Privacy Policy

1. Controller

Phone: +49 911 6607320-11
Email: info@magic-stick.ai

Data protection officer

QualityMinds GmbH - Data Protection Officer
Address as above
Email: privacy@qualityminds.de

2. General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, if special categories of data are processed according to Art. 9(1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25(1) TDDDG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

3. Data processing when visiting this site

This website is static. We do not set cookies, use advertising tools, load external fonts, or provide a contact form. For visitor statistics we use the self-hosted analytics software Umami, described in section 5.

When a page is requested, the hosting provider processes technically necessary data so that the page can be delivered: IP address, date and time of access, requested file, referrer, browser and device information (user agent), transferred data volume and status code.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable delivery of this website.

4. Hosting

Microsoft Azure

The website and the Umami statistics service (section 5) run on Microsoft Azure, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Microsoft processes data on our behalf as a processor under Article 28 GDPR, based on the Microsoft Products and Services Data Protection Addendum.

Our Azure resources are located in the EU regions West Europe (Netherlands) and Germany West Central (Frankfurt am Main). Azure Static Web Apps delivers the static pages through Microsoft's global content distribution network, so connection data may be processed at locations outside the EU, including the United States. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR); Microsoft also uses the EU Standard Contractual Clauses (Article 46(2)(c) GDPR). More information is available in the Microsoft Privacy Statement.

5. Visitor statistics with Umami

We use Umami, an open-source web analytics software, to learn which pages of this website are used and how often. We operate the Umami instance ourselves on Microsoft Azure (section 4): the application runs in Germany West Central (Frankfurt am Main) and its database in West Europe (Netherlands). The data is not passed to an analytics provider.

When a page is loaded, the Umami script sends the following to our Umami instance: the page address without query string or fragment, the page title, the referring page, the screen size and the browser language. The connection itself transmits your IP address and user agent. From these, Umami determines the browser, operating system and device type, and the country, region and city using a geolocation database that runs on our instance. The IP address itself is not stored.

To count visits from the same device, Umami forms a session identifier by hashing the IP address, user agent, website, current calendar month and a secret key. The identifier changes every month and is not linked across months. The stored records are pseudonymised: they do not contain your name or IP address, and we do not combine them with other data or try to identify individual visitors.

Umami does not set cookies and does not store an identifier in your browser.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is measuring how the documentation and product pages are used so that we can improve them.

Objecting to visitor statistics

You can object at any time. If your browser sends a "Do Not Track" signal, the script sends nothing. You can also switch off statistics for this browser with the button below. It stores the entry umami.disabled in this website's local storage; the entry contains no identifier and is stored only at your request. The setting applies per browser and per website address, so repeat it for each address you use. Clearing this website's data in your browser removes the setting.

6. Using GitHub project features

If you interact with the project through GitHub, for example by opening issues, pull requests, discussions, stars, or forks, GitHub processes the related data under GitHub's own terms and privacy information. Contributions in public repositories may be visible publicly.

Please do not publish passwords, tokens, private cluster values, or other confidential information in issues or pull requests.

7. Social media profiles

We maintain profiles on Instagram, LinkedIn and YouTube to share information about the project and to stay in touch with interested people. When you visit one of these profiles, the respective provider processes your data under its own terms and privacy information, usually even if you have no account there or are not logged in. This may include cookies and similar techniques as well as the analysis of your usage for advertising purposes, over which we have no control.

We ourselves receive only aggregated statistics about the use of our profiles from the providers, without access to individual users. If you send us messages through a profile or comment on posts, we process this content in order to reply to you; section 8 also applies to requests. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is public relations for the project and the exchange with users and interested people.

Where the provider supplies us with profile statistics, we and the provider are joint controllers for this collection under Article 26 GDPR; the respective agreement is linked below. You can exercise your data subject rights towards us as well as towards the provider. Since only the provider has full access to your data, contacting the provider directly is usually more effective.

Instagram

The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Data transfers to the United States are based on the EU Commission's Standard Contractual Clauses (Article 46(2)(c) GDPR); details are in the Meta EU Data Transfer Addendum and the Meta help on data transfers. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR); see the DPF entry for Meta. The Page Insights Controller Addendum applies to the statistics of our profile. Details on how your data is handled are in the Instagram Privacy Policy.

LinkedIn

The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies; you can switch them off in the LinkedIn guest settings. Data transfers to the United States are based on the EU Commission's Standard Contractual Clauses (Article 46(2)(c) GDPR); details are in the LinkedIn Data Processing Agreement and the LinkedIn EU Standard Contractual Clauses. LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework (Article 45 GDPR); see the DPF entry for LinkedIn. The LinkedIn Pages Joint Controller Addendum applies to the statistics of our profile. Details on how your data is handled are in the LinkedIn Privacy Policy.

YouTube

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed on servers of Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (Article 45 GDPR); see the DPF entry for Google. Details on how your data is handled are in the Google Privacy Policy.

8. Contacting us by email or telephone

This website provides no contact form. If you contact us by email or telephone, for example with a question about the project, a security report, or a license request downloaded from the dashboard, we process the data you send us (such as your name, email address, telephone number, organisation or customer reference and the content of your message) to handle your request and for follow-up questions. We do not pass this data on without your consent, unless we are legally required to do so.

If your request concerns a license or another contract, or steps leading to one, the legal basis is Article 6(1)(b) GDPR. In all other cases the legal basis is Article 6(1)(f) GDPR; our legitimate interest is handling the requests addressed to us effectively.

We keep this data until your request has been dealt with and no follow-up is expected, or until you ask us to delete it. Statutory retention duties, for example under commercial and tax law for license agreements, remain unaffected.

Email sent over the internet is not fully protected against access by third parties. Do not send passwords, tokens, private cluster values or other confidential information by unencrypted email.

9. Retention

Umami records (page views and the pseudonymised session data described in section 5) are deleted 25 months after collection, so that usage can be compared with the same period of the previous year. Error and operating logs of the Umami service are kept for 30 days and database backups for 7 days.

Hosting log data is processed by Microsoft under its own retention periods and deletion procedures. Apart from this, we delete personal data when the purpose of processing no longer applies and no statutory retention duties require further retention.

10. Your rights

Subject to the GDPR, you may have the following rights:

• right of access, Article 15 GDPR
• right to rectification, Article 16 GDPR
• right to erasure, Article 17 GDPR
• right to restriction of processing, Article 18 GDPR
• right to data portability, Article 20 GDPR
• right to lodge a complaint with a data protection supervisory authority, Article 77 GDPR

To exercise your rights, contact privacy@qualityminds.de. The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Right to object (Article 21 GDPR)

All processing described in this policy that is based on our legitimate interests (Article 6(1)(f) GDPR) is subject to your right to object. You may object at any time, on grounds relating to your particular situation, to the processing of your personal data on that basis. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You can object to visitor statistics directly in your browser using the controls in section 5. For everything else, send your objection to privacy@qualityminds.de. We do not use your data for direct marketing.

11. Security and external links

This site is delivered via HTTPS. External links lead to third-party services, such as GitHub or the social media platforms named in section 7. The respective provider's privacy information applies to those services.