Privacy Policy

MINDMARQS TECHNOLOGIES L.L.C · Website Privacy Policy · Version 2.1 · Effective date: 1 November 2026

1. What this policy covers

This Privacy Policy explains how MINDMARQS TECHNOLOGIES L.L.C ("Mindmarqs", "we", "us") processes personal data when you visit our websites mindmarqs.com and mindmarqs.nl (together, the "Website") or contact us.

The Website is for information purposes only: it is not possible to register for, log in to or take assessments on the Mindmarqs platform through it. The Mindmarqs assessment platform is accessible only through a dedicated link, and its users receive a separate Tester Privacy Information before any personal data is collected.

Because we address individuals in the European Economic Area (EEA), our processing of their personal data is subject to the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

2. Data controller

MINDMARQS TECHNOLOGIES L.L.C
Limited liability company incorporated in Dubai, United Arab Emirates

Commercial Licence (DET) No. 1632533 · Register No. 2881493

Registered office: Office 1006-173, Al Muraqqabat, Deira, Dubai, United Arab Emirates

Email: privacy@mindmarqs.com

3. Our representative in the European Union

In accordance with Article 27 GDPR, we have appointed as our representative in the European Union:

MPSLAW Consulting S.r.l.
Via Marsala 6, 40126 Bologna, Italy · Email: consulenza@mpslaw.it · PEC: mpslaw.consulting@pec.mpslaw.it

You may contact our EU representative instead of, or in addition to, contacting us directly on any matter relating to the processing of your personal data. The representative also acts as our point of contact for EU supervisory authorities. Its appointment does not affect Mindmarqs' own responsibility as data controller.

4. Data we process, purposes and legal bases

DataPurposeLegal basis (GDPR)Retention
Technical data: IP address, browser and device type, operating system, pages requested, date and time of accessDeliver the Website, keep it secure, detect abuse and fix errorsLegitimate interests in operating a secure Website (Art. 6(1)(f))12 months, unless needed longer to investigate a security incident
Contact data: name, email address, organization and content of the emails you send us (e.g. to info@mindmarqs.com)Answer your questions and requests, including requests for information or a demoSteps taken at your request before entering into a contract (Art. 6(1)(b)); legitimate interests in responding to you (Art. 6(1)(f))Up to 3 years after the last exchange, unless a contractual relationship follows
Visit statistics: pages viewed, referring website, browser, operating system, device type and country, collected by Plausible Analytics without cookies. The IP address is used only momentarily and is not storedUnderstand how the Website is used and improve itLegitimate interests in measuring Website use without tracking individual visitors (Art. 6(1)(f))Visitor identifiers are discarded within 24 hours; only aggregated statistics are kept
Any of the above, where neededComply with legal obligations, establish or defend legal claimsLegal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f))For the time required by law or by the claim

The Website has no contact forms, no newsletter and no user accounts. The "Contact us" and "Ask for a demo" buttons and the email address in the footer simply open your own email program with a message addressed to info@mindmarqs.com. The Website itself does not collect, store or transmit what you write: we receive your data only if you decide to send the email.

The Website does not place cookies or store anything on your device.

We count visits with Plausible Analytics, which sets no cookies and does not store IP addresses. We do not use your data for profiling or automated decision-making.

Providing your data is voluntary, but without contact data we cannot reply to you.

5. Recipients

We share personal data only to the extent necessary with:

  • OVH SAS (OVHcloud) (France) — Website hosting, data centre in Strasbourg, acting as our data processor;
  • Plausible Insights OÜ (Estonia) — visit statistics for the Website, servers in Germany, acting as our data processor;
  • Luna S.r.l. (Italy) — building and maintaining the Website, acting as our data processor;
  • Microsoft Ireland Operations Ltd — email services (Microsoft 365), acting as our data processor;
  • MPSLAW Consulting S.r.l. (Italy) — our EU representative, for the requests it handles on our behalf;
  • public authorities, courts and professional advisors, where required by law or to establish, exercise or defend legal claims.

Our processors act only on our instructions and are bound by a written agreement under Article 28 GDPR.

6. International transfers

Mindmarqs is established in the United Arab Emirates. When you email us, you send your data directly to us; we process it in compliance with the GDPR. Our email provider, Microsoft, relies on the EU–U.S. Data Privacy Framework and Standard Contractual Clauses where data is transferred outside the EEA.

7. Links to social networks

The Website contains links to our pages on LinkedIn, Facebook, Instagram and TikTok. These are simple links: no data is sent to the social networks until you click them. Once you visit those pages, the respective platform's privacy policy applies.

8. Your rights

Under the GDPR you have the right to access your personal data, have it corrected or deleted, restrict its processing, receive it in a portable format, and object at any time to processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time.

To exercise your rights, email privacy@mindmarqs.com with the subject "Privacy Request", or contact our EU representative (Section 3). We will reply within one month.

You also have the right to lodge a complaint with the supervisory authority of the EU Member State where you live, work or where the alleged infringement took place — for example, in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

If you are in Switzerland, the Swiss Federal Act on Data Protection (FADP) also applies, and you can contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

9. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS) and access controls.

10. Children

The Website is not directed at children under 16, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. The version number and effective date at the top show when it was last changed.

Version 2.1 · Effective 1 November 2026 · Replaces version 1.0