Privacy Policy
Last updated: September 17, 2026
1. Data protection at a glance
This privacy policy explains what happens to your personal data when you visit this website and use our shop. Personal data is any data by which you can be personally identified. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this privacy policy.
2. Controller
The controller responsible for data processing on this website is:
[BM Intelligence GmbH], [Von-Vincke-Straße 54, 33014 Bad Driburg, Germany]
Email: [privacy@mindsetgaming.gg] · Phone: [+49 …]
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Your rights
You have the right at any time to: obtain information about your stored data and its origin, recipients and purpose (Art. 15 GDPR); request correction (Art. 16), erasure (Art. 17) or restriction of processing (Art. 18); data portability (Art. 20); and to object to processing (Art. 21). Where processing is based on consent (Art. 6(1)(a)), you may withdraw it at any time with effect for the future.
You also have the right to lodge a complaint with the competent supervisory authority: [Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)].
4. Hosting
Our website is hosted by [hosting provider / Shopify / Lovable host]. When you visit our site, the provider processes technical data (e.g. IP address, request data, browser type) to deliver the website. Legal basis is our legitimate interest in the secure and efficient provision of our website (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the provider.
5. Server log files
The provider automatically collects and stores information in server log files that your browser transmits: browser type/version, operating system, referrer URL, host name, time of request, IP address. This data is not merged with other data sources; legal basis Art. 6(1)(f) GDPR.
6. Cookies & consent management
Our website uses cookies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR / § 25(2) TDDDG. All non-essential cookies (analytics, marketing) are only set with your consent (Art. 6(1)(a) GDPR / § 25(1) TDDDG) via our consent banner, and you can change or withdraw your choice at any time. See our Cookie Policy for details.
7. Order processing in the online shop
When you place an order, we process the data required to fulfil the contract (name, billing/shipping address, email, order details, payment data). Legal basis is Art. 6(1)(b) GDPR (performance of a contract). We pass on data as necessary to the shipping company and payment service provider commissioned with delivery/payment. Data required for commercial and tax law is retained for the statutory periods (generally 6–10 years).
8. Shop system / Shopify
Our shop is operated with Shopify ([Shopify International Ltd. / Shopify Inc.]). Shopify processes order, customer and usage data on our behalf to provide the shop and checkout. Details: https://www.shopify.com/legal/privacy
9. Payment service providers
For payment we use [PayPal, Stripe, Klarna, Apple Pay, credit card — list the ones you actually enable]. When you choose a payment method, the data required for payment is transmitted to the relevant provider (Art. 6(1)(b) and Art. 6(1)(f) GDPR). Each provider's privacy notice applies: [links].
10. Shipping
For delivery we share your address and, where you consent, your email/phone for shipment tracking with [DHL / DPD / … ] (Art. 6(1)(b) GDPR).
11. Contact & partnership forms
If you contact us via our contact or partnership forms or by email, your details are processed to handle the request (Art. 6(1)(b) or (f) GDPR) and stored until the request is settled and statutory retention periods expire.
12. Newsletter
If you subscribe, we use the double opt-in procedure and process your email on the basis of your consent (Art. 6(1)(a) GDPR) until you unsubscribe. Each newsletter contains an unsubscribe link.
13. Web analytics & marketing
We use Google Analytics 4 on the basis of your consent (Art. 6(1)(a) GDPR / § 25(1) TDDDG). Google Analytics only loads after you consent and IP addresses are anonymised where supported. You can withdraw consent at any time via the cookie settings in the footer. Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland — privacy notice: https://policies.google.com/privacy
14. Social media
We maintain profiles on Discord, Instagram, TikTok and YouTube and link to them. When you follow these links, the respective provider's privacy policy applies.
15. Data retention
We store personal data only as long as necessary for the stated purposes or as required by statutory retention obligations, after which it is deleted.
This privacy policy should be finalised with a legal generator reflecting the exact payment, shipping and analytics tools enabled at launch.