Privacy notice

Mental Fulfillment Owner: Florian Ripp Oberhöchstadterstraße 28a 61440 Oberursel, Germany Email: hello@mentalfulfillment.com

When the website is accessed, technically necessary data may be processed, including IP address, time of access, requested resource, amount of data transferred, browser and device information, referrer and status codes.

Processing is necessary to deliver the website, ensure stability and security, and prevent misuse. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is a secure and functional website.

Log data is deleted or anonymised when no longer required for these purposes. It may be retained longer only where necessary to investigate a security incident or comply with a legal obligation.

We use hosting and IT service providers for the technical delivery of this website. They may process data on our behalf. Access is limited to providers and persons who require data for operation, security and responding to enquiries.

Where a provider processes personal data outside the European Union or European Economic Area, this takes place on the basis of an adequacy decision or appropriate safeguards, in particular EU Standard Contractual Clauses, where legally required.

If you contact us by email, we process your contact details, message and any information you provide voluntarily in order to respond.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps; otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to business and general enquiries.

We delete the data once the enquiry has been concluded unless statutory retention duties or legitimate reasons require longer storage. Please do not send health data or crisis information by email.

When you submit the “Strategic collaboration with Mental Fulfillment” form, we process your first name, email address and, where provided or required, last name, organisation and function or role, enquiry category, selected collaboration type, relevant topics, message, preferred next step, timeframe, language, source page and submission time. The information is stored in an access-controlled database and used to respond to and internally route the business enquiry.

Access to stored enquiries is restricted to explicitly approved, signed-in administrative users. Data exports are generated only after a renewed server-side authorisation check and are logged for security purposes. Corrections and manual deletions require a reason; the change log does not retain previous personal field values.

The legal basis is Article 6(1)(b) GDPR where the enquiry relates to pre-contractual steps; otherwise Article 6(1)(f) GDPR. Our legitimate interest is the structured handling of investment, funding, research, technology, partnership, media and community enquiries. The required agreement applies only to handling the specific enquiry.

For internal notification, the enquiry content is sent by transactional email to hello@mentalfulfillment.com. The email service used for this purpose is Resend, provided by Plus Five Five, Inc., United States. Where data is transferred to a third country, processing relies on appropriate safeguards, in particular the EU Standard Contractual Clauses provided by Resend.

To protect the form from automated or excessive submissions, we use an invisible verification field and server-side rate limiting. A pseudonymised verification value is derived from the IP address and browser identifier. The underlying values are not stored in the form database, and the verification value is removed after no more than two days. The legal basis is Article 6(1)(f) GDPR based on our interest in security and misuse prevention.

Enquiry data is deleted when it is no longer needed for responding to the enquiry and considering a potential collaboration, unless statutory retention duties or legitimate grounds require continued storage. Genuine and not-yet-classified business enquiries are not deleted automatically solely because of their age; they are reviewed in relation to their purpose and removed in a controlled manner when that purpose no longer applies. Records explicitly marked as technical system tests are automatically removed after 30 days; this cleanup begins no earlier than 9 September 2026.

When you apply through the careers section, we process your first and last name, email address, country or current location, application language, profile or CV link, optional work-sample link, motivation, relevant experience, availability, earliest start and compensation expectations, together with your professional self-ratings and answers to role-specific screening questions. Please do not submit health data, crisis information or confidential information belonging to former clients or employers.

The application is transmitted server-side through the Resend transactional email service to an access-controlled recruiting mailbox. The recruiting address is not displayed publicly. The website does not store the application content in its application database and currently provides no file upload. Linked materials are opened only when the application is reviewed.

The legal basis is Article 6(1)(b) GDPR and, where applicable, section 26(1) of the German Federal Data Protection Act for decisions relating to an employment relationship. For project-based or fractional engagements, processing is necessary for pre-contractual steps. Access is limited to people involved in the selection process.

Self-ratings and screening answers do not cause an automated acceptance or rejection on this website. Applications are reviewed by people. We do not place an application in a general talent pool without separate consent.

To prevent misuse, a pseudonymised verification value is derived from the IP address and browser identifier for a time-limited submission rate. The underlying values are not stored in an application database, and the verification value is removed after no more than two days.

Application data is deleted after the specific selection process when it is no longer required. This will normally take place no later than six months after the process ends unless statutory duties, the establishment or defence of legal claims, or an expressly agreed further use require otherwise.

If you select the separate, unticked checkbox for general updates, we store your consent together with the time and consent version. This consent is voluntary, is not required for handling your enquiry and can be withdrawn at any time with future effect by emailing hello@mentalfulfillment.com.

The legal basis is Article 6(1)(a) GDPR. Without this separate consent, the email address from the contact enquiry will not be used for general updates.

This website currently uses no analytics, marketing or other cookies requiring consent. It uses no first-party user tracking and embeds no external video, map or webfont services.

Free-text entries, contact details and form selections are not sent to analytics or advertising trackers.

External websites—including awala.ai—are contacted only when you click the relevant link. Their own privacy notices then apply.

We retain personal data only for as long as necessary for the respective purpose. Statutory retention duties, the establishment or defence of legal claims, and security needs may require longer retention.

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with effect for the future.

You may also lodge a complaint with a data-protection supervisory authority. In Hesse, the Hessian Commissioner for Data Protection and Freedom of Information is the relevant authority: datenschutz.hessen.de.

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place when you visit this company website.