The German version is the original; this translation is provided for information only (German version).
Protecting your personal data matters to me. This privacy policy explains what data is processed on this website, for what purpose, and on what legal basis.
MindOnDigital, owner: Dieter Strak, email: info@mindondigital.de. Further details are in the legal notice.
I only process personal data where the law permits it or you have given consent. For each processing operation below I state the purpose, the legal basis, the recipients and how long the data is stored.
I do not sell data. I only pass it on to the service providers named here or where the law requires me to.
When you visit this website, your browser automatically transmits data that the server stores in log files:
Purpose: delivering the website, security and error analysis. This data is not combined with other data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website). Recipient: the host (section 7). Storage period: the log files are kept only as long as needed for these purposes and then deleted automatically.
If you write to me using the contact form, I process your first and last name (if provided), your email address, your message and the time it was sent.
Purpose: answering your enquiry. Legal basis: Art. 6(1)(b) GDPR if it concerns a purchase or contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Recipient: the form is transmitted and stored via Brevo (Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France) as a processor. Storage period: until your enquiry has been fully dealt with; longer only if a contract results from it or statutory retention obligations apply (section 10).
If you send me an email, I process your email address, the content of the message and any details you provide. Purpose and legal basis as for the contact form (section 4). Recipient: my email provider as a processor. Storage period: until your enquiry has been dealt with; business emails relating to a purchase are kept insofar as commercial or tax retention obligations apply (section 10).
This website does not set any cookies and does not store anything in your browser. The audience measurement (section 8) also works without cookies.
The MindOnDigital Academy (app.mindondigital.de) uses technically necessary storage technologies insofar as they are required to provide its functions. Details are in section 8b.
If you are taken to a Stripe payment page (section 8a) or to a Brevo page when signing up for the newsletter, their own information on cookies applies there.
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, the host processes the access data listed in section 3 (server log files) on my behalf, insofar as this is necessary for operation, security and error analysis.
A data processing agreement pursuant to Art. 28 GDPR has been concluded with the host. The servers are located in Germany.
The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in a secure and stable website).
Since September 2026, fonts are loaded directly from this server; no connection is made to servers of Google or other providers.
I use GoatCounter (operator: Martin Tournoij, Ireland; servers at Hetzner Online GmbH in Germany and Finland) to count which pages are visited and how often. This produces aggregated statistics: page, referrer, browser, operating system, language, screen width and the country derived from the IP address. In addition, each individual page view is stored with its time, page and page title, referrer, browser, operating system, language, screen width, country (where applicable, region) and a randomly generated session ID. This shows which pages were viewed one after another during a visit. Your IP address is not stored; it is only held briefly in memory (at most 8 hours) to avoid counting visits twice and to assign the session ID; the ID itself is not calculated from your data. After that a new ID is used, and earlier visits are not linked to it. There are no cookies and no user profiles.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the website). Recipient: GoatCounter. Storage period: I delete the individual page views after 14 months at the latest; the aggregated statistics contain no data that can be linked to you.
If you sign up for the newsletter, I process your email address and – if provided – your first and last name. Sign-up uses a double opt-in: you receive an email with a confirmation link, and you are only added once you have confirmed. Sign-up and confirmation are logged with the time so that I can prove your consent. If you sign up via the form on this website (for example for the cheat sheet), your details first go to my server app.mindondigital.de (Hetzner, Nuremberg, see section 8b), which passes them on to Brevo. The server does not store your email address. To prevent misuse, it limits the number of sign-ups per IP address and per email address; for this it keeps only checksums in memory, for one day at most. Only the time, page, language and result of the sign-up are counted. Brevo technically measures in its emails, including the confirmation email, whether they are opened and links in them are clicked (tracking pixel and links redirected via Brevo). This cannot be switched off for the confirmation email; in my Brevo account the measurement is set to anonymous, so the figures are not linked to your email address. I do not track whether you open individual newsletters or click links in them.
Legal basis: your consent (Art. 6(1)(a) GDPR); for the log, my obligation to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR); for limiting misuse and the anonymous measurement, my legitimate interest in a secure, working sign-up process (Art. 6(1)(f) GDPR). Withdrawal: at any time via the unsubscribe link in every newsletter email or by email to info@mindondigital.de. Recipient: Brevo (Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France) as a processor. Storage period: until you unsubscribe. After that your email address remains only on a block list so that you receive no further newsletters (Art. 6(1)(f) GDPR); I keep the record of your consent for as long as I need it as proof.
The share buttons (e.g. LinkedIn, Facebook, WhatsApp) are plain links. A connection to the network is only made when you click one of them; no data is transmitted before that.
When you buy a guide, a template or other digital content from me, payment is processed by the payment service provider Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). You are redirected to a Stripe payment page for this purpose.
Which data: name, email address, billing address and country where applicable, the products purchased with price and time, the chosen payment method and the payment data required for it (e.g. card data – I do not see these, they remain with Stripe), as well as technical data such as IP address and device characteristics.
Purpose and legal basis: processing the purchase and providing the download (Art. 6 (1)(b) GDPR), fulfilling retention obligations under tax and commercial law (Art. 6 (1)(c) GDPR) and protection against payment fraud (Art. 6 (1)(f) GDPR).
Stripe as an independent controller: Stripe also processes part of this data under its own responsibility, in particular for fraud prevention, to fulfil its own legal obligations and to improve its services. Stripe's privacy policy applies to this: stripe.com/privacy.
Transfers to third countries: Stripe belongs to a group of companies based in the USA (Stripe, Inc.); processing there is possible. Stripe is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists (Art. 45 GDPR); in addition, Stripe uses EU standard contractual clauses (Art. 46 (2)(c) GDPR).
Storage period: I store the purchase data for as long as it is needed for processing and any warranty claims, and beyond that only insofar as statutory commercial or tax retention obligations apply. The retention period depends on the type of document; for accounting vouchers it is generally eight years.
Providing the data is required for the purchase; without it I cannot perform the contract.
If you choose PayPal as the payment method on the Stripe payment page, you are redirected to PayPal. What data: name, email address, amount, order reference and the data of your PayPal account that PayPal needs for the payment. Purpose and legal basis: processing the payment (Art. 6(1)(b) GDPR). Recipient: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes the data as an independent controller, also to prevent fraud and to meet its own legal obligations; PayPal's privacy statement applies. Third countries: PayPal may transfer data to companies of the PayPal group, including in the USA; PayPal's Binding Corporate Rules (Art. 47 GDPR) apply to such transfers. Storage period: on my side as described in this section 8a; at PayPal according to its privacy statement.
This privacy policy also applies to the web app MindOnDigital Academy at app.mindondigital.de. The controller is the same as for this website (see section 1 and the legal notice).
The Academy works without signing in. Your settings (language, perspective), your learning progress, course ticks, checklists, answers in self-tests, your bingo card as well as content unlocked for offline use and the last known account status are stored only locally in your browser (IndexedDB and service worker cache). This data is not transmitted to me. You can delete it at any time in the app settings or via your browser data.
Legal basis: Sec. 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act – the storage is strictly necessary for the app you requested to work) and Art. 6 (1)(b) GDPR.
You only need an account for purchases, subscriptions and the learning progress sync. You sign in without a password via a link I send you by email. In doing so I process:
Legal basis: Art. 6 (1)(b) GDPR (providing the account); for the cookie Sec. 25 (2) no. 2 TDDDG.
Payment is made via Stripe (see section 8a). The app server does not store payment data such as card numbers. For subscriptions, Stripe stores the chosen payment method (card or, with PayPal, the billing agreement) so that the recurring payments can be collected. On the app server I store for each purchase the Stripe session ID, the package bought, amount, time and purchase email address, and for subscriptions the subscription status (including "cancelled"). I also store your consent to the provision starting early (with time and text version), declarations of withdrawal and cancellation (name, email address, contract, your details, time of receipt) and a record of purchase confirmations and subscription reminders sent (session or subscription ID, email address, time).
Legal basis: Art. 6 (1)(b) GDPR (contract) and Art. 6 (1)(c) GDPR (statutory evidence and retention obligations).
When you are signed in to the app, I store your learning progress on the app server so that it is backed up and stays the same on up to three of your devices. This covers: how far you have learned each flashcard, completed course days, ticks in checklists, the result of completed self-tests (only the result type and the date, no answers) and the state of your bingo card, each with the time of the last change. Your own texts and notes are not transmitted.
For the device list I store, for each device, a random identifier created by the device itself, a rough label such as “iPhone · Safari” and when it was first and last used – no IP address, no fingerprinting. Under “Account → My devices” you can sign devices out; the learning progress on the device itself stays there. “Delete account” deletes your account, device list and learning progress on the server immediately; they disappear from the daily backups after 30 days at the latest. Without signing in, your learning progress stays only on your device.
The app also asks your browser once not to delete its locally stored data automatically. Nothing is transmitted in the process.
In addition, without any link to an account or device, I count how often content is used (daily totals per language, for example cards learned or self-tests completed) in order to improve the app. These figures cannot be attributed to any person.
Legal basis: Art. 6 (1)(b) GDPR (the sync is a feature of your account that you use by signing in).
I send sign-in links, confirmations, purchase confirmations, subscription reminders and acknowledgements of withdrawal and cancellation via Brevo (Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France) as a processor. For this, your email address and the content of the respective message are transmitted to Brevo. Legal basis: Art. 6 (1)(b) GDPR.
The app server is operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the data centre in Nuremberg, Germany; a data processing agreement (Art. 28 GDPR) is in place with Hetzner. The server keeps no access logs with IP addresses. IP addresses are held in memory only to limit abusive numbers of requests, for one hour at most. A backup of the server is made daily and kept for 30 days. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure and stable operation and in protection against abuse).
In the app, too, I use GoatCounter for cookieless audience measurement (see section 8). There is no advertising, no tracking cookies and no fonts from Google.
With "Delete account" in the app you remove your account, your sessions and the links to purchase email addresses. I keep proof of purchase, consents and declarations of withdrawal and cancellation because of statutory evidence and retention obligations insofar as statutory evidence obligations or commercial or tax retention obligations apply, and restrict processing during that time. The retention period depends on the type of document; for accounting vouchers it is generally eight years. Your rights under section 11 also apply to the app.
Service providers who process data on my behalf (host, Brevo, email provider) are bound by a data processing agreement under Art. 28 GDPR and may only use the data according to my instructions.
I only store personal data for as long as it is needed for the respective purpose. After that I delete it – unless statutory commercial or tax retention obligations apply, in which case only after they have expired. The retention period depends on the type of document; for accounting vouchers it is generally eight years.
You have the following rights:
Requests can be sent to info@mindondigital.de.
If you have given consent to data processing, you can withdraw it at any time. The lawfulness of processing carried out until the withdrawal remains unaffected.
You have the right to lodge a complaint with a data protection supervisory authority if you believe your data is being processed unlawfully.
I adapt this privacy policy when legal requirements or technical processes change. The version published here applies.