Privacy policy

1. Controller

Responsible

MIRSYON — sole proprietorship
Owner: Miraç Söyler
Tannenstraße 37, 46149 Oberhausen, Germany
Phone: +49 162 7474746
E-mail: kontakt@mirsyon.com

2. Visiting the website (server logs)

When you open this website, your browser transmits technically necessary data which our hosting provider stores in server log files: IP address, date and time of the request, the address requested, the volume of data transferred, the referrer and the browser and operating system identification.

Purpose: delivering the page, operational security, defence against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and trouble-free operation). Storage period: as a rule 7 days, then automatic deletion.

3. Hosting

This website is operated at ALL-INKL.COM — Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider. The server logs described in section 2 are created there. No transfer to third countries takes place in connection with the hosting.

4. Contacting us

The contact form on this website does not transmit any data to our server: your entries are assembled locally in your browser into an e-mail which your own mail programme opens. Only when you send that message yourself do your details reach us.

We process the data from your enquiry (name, contact details, content) in order to handle your request. Legal basis: Art. 6(1)(b) GDPR for pre-contractual measures, otherwise Art. 6(1)(f) GDPR. Storage period: until the request has been dealt with, beyond that only where commercial or tax retention obligations apply.

5. Assistant (chat window)

Our website offers an assistant you can use to ask questions about our services. Your input is transmitted to our server at the hosting provider named in section 3 in Germany and processed there.

No third-party language model is currently used. The answers are generated from a knowledge base on our own server; your input is not transmitted to any provider of artificial intelligence, nor to any other third party. Should we use a language model of an external provider in future, we will name the provider, the third country and the legal basis here in advance.

In order to fend off automated mass requests, we count the requests per connection. For this purpose, a checksum (SHA-256) that cannot be reversed is created from your IP address and the current hour; the IP address itself is not stored and the checksum expires when the hour changes. We log conversations without IP address and without contact details in order to recognise recurring questions and improve the answers.

Purpose: answering your enquiry, preventing misuse and improving our answers. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing quick information and in operation free of misuse), Art. 6(1)(b) GDPR for pre-contractual matters. Storage period: conversation logs for up to 12 months, then deletion.

Your contact details, together with the conversation, only reach us once you expressly send an enquiry from the assistant. We treat that data like any other contact request (see section 4). Please do not enter personal data of third parties or any special categories of personal data in the conversation.

6. Cookies, local storage and analytics

Technically necessary: we do not set any cookies when you merely open this website. Your decision on analytics is stored exclusively in your browser (local storage, key “mirsyon-einwilligung”) so that the notice does not appear again on every visit. This storage is strictly necessary for the service you requested (§ 25 (2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act) and is not transmitted to us or to any third party.

Google Analytics 4 — only with your consent: if you select “Accept” in the notice, we use Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure which pages are read. The Google script is only loaded after your consent; without consent no connection to Google is established and no data is transmitted to Google.

With your consent, Google sets the cookies _ga and _ga_* (lifetime of up to two years) and processes the shortened IP address, device and browser details, the pages opened, the time spent and the approximate location. Google signals, advertising features and personalised advertising are switched off. The event data is retained by Google for no longer than 14 months.

Legal basis: your consent under Art. 6(1)(a) GDPR and § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act).

Withdrawal: you can withdraw your consent at any time with effect for the future, or give it later on — via the Cookie settings link in the footer of every page. In addition, you can prevent the collection of data by using the browser add-on provided by Google.

Transfer to third countries: Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023, Art. 45 GDPR); in addition, the standard contractual clauses of the EU Commission apply (Art. 46(2)(c) GDPR). Further information: policies.google.com/privacy.

No other third-party integrations: fonts, scripts, images and styles are delivered exclusively by our own server. When you open a page, no connection to Google Fonts, to a content delivery network or to social networks is established. No third-party maps, videos or buttons are embedded.

7. Transfer to third countries

As a matter of principle, no personal data is transferred to countries outside the EU or the EEA. The only exception is the analytics with Google Analytics described in section 6, which takes place exclusively with your consent and is safeguarded by the EU-US Data Privacy Framework and by standard contractual clauses. Hosting, e-mail and the assistant are operated entirely in Germany.

8. Data protection officer

No data protection officer has been appointed, as the legal requirements under Art. 37 GDPR and § 38 BDSG (German Federal Data Protection Act) are not met. The contact for all data protection matters is the controller named in section 1.

9. Your rights

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

A message to kontakt@mirsyon.com is sufficient to exercise these rights.

10. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

11. Data security

Transmission is encrypted via HTTPS (TLS). Access to our systems is limited to authorised persons and is logged.

12. Status

This policy will be adapted as soon as the functionality of the website changes. Status: October 2026.