Privacy policy
1. Who is responsible
The controller for the personal data processed on this website is Mundo Mentors, Innsbrucker Bundesstrasse 75, 5020 Salzburg, Austria. You can reach us about anything in this policy at office@mundomentors.com or on +43 660 1336532. Our full company details are on the Impressum.
2. What this policy covers
This policy explains what happens to personal data when you visit mundomentors.com, write to us through the contact form, or sign up to our newsletter. The site has no user accounts and no login. We process personal data under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), and only for the purposes described here.
3. Hosting and server logs
The site is hosted by DigitalOcean, LLC in a data centre in London, United Kingdom. The United Kingdom is covered by an adequacy decision of the European Commission, so data may be transferred there under Article 45 GDPR without further safeguards.
When you open a page the web server records your IP address, the time, the address requested, the amount of data returned, and the browser and operating system you use. We use these logs to keep the site secure and to find faults. The legal basis is our legitimate interest in operating the site securely (Article 6(1)(f) GDPR). Server logs are kept for fourteen days and then deleted.
4. The contact form
When you send the contact form we store your name, email address, the company you name, and your message, together with the time, your IP address and your browser, which we keep as evidence of the request and to prevent abuse. We use these details to answer you and, where it leads that way, to prepare a working relationship. The legal basis is the step you take towards a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).
Your message is delivered to our office mailbox by Twilio SendGrid, Inc., which acts as our processor for sending email. SendGrid is certified under the EU-US Data Privacy Framework. Contact submissions are deleted twelve months after our last contact with you, unless a working relationship has begun, in which case the retention periods of Austrian commercial and tax law apply.
5. The newsletter
If you sign up to our newsletter we store your email address, the time of signing up, your IP address and your browser, so that we can show that you asked for it. We use the address only to send you the newsletter. The legal basis is your consent (Article 6(1)(a) GDPR).
You can withdraw your consent at any time by writing to office@mundomentors.com; we will remove your address from the list at once. Withdrawing does not affect the lawfulness of what was sent before. An address that has been withdrawn is deleted twelve months later.
6. Cookies
Some cookies are needed for the site to work at all, and we set them without asking, as section 165(3) of the Austrian Telecommunications Act allows. They are: mundo-mentors-session and XSRF-TOKEN, which keep your visit together and protect the forms, and expire when your visit ends; mm_consent, which remembers your cookie choice for twelve months; mm_locale, which remembers the language you last read for twelve months, so that the front door can send you back to it; and mm_lang_choice, which remembers for twelve months that you dismissed our suggestion to switch language.
Any other cookie is set only with your consent, which you give or refuse on the cookie banner and can change at any time on the cookie settings page. At present that means the analytics cookies described in the next section. No marketing cookies are set.
7. Google Analytics
If you agree to analytics cookies, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how the site is used: which pages are read, from where, on what kind of device. Google sets the cookies _ga and _ga_ followed by an identifier, which last up to two years. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time on the cookie settings page.
Google may transfer the data to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework. Google Analytics 4 does not store full IP addresses. More about how Google uses data from sites that use its services is at policies.google.com/technologies/partner-sites.
8. Protection against automated abuse
Our forms are protected by Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, which tells a person apart from a script without a puzzle. When you open a page with a form, and again when you send it, Cloudflare receives your IP address and technical characteristics of your browser and returns a verdict. The legal basis is our legitimate interest in keeping the forms usable and our mailbox free of automated submissions (Article 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. This check does not depend on your cookie choice, because the forms cannot be offered safely without it.
9. Email
If you email us directly, we keep your message and our reply for as long as we need them to deal with your request, and afterwards for as long as Austrian commercial and tax law requires correspondence to be kept.
10. Your rights
You have the right to ask what personal data we hold about you and to receive a copy of it (Article 15 GDPR); to have inaccurate data corrected (Article 16); to have data deleted (Article 17); to have its processing restricted (Article 18); to receive the data you gave us in a portable form (Article 20); and to object to processing that rests on our legitimate interests (Article 21). Where processing rests on your consent, you can withdraw it at any time with effect for the future (Article 7(3)).
To exercise any of these rights, write to office@mundomentors.com. If you believe we are processing your data unlawfully, you can complain to the Austrian Data Protection Authority: Datenschutzbehoerde, Barichgasse 40-42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at.
11. No automated decisions, and how we protect your data
We make no automated decisions about you and build no profiles. The site is served over an encrypted connection (TLS), access to submissions is limited to the people who deal with enquiries, and data is deleted at the end of the periods stated above.
12. Changes to this policy
This is version 2 of our privacy policy, published in September 2026. We will update it when the site or the law changes. If a change affects the cookies we set, the cookie banner will ask for your choice again.