Your Rights Under the GDPR
Last updated: 28 September 2026
The EU General Data Protection Regulation (GDPR) gives you rights over your personal data. This page explains each right in plain words and how to use it with Mindomax. What data we process, and why, is described in our privacy policy.
Who is responsible
MindomaxHannover area, GermanyEmail: narcilium@gmail.comMindomax is run by a private individual in Germany, so the GDPR and German data protection law apply.
How to use your rights
Write to narcilium@gmail.com and say which right you want to use. If you write from the email address you sign in with, we can confirm more easily that the request comes from you. It costs nothing. We answer within the time limits set by the GDPR.
Right of access (Article 15)
You can ask whether we process data about you and get a copy of it, together with why we use it, who receives it and how long we keep it.
Right to rectification (Article 16)
If data about you is wrong or incomplete, you can have it corrected. You can also change most of your content directly in the app.
Right to erasure (Article 17)
You can have your data deleted. The quickest way is to delete your account in the app: this removes your database entries and the files you stored with us. Backups are kept for a limited time and then overwritten; deleted data disappears from them when they are overwritten. You can also ask us by email.
Right to restriction of processing (Article 18)
In certain cases — for example while we check whether your data is correct — you can ask us to keep your data but not to use it otherwise.
Right to data portability (Article 20)
You can receive the data you gave us in a structured, commonly used and machine-readable format, or ask us to send it directly to another provider where this is technically possible.
Right to object (Article 21)
Where we process data on the basis of our legitimate interest — for example security and abuse-prevention logs — you can object on grounds relating to your particular situation. We then stop, unless we have compelling legitimate grounds that override your interests.
Withdrawing consent (Article 7(3))
Where we rely on your consent — on the website this is only the visit statistics from Google Analytics and Ahrefs — you can withdraw it at any time with effect for the future. To do so, click “Cookie settings” at the bottom of this page: the cookie banner appears again and you can decline.
Right to lodge a complaint (Article 77)
You can complain to a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen) in Hanover.
Data outside the EU
Your account and files are stored on servers in Germany. Some recipients are based outside the EU/EEA, so your data can also be processed there. In the United States: Google (Gemini for the AI features, Google Analytics after your consent, Google sign-in, and YouTube when you add a YouTube link), Apple (Apple sign-in), Cloudflare (carries traffic to our website and to the servers our apps connect to) and Runware (image generation). In Singapore: Ahrefs (Ahrefs Analytics after your consent). Where a recipient is certified under the EU-US Data Privacy Framework, the transfer is based on the European Commission's adequacy decision (Article 45 GDPR); otherwise it is based on the EU Standard Contractual Clauses (Article 46(2)(c) GDPR). You can request a copy of these safeguards at narcilium@gmail.com.
Contact
For any question about your rights, write to narcilium@gmail.com.