1. The short version
This website does not measure anything about you, embeds no content from third party servers and uses no advertising or analytics services. Fonts, images, stylesheet and scripts are served from our own server. There is no contact form, the button opens your own email programme. Three things remain to be explained: the technical log files of our host, your email to us, and the two values this site stores locally in your browser.
2. Controller
The controller for the processing of personal data on this website is:
Janek Marten Keller und Benjamin Böckelmann GbRtrading as MIXEDMOON
Sternstraße 2
06108 Halle (Saale)
Germany
Email: mail@mixedmoon.com
Phone: +49 157 34366305
Data protection officer
We are not required to appoint a data protection officer (section 38 BDSG). For any data protection matter you can reach us at the address above.
3. Who this policy applies to
The GDPR applies to us because our company is established in Germany (article 3 (1) GDPR). It therefore applies regardless of the country you visit this site from. We treat every visitor by the same standard, whether from Halle, Vienna or Toronto.
4. Overview of processing
| What | Why | Legal basis | Retention |
|---|---|---|---|
| Server log files: IP address, time, file requested, browser type, operating system, referrer | Delivering the page, operational security, debugging | Article 6 (1) (f) GDPR | as set by the host, short term |
| Content and sender details of your email | Answering your enquiry | Article 6 (1) (b) GDPR for pre-contractual contact, otherwise (f) | until handled, then statutory retention periods |
| Three values in your browser's local storage: chosen language, your decision in the consent dialogue, your motion choice on the home page | Showing the site the way you set it up and not asking again | Section 25 (2) no. 2 TDDDG, article 6 (1) (f) GDPR | until you clear site data in your browser |
| Cookies, analytics, tracking, reach measurement, social plugins, maps, fonts from third party servers, contact form | do not happen on this website | ||
5. Hosting and server log files
This website is operated at an external service provider:
STRATO GmbHOtto-Ostrowski-Straße 7
10249 Berlin
Germany
On every request the server automatically records data your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing machine, time of the request and the IP address. This data is technically necessary to display the page at all and additionally serves the security of our service. It is not merged with other data sources and not used to build usage profiles.
The legal basis is our legitimate interest in a technically sound and secure operation of the website (article 6 (1) (f) GDPR). A data processing agreement under article 28 GDPR is in place with STRATO GmbH. The servers are located in Germany.
6. Contact by email
The “Send enquiry” button opens your own email programme with our address. The message does not pass through this website and is not stored here at any point. We process your message including the sender address and everything you tell us in it solely to handle your matter. The legal basis is article 6 (1) (b) GDPR where the message is aimed at entering into or performing a contract, otherwise our legitimate interest in answering enquiries (article 6 (1) (f) GDPR).
Please note that an unencrypted email can be read in transit. For confidential documents we are happy to agree a secure channel with you.
7. Documents about your company
If you send us information about your company so that we can assess an investment or a cooperation, we process that information for exactly that purpose. It may include annual accounts, information on your order book, products and headcount. Where such documents contain personal data of third parties, for example employees or customers, we process it only as far as necessary for the assessment (article 6 (1) (b) and (f) GDPR).
We ask you to send such data only to the extent needed for the step at hand and to redact names where they add nothing. On request we sign a non-disclosure agreement before you send anything. If no cooperation comes about, we delete the documents on your request without delay, and at the latest as soon as statutory retention periods allow.
8. Browser storage, cookies and consent
This website sets no cookies. It stores three values in your browser's local storage, all three only because you set them yourself:
- mm-lang: the language you picked in the top right.
- mm-consent: your decision in the consent dialogue, together with the date and the three categories.
- mm-motion: whether you paused the motion on the home page. The switch for it is in the footer.
Both values stay in your browser. They are not transmitted to us or to third parties, contain no identifier that would allow a device to be recognised, and are not used for analytics. Section 25 (2) no. 2 TDDDG does not require consent for storage that is strictly necessary for a service explicitly requested by the user, and the “Necessary” category is limited to exactly that. You can delete these values at any time by clearing the site data for mixedmoon.com in your browser.
The consent dialogue
On your first visit we ask before anything optional is loaded. You have three equally weighted choices: “Accept all”, “Reject all”, or “Settings” to decide category by category. Nothing is pre-ticked, rejecting is exactly as quick as accepting, and you suffer no disadvantage if you reject.
The legal basis for the two optional categories is your consent under section 25 (1) TDDDG and article 6 (1) (a) GDPR. You can withdraw it at any time with effect for the future, at the bottom of the home page under “Cookie settings”. The lawfulness of processing carried out before the withdrawal is unaffected.
| Category | What for | Legal basis | Embedded today |
|---|---|---|---|
| Necessary | Language choice and your decision in this dialogue | Section 25 (2) no. 2 TDDDG, no consent required | yes, see above |
| Statistics | Anonymous reach measurement | Section 25 (1) TDDDG, article 6 (1) (a) GDPR | no |
| External content | Maps, videos, fonts from third party servers | Section 25 (1) TDDDG, article 6 (1) (a) GDPR | no |
As of today not a single service is embedded in either optional category. Your decision is stored regardless and applies as soon as one is added. If a service is added, we update this policy beforehand and name the provider, the purpose, the retention period and any transfer to third countries.
9. No embedded third party content
Every part of this website is delivered from our own server. That explicitly includes the fonts: Montserrat and Roboto Mono are files on our server. No connection is made to Google Fonts, to a content delivery network or to any other third party server. Your IP address is therefore not transmitted to anyone except our host.
No videos, maps, social network buttons, chat widgets or review services are embedded. The road scene on the home page is a graphic computed in your browser and loads nothing.
10. Recipients of your data
We do not pass on personal data for advertising purposes and we do not sell data. Access is limited to:
- the two partners of the controller,
- our host as a processor under article 28 GDPR (STRATO GmbH, Berlin),
- our email provider as a processor under article 28 GDPR (STRATO GmbH, Berlin, mailbox included in the hosting package),
- in individual cases tax advisers, lawyers or a notary, as far as necessary for a concrete cooperation and each bound to professional secrecy.
11. Transfers to third countries
No personal data is transferred to countries outside the European Union or the European Economic Area. Should that change, for example through a future service provider, we will update this policy beforehand and name the safeguards under articles 44 et seq. GDPR.
12. Your rights
You have the following rights towards us:
- access to whether and which data we process about you (article 15 GDPR),
- rectification of inaccurate or completion of incomplete data (article 16 GDPR),
- erasure, unless a retention obligation applies (article 17 GDPR),
- restriction of processing (article 18 GDPR),
- data portability in a common, machine readable format (article 20 GDPR),
- withdrawal of a consent once given, with effect for the future (article 7 (3) GDPR),
- complaint to a data protection supervisory authority (article 77 GDPR).
An informal message to mail@mixedmoon.com is enough. Exercising these rights is free of charge for you.
The competent supervisory authority is the State Commissioner for Data Protection of Saxony-Anhalt, Leiterstraße 9, 39104 Magdeburg, Germany.
Right to object under article 21 GDPR
Where we process data on the basis of a legitimate interest (article 6 (1) (f) GDPR), you have the right to object to that processing at any time on grounds relating to your particular situation. We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
13. No automated decision making
There is no automated decision making including profiling within the meaning of article 22 GDPR. A person decides on your enquiry.
14. Changes to this policy
We update this policy whenever the processing changes, for example because a new service is added. The version available here is the one that applies. The date at the top shows its state.