Privacy Policy

Controller

Mehmet Sahin
Ostendstraße 19
64319 Pfungstadt
Deutschland
E-Mail: info@mallhub.io

Hosting

This website is hosted by Amazon Web Services (AWS) in the eu-central-1 (Frankfurt) region. When accessing the website, connection data (IP address, timestamp, page accessed) is automatically recorded in server log files. This data is technically necessary and is not merged with other data sources.

Contact via email

If you contact us by email, your data (name, email address, message content) will be processed to handle your enquiry. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry). Your data will be deleted once the purpose of storage no longer applies.

Analytics & Monitoring on center subdomains

The center subdomains operated via mallhub.io (e.g. rhein-center.mallhub.io) use the services described below for analytics and error logging. This processing takes place only on center subdomains, not on this marketing website.

Google Analytics 4

On center subdomains we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). This only takes place after your explicit consent (Art. 6(1)(a) GDPR). Google Analytics records pseudonymised usage data such as page views and time on site. IP addresses are anonymised before transmission (IP anonymisation enabled). Ad personalisation and Google Signals are disabled. You can withdraw your consent at any time via the cookie banner. Further information: policies.google.com/privacy

Error logging (Sentry)

We use Sentry (Functional Software, Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA; EU data processing in Frankfurt/Main) to detect and fix technical errors. Server-side error logs are processed without your consent on the basis of our legitimate interest in the security and reliability of the platform (Art. 6(1)(f) GDPR). IP addresses and user identifiers are automatically removed before transmission. Client-side error logs (in the browser) are only transmitted after your consent (Art. 6(1)(a) GDPR) via the cookie banner. Further information: sentry.io/privacy

If you have given consent, Sentry additionally records the course of your session (session replay). This captures page structure, clicks, mouse movements, scrolling, console and network events and timestamps, so that errors can be reproduced in their actual usage context. All text content, input fields and media are masked in your browser before transmission — what is transmitted is the structure of the page, not its content. At present every session is recorded, not only sessions with errors. The legal basis is your consent (Art. 6(1)(a) GDPR); without consent no recording takes place. You can withdraw your consent at any time via the cookie banner. Recordings are deleted automatically after 90 days.

Cookie consent

Your cookie decision is stored locally in your browser (localStorage, key: mh_consent) for 12 months. No additional cookie is set. You can withdraw your consent at any time by clearing your browser data or resetting consent via the cookie banner.

User accounts & authentication

To access the platform (center subdomains and admin area) we process email addresses, password hashes and session data (authentication tokens, login timestamps). Processing is based on Art. 6(1)(b) GDPR (contract performance). We use Amazon Cognito as our authentication service (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg; data processed in the eu-central-1 region, Frankfurt). Your access data will be deleted once your account is closed on request.

Error logging in the admin area (Sentry)

In the admin area of the platform, which is used exclusively by centre operators and their employees, error logging via Sentry is permanently active. No separate consent is required as this is a B2B software tool used within a contractual relationship. Processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in the security and reliability of the software). IP addresses and user identifiers are automatically removed before transmission. Further information: sentry.io/privacy

Error logging also includes recording of the session flow (session replay): page structure, clicks, navigation and input events, and console and network events. Text content, input fields and media are masked in the browser before transmission; what is transmitted is the structure of the application, not the content displayed. At present every session is recorded. Recordings are deleted automatically after 90 days.

Fonts

This website uses the DM Sans typeface. Font files are downloaded at build time and subsequently served exclusively from our own servers. No requests are made to Google servers.

Data transfers to third countries

Some of the services we use (Sentry, Google Analytics) are based in the USA. The transfer of personal data to the USA is carried out on the basis of Standard Contractual Clauses approved by the EU Commission (Art. 46(2)(c) GDPR). Sentry and Google are also certified under the EU-U.S. Data Privacy Framework. Data processing takes place primarily in the EU (Frankfurt/Main).

Automated decision-making

We do not use automated decision-making including profiling within the meaning of Art. 22 GDPR.

Your rights

You have the following rights with regard to your personal data:

Right of access (Art. 15 GDPR) · Right to rectification (Art. 16 GDPR) · Right to erasure (Art. 17 GDPR) · Right to restriction of processing (Art. 18 GDPR) · Right to data portability (Art. 20 GDPR) · Right to object to processing (Art. 21 GDPR) · Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us (Art. 77 GDPR). Competent authority: Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de

For questions about data processing, please contact info@mallhub.io.