Privacy Policy
This site is operated by MindScale Ventures, Ali Yahyaoui, c/o hei_INNOVATION, Startup Hub Tiergartenstraße 15, 69121 Heidelberg, Germany. Contact: hello@handsonmanifestation.com
What this site collects
This site does not use cookies, analytics or tracking pixels. Apart from the newsletter sign-up and the contact form described below, it does not ask you for any personal data.
Server log files
Our hosting provider, STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, automatically records technical access data: IP address, date and time of access, the page requested, browser type and operating system. This happens for every website you visit and is necessary to deliver the page and keep the server secure. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in a functioning, secure website. These logs are not combined with other data and are deleted after a short retention period set by the provider.
Fonts
All typefaces are stored on our own server. No connection to external font providers is made when you visit this site.
When you click a buy button
The purchase buttons take you to a checkout operated by Lemon Squeezy, LLC, 1611 Mound Street, Alameda, CA 94501, USA. From that point on, Lemon Squeezy is the controller for your data. They act as merchant of record — the seller — and handle payment, invoicing, tax and delivery. Their privacy policy applies and is linked from the checkout. We receive order data from Lemon Squeezy only to the extent needed to deliver the product and handle support. This involves a transfer of personal data to the United States; Lemon Squeezy relies on the applicable safeguards under Chapter V GDPR for such transfers.
Newsletter and free track
If you request the free audio track, we process your email address to send you the track and occasional emails about Hands-On Manifestation. The legal basis is your consent, Art. 6(1)(a) GDPR. We use a double opt-in: you receive a confirmation email first, and only after you click the link are you added to the list. We log the time of sign-up and confirmation to be able to prove your consent.
You can withdraw your consent at any time with the unsubscribe link in every email or by writing to us. Your address is then deleted from the mailing list.
Emails are sent with Brevo, provided by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Data is hosted in the EU; some of Brevo's sub-processors are located in the United States, and such transfers rely on the EU-US Data Privacy Framework or standard contractual clauses. The sign-up form loads a script from Brevo's servers, which transmits your IP address to Brevo. Brevo records whether emails are opened and which links are clicked, so that we can see which content is useful. See Brevo's privacy policy at brevo.com/legal/privacypolicy.
Spam protection on the sign-up form
To protect the sign-up form against automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you use the form, Turnstile checks technical data from your browser (such as IP address, browser characteristics and interaction signals) to tell humans from bots. This can involve a transfer of data to the United States; Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in keeping the form free of spam. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Contact form
If you use the contact form, we process the name, email address and message you enter, for the sole purpose of answering your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a purchase or a pre-contractual matter, otherwise Art. 6(1)(f) GDPR — our legitimate interest in responding to enquiries. Submitting the form is voluntary; without this data we cannot answer you. The message is sent to our mailbox and is not passed to third parties beyond our hosting and email provider, STRATO AG, which acts as a processor on our behalf. We delete the correspondence once your enquiry is settled and no statutory retention period applies. The form includes a hidden field used to filter automated spam submissions; no personal data is processed for that purpose.
If you write to us, we process your message and address for the purpose of answering it, on the basis of Art. 6(1)(b) or (f) GDPR. We keep the correspondence as long as needed for that purpose and any statutory retention periods.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. You may also lodge a complaint with a supervisory authority. To exercise any of these, write to the address above.
Changes
If we add advertising measurement to this site, this policy will be updated before those features go live.