Privacy

Privacy Policy

This English version is a courtesy translation. The German version is legally binding.

Draft, as of October 2026. Before publication, have it reviewed by a lawyer or a privacy policy generator and completed (in particular the tools used).

1. Controller

MindScale Ventures, proprietor Ali Yahyaoui, Tiergartenstraße 15, 69121 Heidelberg, hello@neckarminds.de.

2. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin. When you visit it, technically necessary data (IP address, time, page requested, browser) is processed in server log files. Legal basis: Art. 6(1)(f) GDPR (secure operation). No cookies are set and no analytics tools are used.

3. Fonts

The site loads fonts from Google Fonts (Google Ireland Ltd.). In the process, your IP address is transmitted to Google. Legal basis: Art. 6(1)(f) GDPR. [Alternative: host the fonts locally, then delete this paragraph.]

4. Contact

If you contact us by email or through the contact form (which prepares your message in your email program), we process the data you provide in order to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or (a) (consent).

5. Applicant and candidate data

For placement purposes we process your application documents, proof of qualifications, details of professional experience, salary expectations and availability; for international professionals also the status of recognition, language certificates and residence permit. Legal basis: your consent (Art. 6(1)(a) GDPR) and § 26 BDSG (German Federal Data Protection Act). Data is passed on to employers exclusively after your explicit approval for the company concerned. Retention: until withdrawal of consent, at most 6 months after the last placement process has ended; afterwards deletion, unless statutory retention obligations apply.

6. Use of AI tools

We use AI-assisted tools to structure profiles, to match them against job requirements and to check documents. The providers are bound as processors under Art. 28 GDPR; your data is not used to train the models. [Enter providers.] No decision based solely on automated processing within the meaning of Art. 22 GDPR takes place; every introduction and every rejection is decided by a person. You can request purely human handling at any time.

7. Client data (employers)

We process contact persons, vacancy descriptions and contract data to perform the contract (Art. 6(1)(b) GDPR) and retain them in accordance with commercial and tax law requirements.

8. Email delivery

For status messages we use [Brevo / Strato Mail, to be entered]. A data processing agreement is in place.

9. Your rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent given, with effect for the future. Right to lodge a complaint with the supervisory authority: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information), Stuttgart.

10. Security

Transmission via TLS; applicant data is stored exclusively in access-protected systems.