Privacy notice

Florian Ripp, trading as Mental Fulfillment Oberhöchstadterstraße 28a 61440 Oberursel, Germany hello@mentalfulfillment.com

The controller determines the purposes and essential means of this website processing. You can send privacy enquiries directly to the address above.

This privacy notice applies to the Mental Fulfillment corporate website, including its language versions and country-domain redirects. It describes the processing carried out by this website in its current functional scope.

AWALA's separate product website and future product access at awala.ai are outside this scope and require their own privacy information tailored to the actual product operation. Merely visiting this corporate website does not process AWALA session data.

When the website is accessed, technically necessary data may be processed, including IP address, time of access, requested resource, amount of data transferred, browser and device information, referrer and status codes.

Strategic collaboration: When you submit the “Strategic collaboration with Mental Fulfillment” form, we process your first name, email address and, where provided or required, last name, organisation and function or role, enquiry category, selected collaboration type, relevant topics, message, preferred next step, timeframe, language, source page and submission time. The information is stored in an access-controlled database and used to respond to and internally route the business enquiry.

Career expressions of interest: When you express interest in a non-binding collaboration exploration through the careers section, we process your first and last name, email address, country or current location, preferred conversation language, profile or CV link, optional work-sample link, your perspective on our mission, vision and potential collaboration, relevant experience, availability for an introductory conversation, possible later start and expectations for any possible later paid engagement, together with your professional self-ratings, answers to role-specific questions, source page and submission time. Please do not submit health data, crisis information or confidential information belonging to former clients or employers.

Email contact involves the sender, contact details and message content you provide. Specific AWALA pilot enquiries are referred to the form on awala.ai and are not stored as a second pilot enquiry on this corporate website.

You provide information directly through forms or email. Connection data and language preferences are supplied by your browser or the hosting and security infrastructure when you visit. Linked application materials are reviewed in connection with the relevant enquiry.

Processing is necessary to deliver the website, ensure stability and security, and prevent misuse. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is a secure and functional website.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps; otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to business and general enquiries.

The legal basis is Article 6(1)(b) GDPR where the enquiry relates to pre-contractual steps; otherwise Article 6(1)(f) GDPR. Our legitimate interest is the structured handling of investment, funding, research, expert development, technology, integration, partnership, media and community enquiries. The required agreement applies only to handling the specific enquiry.

The legal basis is Article 6(1)(b) General Data Protection Regulation (GDPR) where your inquiry initiates pre-contractual steps concerning a possible later collaboration. Where the inquiry is not yet directed towards a contract, processing is based on Article 6(1)(f) GDPR and our legitimate interest in assessing and responding to professional collaboration inquiries. If a later employment process arises, section 26(1) of the German Federal Data Protection Act may additionally apply. Access is limited to people involved in the review.

When the language-neutral main address is opened, the website evaluates the browser’s highest-priority language preference sent in the Accept-Language HTTP header. If it begins with “de”, the German version opens. English remains the default for English, every other language or missing information. This selection uses neither location data nor device fingerprinting and does not override directly opened language-specific subpages.

When you deliberately use the visible language switch, Mental Fulfillment stores the functional first-party cookie “mf_language” with the value “en” or “de” for no more than twelve months. Your manual choice takes priority over the browser preference. The cookie is used only for language selection and not for analytics, advertising or profiling. If the browser blocks storage, the switch still opens the selected language for the current visit; a later return to the main address may use the browser preference again.

The Cookie Policy lists the language and security cookies, their providers, purposes and lifetimes. The website code does not set advertising or analytics cookies or use local browser storage for visitor profiles.

You can read the website without submitting a form. Required fields are marked; without the necessary contact details, we may be unable to handle an enquiry. Optional information can be omitted. You can manage cookies in your browser.

You can withdraw consent through hello@mentalfulfillment.com. Processing a specific enquiry and separate consent for general updates are distinct purposes.

OpenAI Sites provides this corporate website and the database for strategic enquiries. Cloudflare supplies infrastructure, delivery and security functions. Service providers may process personal data as part of their tasks.

The enquiry content is sent by transactional email to the responsible team. Delivery uses Resend (Plus Five Five, Inc., USA). The content is therefore also processed by the email service and receiving mailbox. See section 9 for international transfers.

The expression of interest is transmitted server-side through the Resend transactional email service to an access-controlled recruiting mailbox. The recruiting address is not displayed publicly. The website does not store its content in an applicant database and currently provides no file upload. Linked materials are opened only when the inquiry is reviewed.

Access to stored enquiries is restricted to explicitly approved, signed-in administrative users. Data exports are generated only after a renewed server-side authorisation check and are logged for security purposes. Corrections and manual deletions require a reason; the change log does not retain previous personal field values.

Processing is not guaranteed to be limited to Germany or the European Economic Area (EEA). OpenAI Sites does not provide fixed data residency for this website. Hosting, security and email delivery may involve processing in the United States in particular.

Transfers to third countries are subject to Articles 44 et seq. of the General Data Protection Regulation (GDPR), such as an applicable adequacy decision or appropriate safeguards. The specific contractual arrangements, subprocessors and supplementary measures for all platform services are still being reconciled with provider documentation. Contact hello@mentalfulfillment.com for information about the recipients and safeguards relevant to your data.

Self-ratings and professional answers do not cause an automated acceptance or rejection on this website. Expressions of interest are reviewed by people. We do not place an inquiry in a general talent pool without separate consent.

The website code does not send form content to AI models for training or automated assessment. It does not make solely automated decisions with legal or similarly significant effects within Article 22 GDPR. Enquiries are reviewed by people.

Technical abuse-prevention filters are separate from those decisions. This does not make a blanket assurance about every infrastructure provider’s own processing purposes.

The website is delivered over an encrypted HTTPS connection. Forms validate permitted inputs and limit repeated submissions on the server. Internal notifications are intended for the responsible people handling them. These measures do not eliminate every risk; please submit only information needed for your enquiry.

To protect the form from automated or excessive submissions, we use an invisible verification field and server-side rate limiting. A pseudonymised verification value is derived from the IP address and browser identifier. The underlying values are not stored in the form database. The verification value affects submissions only within a 15-minute rate-limiting window. Entries whose limiting window expired more than two days earlier are automatically cleared when a later form submission triggers database cleanup; inactive entries may remain in the database for longer until that cleanup occurs. The legal basis is Article 6(1)(f) GDPR based on our interest in security and misuse prevention.

To prevent misuse, a pseudonymised verification value is derived from the IP address and browser identifier for a time-limited submission rate. The underlying values are not stored in an applicant database. The verification value affects submissions only within a one-hour rate-limiting window. Entries whose limiting window expired more than two days earlier are automatically cleared when a later form submission triggers database cleanup; inactive entries may remain in the database for longer until that cleanup occurs.

Enquiry data is deleted when it is no longer needed for responding to the enquiry and considering a potential collaboration, unless statutory retention duties or legitimate grounds require continued storage. Genuine and not-yet-classified business enquiries are not deleted automatically solely because of their age; they are reviewed in relation to their purpose and removed in a controlled manner when that purpose no longer applies. Records explicitly marked as technical system tests are automatically removed after 30 days; this cleanup begins no earlier than 9 September 2026.

Expression-of-interest data is deleted when the specific exploration has ended and it is no longer required. This will normally take place no later than six months after the process ends unless statutory duties, the establishment or defence of legal claims, or an expressly agreed further use require otherwise.

General retention periods do not automatically apply in the same way to the website database and all mailboxes, provider logs or backups. Full reconciliation of these locations and deletion procedures remains outstanding. You can request information or erasure through hello@mentalfulfillment.com.

We retain personal data only for as long as necessary for the respective purpose. Statutory retention duties, the establishment or defence of legal claims, and security needs may require longer retention.

Subject to the legal conditions, you may request access to your data and a copy, correction of inaccurate data, erasure or restriction of processing. A right to data portability may apply to automated processing based on consent or a contract.

You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time. You may withdraw consent at any time for the future; this does not affect the lawfulness of processing before withdrawal.

Send your request to hello@mentalfulfillment.com. We will inform you of the action taken without undue delay and within one month of receiving it. For complex or numerous requests, this may be extended by up to two further months; we will explain the extension and its reasons within the first month. If we do not act, we will explain the reasons and your complaint and judicial-remedy options within one month.

If there are reasonable doubts about your identity, we may request the additional information necessary to confirm it. An identity-document copy is not a general requirement. Legal retention obligations or the establishment, exercise or defence of legal claims may prevent immediate complete erasure.

This corporate website primarily addresses professional contacts and interested visitors. AWALA’s product age limit of 18 is not a blanket access restriction for this corporate website or an additional age requirement for every contact or career enquiry. The website code does not collect identity-document copies. Please inform us if a minor’s personal data was submitted without the required basis.

The public forms are not intended for health data, diagnoses, crisis details, medication, therapy histories or other particularly sensitive information. Please do not enter these details in free-text fields either. A warning cannot technically prevent such information from being received. If you accidentally submitted sensitive information, contact us to clarify its handling and, where appropriate, correct or delete it.

If you select the separate, unticked checkbox for general updates, we store your consent together with the time and consent version. This consent is voluntary, is not required for handling your enquiry and can be withdrawn at any time with future effect by emailing hello@mentalfulfillment.com.

The legal basis is Article 6(1)(a) GDPR. Without this separate consent, the email address from the contact enquiry will not be used for general updates.

You may complain to a data-protection supervisory authority, particularly where you live or work or where the alleged infringement occurred. For our location in Hesse: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany; telephone +49 611 1408-0; email poststelle@datenschutz.hessen.de.

Last updated: 20 September 2026. We update this notice when the website, its processing or applicable requirements change. This update concerns this website only; a future app or product access will have separate information.

Florian Ripp, trading as Mental Fulfillment Oberhöchstadterstraße 28a 61440 Oberursel, Germany hello@mentalfulfillment.com