDPR).
• Request the erasure of your data stored by us (Art. 17 GDPR).
• Request the restriction of data processing (Art. 18 GDPR).
• Object to the processing of your data (Art. 21 GDPR).
• Receive your data in a structured format (Right to data portability, Art. 20 GDPR).

For any inquiries regarding your data rights, please contact us at any time via email at [email protected].