Privacy Policy
Information on the processing of personal data under the General Data Protection Regulation (GDPR). This is a courtesy translation — the German version is the legally binding one.
1. Controller
The controller responsible for data processing on this website within the meaning of the GDPR is:
webArtig GmbH
Lerchenweg 3, 40789 Monheim am Rhein, Germany
Managing directors: Tobias Thiele, Daniel Meisl
Email: hi@hello-mint.com
A data protection officer is not legally required in every case. [If one is appointed: add their contact details here.]
2. Your rights as a data subject
You have the following rights at any time:
- Access to the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of any consent given, with effect for the future (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority includes the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
3. Visiting the website & server log files
When you visit the website, our hosting provider automatically collects information that your browser transmits (server log files): browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request, and the IP address (typically shortened/anonymized).
This data serves technical delivery, security and stability. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Hosting
The website is hosted via AWS Amplify Hosting by Amazon Web Services EMEA SARL (or the respective responsible AWS group company) and delivered via the Amazon CloudFront content delivery network. Build and storage of the website files take place in the AWS region eu-central-1 (Frankfurt am Main, Germany); delivery via CloudFront may, for technical reasons, also occur via CDN nodes outside the EU. AWS offers a standard data processing agreement as part of order processing (AWS GDPR Data Processing Addendum), whose execution and evidence should be reviewed and documented via AWS Artifact.
4. Contact and inquiry form
If you request an initial conversation via the form, we collect the data you provide: company name, contact person, email address, phone number and the number of units you operate. We use this data exclusively to process your request and to get in touch with you. There is no double opt-in procedure — your request reaches us directly.
To collect and manage inquiries, we use Airtable (Airtable, Inc., 799 Market St, San Francisco, CA 94103, USA) as a processor. Your details are transmitted directly to Airtable via an interface we operate (AWS Lambda, region eu-central-1) and stored there in an internally accessible table that only our authorized staff can view. Since Airtable is a US provider, this may involve a transfer of data to the USA; we have concluded the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) as well as a data processing agreement (Art. 28 GDPR) with Airtable.
The legal basis is your consent (Art. 6(1)(a) GDPR) as well as the initiation or performance of pre-contractual measures (Art. 6(1)(b) GDPR). You can withdraw your consent at any time, e.g. by email to the address given above.
[Once a CRM or an email/sales tool provider is connected, this section should be extended with the respective provider, purpose and data processing agreement.]
Retention period
We store inquiry data for as long as necessary to process it, or until you withdraw your consent. Statutory retention obligations remain unaffected.
5. Fonts (Google Fonts)
For a consistent display of fonts, this website currently embeds web fonts from Google Fonts. When the page is loaded, a connection to Google's servers (Google Ireland Limited) may be established and your IP address transmitted. The legal basis is our legitimate interest in an appealing presentation (Art. 6(1)(f) GDPR).
[Recommendation: host Google Fonts locally (self-hosted). This would eliminate the data transfer to Google, and this section could then be removed.]
6. Cookies & tracking
This website uses Google Tag Manager (GTM) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to load further tools such as Google Analytics. GTM itself does not set any cookies and does not collect personal data — it only manages which tools get loaded.
GTM and the tools loaded through it are only loaded once you actively consent. On your first visit we show you a cookie banner with the options "Accept" and "Decline". We store your choice in your browser (local storage) so we don't ask you again on every visit. You can change your decision at any time via the "Cookie settings" link in the footer.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before the withdrawal.
Specifically, the GTM container currently has Google Analytics 4 (GA4) configured, a web analytics service by Google Ireland Limited (potentially involving Google LLC, USA, as the parent company). It records automatic page views as well as the events "generate_lead" (after the contact form is fully submitted), "lead_start" (on moving to step 2 of the form), "cta_click" (on clicking a call-to-action button, with the button's position as a parameter) and "value_calc" (when using the unit calculator, with the configured unit count as a parameter) — without name, email address or phone number being transmitted to Google as event parameters. The purpose is to analyze website usage and measure form conversion.
[Since a data transfer to the USA cannot be ruled out: review and document here the execution of Google's data processing terms (incl. EU Standard Contractual Clauses, Art. 46(2)(c) GDPR) and the data retention period configured in the GA4 property.]
7. SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar.
8. Currency and changes to this privacy policy
This privacy policy is currently valid. Further development of the website or changes to legal requirements may make it necessary to update it.
Last updated: July 2026